Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZLFGJXoi2-gxb1d-BEmauxEC4n4.roa
File: ZLFGJXoi2-gxb1d-BEmauxEC4n4.roa (raw, json)
Hash identifier: j3xFlpfQhP1FGIhdg9t6rBOMmDxsYBr3IIfULrnUWOw=
Subject key identifier: 64:B1:46:25:7A:22:DB:E8:31:6F:57:7E:04:49:9A:BB:11:02:E2:7E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D3DF80688739B503C0D6B8460914C9372
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZLFGJXoi2-gxb1d-BEmauxEC4n4.roa
Signing time: Mon 30 Mar 2026 08:59:17 +0000
ROA not before: Mon 30 Mar 2026 08:59:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.18.48.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.229.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:f8:06:88:73:9b:50:3c:0d:6b:84:60:91:4c:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 30 08:59:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64b146257a22dbe8316f577e04499abb1102e27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:a9:32:ab:7e:9d:a1:6f:af:b2:cf:0b:6c:
a1:b9:6c:b6:12:88:d0:6f:ee:75:19:01:24:a2:f7:
8f:a0:12:53:68:0f:fe:3b:7f:20:a1:ff:9f:47:5f:
5f:60:10:e9:8b:3d:a7:a5:1f:2b:96:0a:86:fe:65:
d9:43:8d:15:06:6f:6f:a2:ae:85:80:2f:a2:a2:77:
6d:f9:ca:31:f9:bd:37:da:38:70:2c:09:db:f9:8b:
56:37:d1:b2:da:3d:cb:00:06:60:86:02:78:07:36:
e0:b8:6b:ec:2e:b4:ed:fb:3f:f0:91:46:61:c9:02:
a4:f7:d4:fe:63:43:6d:e2:47:39:f2:b6:d9:7b:98:
2e:19:24:3b:4c:23:80:39:ca:13:08:7f:b2:7b:6c:
1b:3b:9b:d6:15:79:f2:bf:8c:9c:79:99:c6:53:d4:
31:f6:70:00:8c:52:ab:8f:67:2f:73:04:5c:0b:1a:
dd:c8:53:9b:0a:fd:e6:15:7a:21:2e:9d:c2:5b:d8:
31:d7:a9:25:a2:5b:73:bd:a4:08:3a:02:3b:d9:e1:
2e:b1:f4:d5:91:ef:05:6a:bd:df:7f:73:8d:4f:a1:
0f:61:19:10:6b:d4:47:bc:e1:12:f5:28:31:f4:33:
81:37:a9:10:8b:e0:4c:58:0b:5a:f1:14:fe:f9:b5:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B1:46:25:7A:22:DB:E8:31:6F:57:7E:04:49:9A:BB:11:02:E2:7E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZLFGJXoi2-gxb1d-BEmauxEC4n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
109.121.45.0/24
109.121.47.0/24
178.219.6.0/24
178.253.229.0/24
185.47.91.0/24
188.255.198.0/24
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
36:58:0c:2b:89:80:b8:62:af:03:4b:32:c9:31:f5:71:bf:f0:
0f:50:d9:42:ca:8d:af:e3:5a:29:04:72:23:34:80:4a:79:b5:
8a:06:f1:79:40:bf:c7:89:59:15:48:9e:ec:8c:f6:77:ab:bd:
2d:2a:bd:59:08:6a:0d:2c:68:e8:31:0c:a4:a7:a5:ab:78:d3:
7b:d5:f9:2e:e8:a3:f2:97:a8:b1:82:c6:9b:4f:d9:4e:6e:8c:
ca:30:33:83:34:59:ff:3b:55:97:52:3b:eb:28:dc:ff:56:46:
2e:28:22:12:05:c4:ff:dd:1b:11:7d:93:e1:77:58:a2:66:36:
c6:6d:54:15:13:a2:a9:9a:a2:b3:49:64:fd:0d:36:73:58:a3:
48:9e:09:dd:f4:08:08:8c:7a:c1:e4:6e:4e:77:9c:87:a0:48:
29:fe:fc:d8:cf:79:af:35:e1:cb:26:aa:2e:02:37:d9:37:14:
c3:6a:d3:30:10:8b:53:02:b6:46:5e:6a:d7:75:79:bb:84:5c:
26:ec:1c:d5:59:17:1b:3c:b5:2f:41:c9:3f:28:7c:c3:2c:5b:
de:2d:53:d4:96:a8:02:db:88:d0:6e:36:8d:03:4d:08:4e:b4:
01:37:3d:07:46:5e:16:2f:3c:ed:28:96:c3:69:c1:ba:c0:0b:
83:82:fe:7e
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ09+AaIc5tQPA1rhGCRTJNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwMzMwMDg1OTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGIxNDYyNTdhMjJkYmU4MzE2ZjU3N2UwNDQ5OWFiYjExMDJlMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1OpMqt+naFvr7LPC2yhuWy2EojQ
b+51GQEkovePoBJTaA/+O38gof+fR19fYBDpiz2npR8rlgqG/mXZQ40VBm9voq6F
gC+iondt+cox+b032jhwLAnb+YtWN9Gy2j3LAAZghgJ4BzbguGvsLrTt+z/wkUZh
yQKk99T+Y0Nt4kc58rbZe5guGSQ7TCOAOcoTCH+ye2wbO5vWFXnyv4yceZnGU9Qx
9nAAjFKrj2cvcwRcCxrdyFObCv3mFXohLp3CW9gx16kloltzvaQIOgI72eEusfTV
ke8Far3ff3ONT6EPYRkQa9RHvOES9Sgx9DOBN6kQi+BMWAta8RT++bX3XwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFGSxRiV6ItvoMW9XfgRJmrsRAuJ+MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvWkxGR0pYb2kyLWd4YjFkLUJFbWF1eEVDNG40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAURIwAwQA
bXktAwQAbXkvAwQAstsGAwQAsv3lAwQAuS9bAwQAvP/GAwQA1EUIMA0GCSqGSIb3
DQEBCwUAA4IBAQA2WAwriYC4Yq8DSzLJMfVxv/APUNlCyo2v41opBHIjNIBKebWK
BvF5QL/HiVkVSJ7sjPZ3q70tKr1ZCGoNLGjoMQykp6WreNN71fku6KPyl6ixgsab
T9lObozKMDODNFn/O1WXUjvrKNz/VkYuKCISBcT/3RsRfZPhd1iiZjbGbVQVE6Kp
mqKzSWT9DTZzWKNIngnd9AgIjHrB5G5Od5yHoEgp/vzYz3mvNeHLJqouAjfZNxTD
atMwEItTArZGXmrXdXm7hFwm7BzVWRcbPLUvQck/KHzDLFveLVPUlqgC24jQbjaN
A00ITrQBNz0HRl4WLzztKJbDacG6wAuDgv5+
-----END CERTIFICATE-----
Generated at Tue Mar 31 00:27:49 2026 by rpki-client