Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4ZS-WaUYL1kP069etWT7W2cUGrU.roa
File: 4ZS-WaUYL1kP069etWT7W2cUGrU.roa (raw, json)
Hash identifier: Khq7zJYIhAOjWKWXdM2IRgzhdtb7ZW+WXtqE94nEBhs=
Subject key identifier: E1:94:BE:59:A5:18:2F:59:0F:D3:AF:5E:B5:64:FB:5B:67:14:1A:B5
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C082B486C766BBF4EC4DD66496DA
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4ZS-WaUYL1kP069etWT7W2cUGrU.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56975
IP address blocks: 185.212.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c0:82:b4:86:c7:66:bb:f4:ec:4d:d6:64:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e194be59a5182f590fd3af5eb564fb5b67141ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:ad:e7:c7:2e:5a:2c:8b:e5:15:5e:e3:b3:
0c:52:9c:94:dc:ba:b1:6f:ce:98:e2:b3:a4:8b:8e:
2e:85:7c:fc:62:41:ee:c7:29:f4:ce:3b:42:18:b9:
48:91:c9:cc:b2:be:f5:c7:42:be:29:7e:c7:0e:b5:
ea:df:27:46:dd:38:b3:dc:34:2a:4e:3e:a3:0d:2a:
c3:c0:c3:00:53:dd:8b:b4:17:a4:48:3f:fa:5f:7e:
30:71:16:ca:45:ed:87:d6:1d:1f:34:ad:79:44:19:
fd:00:c7:25:b6:0b:ba:f5:f3:65:36:49:71:c7:4b:
c0:68:09:5c:77:82:22:a7:b1:8a:7e:86:63:32:b1:
12:46:fc:51:30:fc:0c:f2:2f:3e:a2:4b:ef:dd:1d:
84:b0:6c:da:38:71:6d:08:81:31:56:ad:44:8e:23:
d6:9f:05:8a:ac:5d:fb:3f:50:58:2b:7e:d3:70:31:
13:92:57:08:fc:e4:60:56:6f:ca:40:6e:fa:2f:57:
46:e4:65:68:8c:ed:db:19:2a:29:25:e0:5b:46:c0:
85:ec:8b:43:e7:d2:49:7a:a8:dc:99:0e:72:3c:73:
17:5c:5f:43:9b:cb:3e:0a:0d:b7:20:a6:63:0c:9f:
e4:7e:f6:a8:98:d3:33:03:eb:01:30:c4:d4:33:0c:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:BE:59:A5:18:2F:59:0F:D3:AF:5E:B5:64:FB:5B:67:14:1A:B5
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4ZS-WaUYL1kP069etWT7W2cUGrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9d:6a:1c:2f:14:c4:32:74:37:ee:c1:c5:22:4e:c8:8d:49:
77:bd:b0:3e:02:1d:9d:87:d6:59:6b:26:0f:7d:67:a4:2b:f2:
f4:67:b7:ce:af:9f:52:22:cb:3e:3c:a7:1a:18:e5:a4:0a:3b:
c5:0f:70:3b:cd:00:59:ba:df:05:f2:de:c3:4c:ff:20:01:44:
cb:bb:84:7a:d3:10:6a:4b:e4:6a:68:ff:bd:ab:34:b5:8e:4b:
64:d2:d0:1a:12:7a:71:4f:47:8e:c1:a6:97:13:c2:f6:f1:6c:
8b:85:f9:75:dd:76:56:f7:ac:c4:3f:ce:39:d1:cc:e8:a7:4b:
10:34:68:a9:35:0a:30:d8:58:05:5f:94:33:5f:de:cc:d0:b1:
65:9a:e2:9a:5e:fe:c8:62:10:80:20:32:6b:bd:bc:34:e7:8b:
fb:21:11:f4:ba:62:61:b8:be:ac:35:e7:91:4e:a1:1b:76:6b:
f3:61:72:8c:97:8c:94:71:02:6b:03:0f:e7:73:e9:60:ce:6b:
97:cd:f8:d4:7c:95:e2:a5:b7:73:87:4b:78:90:94:8c:d8:e0:
64:5f:83:b5:ec:d4:31:a4:9c:97:39:92:91:98:4d:96:38:90:
c9:50:4f:33:92:94:22:be:ad:79:9e:92:84:91:94:3c:3f:5a:
af:ca:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:48 2026 by rpki-client