Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/zablSPOiMIZ9Ee2gqCIaq8-PiD4.roa
File: zablSPOiMIZ9Ee2gqCIaq8-PiD4.roa (raw, json)
Hash identifier: ojPdmWV7XiG2rOz1TsmfojfDgvosVN+YBVWJll8quDA=
Subject key identifier: CD:A6:E5:48:F3:A2:30:86:7D:11:ED:A0:A8:22:1A:AB:CF:8F:88:3E
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01A18831B4FC3D6C9E81CB27C170ED555678
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/zablSPOiMIZ9Ee2gqCIaq8-PiD4.roa
Signing time: Thu 29 Oct 2026 15:05:21 +0000
ROA not before: Thu 29 Oct 2026 15:05:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 37.58.48.0/20 maxlen: 20
46.165.192.0/18 maxlen: 18
78.159.96.0/19 maxlen: 19
84.16.224.0/19 maxlen: 19
91.109.16.0/20 maxlen: 20
173.234.200.0/21 maxlen: 21
178.162.192.0/18 maxlen: 18
185.17.144.0/22 maxlen: 22
212.95.32.0/19 maxlen: 19
217.20.112.0/20 maxlen: 20
2a00:c98::/32 maxlen: 48
2a00:c98:2052::/48 maxlen: 48
2a00:c98:2222::/48 maxlen: 48
2a00:c98:4000::/36 maxlen: 48
2a00:c98:4005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:31:b4:fc:3d:6c:9e:81:cb:27:c1:70:ed:55:56:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Oct 29 15:05:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cda6e548f3a230867d11eda0a8221aabcf8f883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:4f:10:55:46:b2:05:c5:a4:17:ac:12:53:
cf:3a:2e:bf:af:7e:3d:f6:01:0e:e4:a2:c9:98:09:
8c:f9:cc:d6:8b:75:f3:c7:2f:ef:c6:69:78:68:4d:
22:6e:81:5e:07:90:47:44:9c:49:28:94:60:f3:ed:
6e:6d:de:82:91:81:d2:66:39:61:50:5f:46:9d:dd:
f2:a7:54:7c:44:df:31:3e:a1:48:7e:a5:86:54:9b:
30:26:a7:86:b4:a8:7b:20:9b:1e:ad:e8:2b:95:4e:
69:22:a8:82:bc:59:7d:a5:7c:f9:d8:0b:cd:4b:d9:
54:b4:8d:3a:c6:80:20:97:20:39:7f:96:a2:4c:18:
6f:c2:95:2e:dd:83:62:42:6e:17:31:e3:03:a1:49:
31:90:38:f4:53:e8:e1:70:1a:0c:fa:d7:3f:11:5c:
44:70:6d:c0:ff:60:cf:81:9a:72:08:a4:fb:a8:74:
42:43:c4:71:34:f3:d6:c3:12:5f:1c:fc:97:75:55:
74:a1:4d:fd:62:70:c5:2b:37:f4:b4:42:69:61:83:
4f:2f:19:52:d4:a0:44:cf:9a:c0:80:ef:85:52:11:
1a:92:fd:5d:49:13:3e:9d:dc:58:0c:4b:63:70:ad:
cb:d4:dd:55:95:cb:ce:a5:9e:f5:78:50:1f:f9:0d:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:E5:48:F3:A2:30:86:7D:11:ED:A0:A8:22:1A:AB:CF:8F:88:3E
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/zablSPOiMIZ9Ee2gqCIaq8-PiD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.48.0/20
46.165.192.0/18
78.159.96.0/19
84.16.224.0/19
91.109.16.0/20
173.234.200.0/21
178.162.192.0/18
185.17.144.0/22
212.95.32.0/19
217.20.112.0/20
IPv6:
2a00:c98::/32
Signature Algorithm: sha256WithRSAEncryption
6d:fc:0b:f0:e3:fb:c0:4f:76:6a:e7:93:b0:26:f4:49:75:c0:
2a:f7:ed:6d:6f:f3:4d:69:f2:64:93:fa:ba:89:67:c6:74:86:
fd:64:25:dc:bc:9c:0f:90:02:38:f1:98:0a:97:a0:ad:c9:9b:
ec:ab:a4:ee:79:39:6b:8c:17:3c:fa:8f:ab:53:d5:07:3a:e2:
85:70:59:dd:46:9e:7e:45:75:42:41:80:ce:79:c0:72:ca:d6:
eb:52:94:f8:a5:71:81:7f:88:1e:3a:e0:5a:05:76:cf:15:76:
ab:04:ca:27:fd:24:ea:f4:88:1b:c3:ad:c8:29:3d:8a:73:65:
6e:e1:c2:b0:20:46:58:39:37:be:22:82:f2:cf:90:50:be:44:
3f:4f:50:b0:cb:4d:4d:45:dc:a6:3e:e8:4d:c8:41:ce:e7:85:
0d:b6:1b:bb:73:54:0f:00:46:80:46:7c:89:d0:25:09:2b:dd:
fe:9a:8e:12:13:8a:e1:94:93:1e:ac:aa:9e:8d:ca:b0:8a:95:
e3:6b:e5:9f:c5:b9:da:c4:40:6f:db:97:7e:f4:25:ef:c3:38:
ab:51:b1:b6:87:e0:97:1b:8c:a2:cf:19:7e:c7:3d:77:7e:c2:
a1:83:0e:07:b0:59:00:cf:ed:4a:03:61:57:e1:a5:71:90:e0:
dd:2d:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:54:36 2026 by rpki-client