Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ZUZKigcRokAFctlx1iQjULPyUSo.roa
File: ZUZKigcRokAFctlx1iQjULPyUSo.roa (raw, json)
Hash identifier: styNDR1Il94XuCdEFnDC/EZfuJnHg+csGYNt1Gch1OY=
Subject key identifier: 65:46:4A:8A:07:11:A2:40:05:72:D9:71:D6:24:23:50:B3:F2:51:2A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A145BDFEBB27347BC17FF17F4CD35B2D52
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ZUZKigcRokAFctlx1iQjULPyUSo.roa
Signing time: Fri 16 Oct 2026 17:24:01 +0000
ROA not before: Fri 16 Oct 2026 17:24:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218852
IP address blocks: 45.130.187.0/24 maxlen: 24
45.152.137.0/24 maxlen: 24
194.28.159.0/24 maxlen: 24
194.53.191.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bd:fe:bb:27:34:7b:c1:7f:f1:7f:4c:d3:5b:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 16 17:24:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65464a8a0711a2400572d971d6242350b3f2512a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:3f:e5:4d:9b:d7:c0:66:60:a5:9e:79:e0:
06:fc:15:72:e9:db:8a:c7:5b:ac:5d:fb:59:ab:f5:
b9:48:9b:3c:57:7d:a7:59:36:1f:66:e7:52:f4:50:
47:56:f9:aa:c8:66:5a:f7:e6:2e:ba:46:de:4c:b1:
9c:bc:63:e0:e0:bc:45:43:a9:9a:fd:84:6e:0e:2c:
6c:b0:7d:af:12:65:e5:da:46:3c:47:fe:42:f7:cf:
ef:8f:60:84:4d:cf:4b:de:78:da:3f:26:2b:cd:a7:
9e:cc:72:bc:9a:73:2c:7b:43:91:38:7c:79:54:e3:
22:59:53:e5:88:4e:38:f8:30:ee:8e:76:33:21:43:
77:85:a6:a1:1f:29:cd:7b:bd:38:dc:21:6a:8a:50:
cf:0b:0b:ff:77:89:3a:ec:c0:71:af:31:a0:fe:00:
f3:63:28:60:16:86:42:05:83:c7:27:1a:7a:2c:45:
3f:62:6b:e0:3c:9f:3b:8a:62:76:e2:27:e3:4e:d5:
45:f9:46:a9:77:c2:4f:fc:dc:e0:74:9b:50:e5:a5:
00:16:86:73:b7:b7:91:33:a3:72:73:b4:f1:e4:59:
d6:5c:7e:06:0a:93:1d:ad:97:bc:85:be:21:79:fc:
77:c8:f3:3f:1c:6c:30:19:14:a0:20:a1:ce:48:9e:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:4A:8A:07:11:A2:40:05:72:D9:71:D6:24:23:50:B3:F2:51:2A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ZUZKigcRokAFctlx1iQjULPyUSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.187.0/24
45.152.137.0/24
194.28.159.0/24
194.53.191.0/24
212.69.134.0/24
Signature Algorithm: sha256WithRSAEncryption
27:33:f4:71:64:9c:b6:eb:7a:b5:d5:19:83:b2:a4:18:f0:3c:
4b:2e:63:52:49:ff:f6:67:39:55:e7:8a:69:dc:14:31:c8:a0:
43:9e:ce:ab:75:b4:f9:ed:5d:f6:f6:f9:20:73:9d:01:5f:3a:
57:53:12:4e:eb:b6:c4:b4:fd:9d:5b:c2:f8:04:77:5c:20:5c:
dd:de:5f:50:22:09:3a:c1:f8:82:5c:f5:7b:03:f8:23:d5:96:
55:e6:2b:86:50:df:d2:d1:4b:76:28:9a:e7:41:73:3b:53:a1:
46:7c:7e:c4:22:5b:d7:25:f3:31:9d:cb:51:d4:1b:7f:d2:05:
fc:ca:92:5f:94:b3:cd:34:6f:5c:2e:e9:d9:85:f8:72:90:b5:
93:4d:8d:b1:09:2f:11:2f:2f:4d:fc:7f:47:da:e8:f5:21:65:
8b:f3:7d:ed:e9:97:d2:2a:5d:d2:1b:45:75:75:01:f0:40:b9:
8d:3c:3e:2b:17:07:81:c5:4f:8a:58:a9:1a:47:15:c0:25:b5:
68:5b:b0:e3:74:a5:e2:9e:c3:fc:b6:2f:bc:64:c8:d4:db:59:
09:5d:f0:fa:e5:2b:8f:2c:aa:12:03:4e:54:6f:16:e3:3a:1b:
ff:24:fa:40:48:ba:ee:3e:f3:4d:db:23:0d:31:99:fe:4c:56:
27:73:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:39:58 2026 by rpki-client