Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/ZSRYd-oEOWIYWRTOZmVIZa-uT7k.roa
File: ZSRYd-oEOWIYWRTOZmVIZa-uT7k.roa (raw, json)
Hash identifier: DyoCAZoiTd65FmyfQm5Qx0afgkLxd2GOO46pQuuk/HQ=
Subject key identifier: 65:24:58:77:EA:04:39:62:18:59:14:CE:66:65:48:65:AF:AE:4F:B9
Certificate issuer: /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial: 019EC603B338721F2181B2EF7EAB51932C5A
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/ZSRYd-oEOWIYWRTOZmVIZa-uT7k.roa
Signing time: Sun 14 Jun 2026 12:03:11 +0000
ROA not before: Sun 14 Jun 2026 12:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14956
IP address blocks: 153.75.80.0/24 maxlen: 24
153.75.81.0/24 maxlen: 24
153.75.82.0/24 maxlen: 24
153.75.83.0/24 maxlen: 24
153.75.84.0/24 maxlen: 24
153.75.85.0/24 maxlen: 24
153.75.86.0/24 maxlen: 24
153.75.87.0/24 maxlen: 24
153.75.89.0/24 maxlen: 24
153.75.90.0/24 maxlen: 24
153.75.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:03:b3:38:72:1f:21:81:b2:ef:7e:ab:51:93:2c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Validity
Not Before: Jun 14 12:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65245877ea043962185914ce66654865afae4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:82:fc:22:45:1a:eb:f7:eb:4c:71:da:64:
9d:09:f7:cb:26:d4:0d:78:4c:08:ae:80:bc:b7:49:
96:7e:f4:b4:9f:1a:c6:4e:a5:49:29:4a:66:0e:d3:
80:6a:cf:a7:e5:8c:9c:63:04:76:ae:7f:c8:e1:bb:
3f:75:1f:41:ba:7b:88:ec:50:b0:f2:cd:cf:2c:38:
9e:0e:8c:2c:d4:18:b5:fa:6c:39:59:90:a5:d3:b2:
94:01:a8:f0:51:60:35:c2:00:7c:62:27:36:3c:6c:
5c:ea:4b:15:59:6f:a1:9c:a2:ef:2a:7f:c0:3a:d3:
11:1e:a9:04:b4:5d:d3:36:1f:37:cc:da:a6:93:37:
29:a7:56:96:a6:97:16:8b:18:6c:dd:a3:08:c8:2d:
d0:0c:70:63:c5:39:00:c2:57:67:32:6e:91:0a:ab:
80:f8:24:ce:aa:f1:5f:e4:fc:9f:69:48:83:c8:22:
4d:7e:d5:75:d0:52:53:e4:52:e4:2e:7c:be:1b:67:
cb:d2:77:d5:ba:97:75:5f:d6:9b:9c:60:10:d4:76:
26:cc:0b:ac:c7:b5:51:60:95:af:2f:33:b6:32:60:
9b:23:2c:ab:3f:b7:e0:2b:ef:d4:71:8f:95:6b:76:
a7:07:c3:f9:59:d8:63:21:58:42:f5:3f:2b:9a:33:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:58:77:EA:04:39:62:18:59:14:CE:66:65:48:65:AF:AE:4F:B9
X509v3 Authority Key Identifier:
keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/ZSRYd-oEOWIYWRTOZmVIZa-uT7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.75.80.0/21
153.75.89.0-153.75.91.255
Signature Algorithm: sha256WithRSAEncryption
6d:5d:3c:6c:b4:46:25:55:b7:44:46:af:20:10:13:62:9a:10:
85:8c:3f:cc:e5:53:db:2a:5c:c4:af:be:1b:80:e9:02:43:b6:
f8:48:b9:30:05:46:96:03:08:95:f4:bd:bf:20:07:dc:11:0a:
28:f5:4e:bc:0c:78:fc:c1:7c:b3:9c:7f:aa:a9:69:a6:27:5b:
c5:ce:95:97:a3:83:42:9d:9f:a1:d2:76:02:b8:21:f8:e1:cc:
b1:53:7c:99:ad:62:89:94:a4:62:e6:a9:b6:30:b7:b1:f7:1b:
49:39:3c:27:99:04:96:33:58:a8:60:10:8b:d2:16:8f:23:8f:
c3:7b:32:85:8d:c1:6a:01:1c:4c:a1:d0:a1:fa:e4:3f:0f:81:
7c:28:c2:3f:35:74:44:e5:ac:9f:ce:21:7f:12:10:1d:09:8e:
55:a4:28:62:b8:b0:69:c8:69:fc:ac:33:6f:f1:c2:79:08:81:
59:b0:28:2c:31:c9:96:6b:3f:87:c7:fc:3b:83:e0:15:4d:14:
49:ae:b9:3c:60:c0:74:cc:34:57:1f:04:b3:95:3e:ec:3c:aa:
a2:71:33:50:92:9d:48:ed:25:28:69:31:cc:ad:37:b3:61:a3:
a4:05:32:40:8f:f1:23:45:f3:09:9f:30:29:4e:ae:66:43:be:
8f:ae:31:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 26 14:40:04 2026 by rpki-client