Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5168af-3102-4f7a-b649-887eba0b17d4/1/zavOa8wS__j90fjN8r2cF50mun0.roa
File: zavOa8wS__j90fjN8r2cF50mun0.roa (raw, json)
Hash identifier: 2Bs9L3UwteY37U5Ess69Nt6UhGdSZqY1GpYjieU9rHo=
Subject key identifier: CD:AB:CE:6B:CC:12:FF:F8:FD:D1:F8:CD:F2:BD:9C:17:9D:26:BA:7D
Certificate issuer: /CN=162fcb467a9d9a65992ca831eae79bb8d6fc5cbf
Certificate serial: 019CC9ADF5CA8F1603AFE02BB4730DEF3985
Authority key identifier: 16:2F:CB:46:7A:9D:9A:65:99:2C:A8:31:EA:E7:9B:B8:D6:FC:5C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi_LRnqdmmWZLKgx6uebuNb8XL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5168af-3102-4f7a-b649-887eba0b17d4/1/zavOa8wS__j90fjN8r2cF50mun0.roa
Signing time: Sat 07 Mar 2026 19:02:26 +0000
ROA not before: Sat 07 Mar 2026 19:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 46.232.176.0/21 maxlen: 24
91.221.118.0/23 maxlen: 24
185.67.192.0/22 maxlen: 24
193.33.128.0/23 maxlen: 24
194.150.248.0/23 maxlen: 24
195.182.222.0/23 maxlen: 24
2a02:6200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5168af-3102-4f7a-b649-887eba0b17d4/1/Fi_LRnqdmmWZLKgx6uebuNb8XL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5168af-3102-4f7a-b649-887eba0b17d4/1/Fi_LRnqdmmWZLKgx6uebuNb8XL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi_LRnqdmmWZLKgx6uebuNb8XL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ad:f5:ca:8f:16:03:af:e0:2b:b4:73:0d:ef:39:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162fcb467a9d9a65992ca831eae79bb8d6fc5cbf
Validity
Not Before: Mar 7 19:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdabce6bcc12fff8fdd1f8cdf2bd9c179d26ba7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:6c:45:0a:c3:f8:e4:d6:69:31:3d:09:c0:
54:79:b8:ec:bb:2d:b1:2e:15:35:00:2f:86:48:20:
50:0a:f2:f2:50:90:18:eb:31:e8:19:6e:bc:cf:26:
bb:40:f8:87:97:a9:61:23:b3:a4:a3:79:20:1f:5b:
d5:8e:f1:2b:cd:7a:c8:65:2a:ee:4e:bc:66:47:f2:
61:c1:44:9a:31:fe:d2:23:36:6c:d6:ae:30:6c:01:
70:cf:21:ab:62:b3:d5:29:05:f7:c1:8c:a2:58:7f:
e3:de:66:4e:47:01:9b:fa:5e:81:a9:bb:e8:3b:6a:
e7:f1:3c:3e:1a:5e:a1:3e:f6:88:a7:91:f3:35:ed:
83:9a:17:23:be:fe:d7:ce:c5:3b:f5:c7:ef:f6:e5:
36:9e:3e:bf:0e:c5:b6:fc:c0:8b:ca:22:97:b8:ae:
27:9b:d8:9f:87:1f:ab:45:eb:97:75:9c:4f:b2:b7:
92:33:a4:9b:eb:47:fd:e6:ca:25:97:fb:77:4f:82:
4d:dc:6c:00:7d:96:3e:90:27:14:87:11:4c:e0:d0:
74:69:05:dc:2b:d2:70:7c:3b:01:71:61:0b:50:79:
d4:0d:1f:3b:3b:26:c1:f3:76:2c:00:b3:98:a4:67:
67:a8:fe:e3:2c:c7:5f:fa:2a:35:48:ae:ed:1e:88:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:CE:6B:CC:12:FF:F8:FD:D1:F8:CD:F2:BD:9C:17:9D:26:BA:7D
X509v3 Authority Key Identifier:
keyid:16:2F:CB:46:7A:9D:9A:65:99:2C:A8:31:EA:E7:9B:B8:D6:FC:5C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_LRnqdmmWZLKgx6uebuNb8XL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5168af-3102-4f7a-b649-887eba0b17d4/1/zavOa8wS__j90fjN8r2cF50mun0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5168af-3102-4f7a-b649-887eba0b17d4/1/Fi_LRnqdmmWZLKgx6uebuNb8XL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.176.0/21
91.221.118.0/23
185.67.192.0/22
193.33.128.0/23
194.150.248.0/23
195.182.222.0/23
IPv6:
2a02:6200::/29
Signature Algorithm: sha256WithRSAEncryption
75:28:15:c4:4f:7e:a2:dc:01:b8:ba:0e:58:e5:ce:47:40:7f:
06:0b:f4:78:67:3f:1b:e7:b0:70:13:c2:c6:95:f9:15:06:f1:
e0:5f:0e:b5:e6:c3:f7:0d:5a:56:3f:64:3d:54:51:b0:c3:12:
6b:63:3c:26:42:5a:f1:5e:00:2a:74:91:2b:85:72:41:ab:8b:
5a:3e:6a:c3:f6:88:4f:e6:0c:d9:34:91:88:f3:32:f1:96:fe:
89:fa:84:de:e1:ea:a6:62:16:a7:85:07:e3:bd:11:bb:d3:40:
2e:34:c4:92:19:34:40:87:58:c4:fd:4a:eb:43:7d:75:2b:54:
8e:fc:ae:ae:ad:a3:1e:51:f2:e0:9c:06:e1:e3:fe:6f:b5:19:
d8:ad:aa:27:c3:6b:fd:ba:61:d6:cd:8e:20:73:e2:b0:46:7c:
bf:19:1d:58:b8:96:f9:25:08:f3:b7:88:4b:b3:42:0e:4d:e1:
44:30:af:f8:89:7c:0b:f5:d9:7a:e2:95:56:fd:af:88:05:da:
7f:d1:ce:75:97:26:9f:8d:8a:da:6c:4a:11:03:e2:20:81:7d:
9a:2a:fd:2d:1e:d1:07:3d:9d:c9:3a:64:10:08:d7:69:8a:5a:
a4:69:e9:e8:f0:17:91:6a:92:e6:01:f1:4a:49:a1:fc:ca:d9:
1a:14:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:15:15 2026 by rpki-client