Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zFamwBzMXbwm3LrB42KicEur9Es.roa
File: zFamwBzMXbwm3LrB42KicEur9Es.roa (raw, json)
Hash identifier: l4bBYiwtRIx9tEMaa9erC2kRrEG9+HW9iLci8bAr/A4=
Subject key identifier: CC:56:A6:C0:1C:CC:5D:BC:26:DC:BA:C1:E3:62:A2:70:4B:AB:F4:4B
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A0E83185FF481679DBBD202A8C79BF0C8E
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zFamwBzMXbwm3LrB42KicEur9Es.roa
Signing time: Mon 28 Sep 2026 13:25:54 +0000
ROA not before: Mon 28 Sep 2026 13:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 45.9.72.0/24 maxlen: 24
45.138.73.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
91.217.76.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
185.17.1.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.102.136.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.200.190.0/24 maxlen: 24
185.217.197.0/24 maxlen: 24
185.233.82.0/24 maxlen: 24
185.252.144.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:31:85:ff:48:16:79:db:bd:20:2a:8c:79:bf:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Sep 28 13:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc56a6c01ccc5dbc26dcbac1e362a2704babf44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:5b:b2:a0:e2:b8:c8:65:40:8c:c0:72:23:
00:9b:86:f6:23:91:d9:c7:90:55:7b:25:88:98:c5:
e8:d6:47:b7:5d:3e:0a:28:28:47:00:b8:f4:79:e8:
bc:55:cd:16:98:2f:a3:77:54:7c:5a:4d:c6:bb:e3:
22:a9:fd:9d:b3:2d:1c:90:45:b7:6c:35:8f:93:d3:
72:d0:98:9a:b7:8b:7e:1c:73:db:91:a0:ff:e3:7f:
bf:68:16:6e:fa:8f:27:08:20:1e:85:80:e2:a5:5b:
8d:cb:9e:39:1a:cc:ff:fa:56:5d:af:63:83:99:ac:
0b:a3:3f:67:2a:fb:81:6e:45:97:38:5e:f4:61:73:
52:01:80:0b:ed:5a:fe:56:7e:4d:58:c6:1b:e1:32:
28:72:c2:d1:cb:b5:d5:ae:91:08:ab:4c:9d:d7:ac:
4f:a5:2d:e6:12:88:94:51:13:18:3b:30:15:a4:45:
3f:a8:af:45:56:a1:21:70:f7:b3:c0:42:52:fd:84:
fa:2a:91:b7:ff:0f:f5:d6:44:03:79:b5:8a:92:b7:
de:06:d2:c2:a6:97:13:c3:96:c9:a4:5f:5a:08:ce:
15:56:24:6f:1b:04:df:f3:14:14:42:56:9b:a3:ef:
b3:ac:ae:14:16:0c:dc:61:5b:db:7d:ce:35:97:89:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:56:A6:C0:1C:CC:5D:BC:26:DC:BA:C1:E3:62:A2:70:4B:AB:F4:4B
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zFamwBzMXbwm3LrB42KicEur9Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
45.138.73.0-45.138.74.255
46.17.105.0/24
91.217.76.0/24
95.214.9.0/24
185.17.1.0/24
185.40.7.0/24
185.58.204.0/24
185.102.136.0/24
185.106.93.0-185.106.94.255
185.117.116.0/24
185.117.119.0/24
185.200.190.0/24
185.217.197.0/24
185.233.82.0/24
185.252.144.0/24
193.124.182.0/23
193.124.190.0/24
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
Signature Algorithm: sha256WithRSAEncryption
98:ae:71:1b:eb:e2:70:12:f5:fb:d4:4c:7d:e2:aa:e1:ac:3f:
87:3a:85:b9:d2:00:e9:98:39:b6:4c:dc:ea:ec:a3:a6:63:f0:
4f:c8:3a:3a:e9:e8:ce:3a:33:9c:61:a3:74:36:91:1f:46:99:
ed:2c:0d:82:a7:f5:0c:d2:21:ab:97:e9:93:86:83:59:f2:c1:
18:c5:dd:e1:5d:8f:9e:4f:24:6b:2e:aa:f8:a2:e2:17:70:a3:
aa:79:ff:9a:de:42:2d:1c:f4:7c:1a:b2:87:c5:8a:4e:09:24:
6e:a7:c7:62:dd:1c:e8:6b:a0:6c:39:80:48:59:69:18:58:70:
3f:78:5e:4e:47:2a:ea:11:24:c8:9a:c8:23:34:97:5f:7d:72:
cb:a8:b6:4c:f9:68:fb:6b:4d:38:b7:a9:75:7d:c6:1d:ea:74:
2c:f4:af:0e:48:91:d3:53:a8:b3:3b:a8:1b:51:a3:85:40:2f:
36:c9:7d:f7:5c:ff:8d:92:cf:5f:89:94:cb:02:b0:ab:ab:15:
ba:10:71:d6:1b:bb:1c:fe:8e:c8:8a:14:cd:69:f1:12:16:59:
97:0d:15:63:64:98:f8:7c:fe:e1:26:44:4b:37:6e:17:3a:79:
a8:8b:3c:bb:eb:fe:a9:a1:77:a3:9d:0d:14:de:43:44:28:1c:
8c:fc:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:27 2026 by rpki-client