Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/Zx7ta9FTjec_p2jtXFF25Klln9I.roa
File: Zx7ta9FTjec_p2jtXFF25Klln9I.roa (raw, json)
Hash identifier: U3Gh0cqZqaCBOfUs4nY1MHFOyoBpx1SuOO2bjlOIHvQ=
Subject key identifier: 67:1E:ED:6B:D1:53:8D:E7:3F:A7:68:ED:5C:51:76:E4:A9:65:9F:D2
Certificate issuer: /CN=b39442f65aa0115eb613ab382c7e4873f094f4a8
Certificate serial: 019F94405E97B33E080D584898B2B2DE6113
Authority key identifier: B3:94:42:F6:5A:A0:11:5E:B6:13:AB:38:2C:7E:48:73:F0:94:F4:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/Zx7ta9FTjec_p2jtXFF25Klln9I.roa
Signing time: Fri 24 Jul 2026 13:11:14 +0000
ROA not before: Fri 24 Jul 2026 13:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50295
IP address blocks: 37.203.216.0/21 maxlen: 24
93.187.8.0/21 maxlen: 24
93.187.11.32/27 maxlen: 32
185.47.112.0/22 maxlen: 24
185.66.80.0/22 maxlen: 24
185.101.60.0/22 maxlen: 24
2a00:1f00::/32 maxlen: 64
2a01:8ee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:40:5e:97:b3:3e:08:0d:58:48:98:b2:b2:de:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39442f65aa0115eb613ab382c7e4873f094f4a8
Validity
Not Before: Jul 24 13:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=671eed6bd1538de73fa768ed5c5176e4a9659fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:4a:3f:5a:e9:77:37:51:24:4c:44:44:22:
98:40:bc:cd:71:3d:5b:ee:4d:dd:3a:3f:57:2b:b1:
80:81:68:c2:0b:6f:c3:57:a7:46:11:d1:6a:19:d4:
dc:ba:a8:1e:c7:07:89:84:5f:5d:2a:69:a7:2a:53:
53:28:0e:73:e4:ba:db:5f:ac:11:1c:f7:14:ec:d8:
76:e3:8f:6e:37:13:f7:22:bd:34:fb:e2:47:5a:45:
ab:2b:9a:eb:bd:7f:35:de:76:01:59:2e:f5:c0:75:
f4:27:28:dd:ad:b0:b5:2b:e3:e3:b3:17:66:2c:6c:
02:e9:2e:05:0b:77:52:27:92:d2:3d:f6:ad:6d:e5:
8b:9b:5f:97:28:55:af:e6:29:f7:d1:06:e9:f6:80:
63:90:85:fb:6a:9a:06:63:a8:bd:24:1f:02:66:89:
5c:9f:63:63:23:f2:4d:50:17:32:9f:37:77:d5:55:
29:a2:9d:2f:05:62:40:0f:58:0f:6c:62:81:a0:c3:
14:4e:b3:bf:6c:20:0a:8b:30:8a:35:0e:8f:a0:02:
b2:a6:81:8e:14:23:fc:3e:07:6a:3c:e5:36:ff:09:
23:54:8e:1c:51:43:0e:2a:dc:bf:05:fa:70:c2:70:
2f:16:ae:0e:b7:a6:3d:f4:95:66:70:ae:23:76:6b:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1E:ED:6B:D1:53:8D:E7:3F:A7:68:ED:5C:51:76:E4:A9:65:9F:D2
X509v3 Authority Key Identifier:
keyid:B3:94:42:F6:5A:A0:11:5E:B6:13:AB:38:2C:7E:48:73:F0:94:F4:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/Zx7ta9FTjec_p2jtXFF25Klln9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/s5RC9lqgEV62E6s4LH5Ic_CU9Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.216.0/21
93.187.8.0/21
185.47.112.0/22
185.66.80.0/22
185.101.60.0/22
IPv6:
2a00:1f00::/32
2a01:8ee0::/32
Signature Algorithm: sha256WithRSAEncryption
11:f7:1e:17:fb:5d:a8:45:65:02:33:fa:af:6f:0a:14:61:35:
93:b3:16:f4:42:15:32:70:24:60:0b:74:b5:6e:2e:c8:4b:c0:
b4:d8:ca:c2:4f:dd:6b:26:71:41:c3:16:52:f8:ad:eb:0d:e2:
ec:d4:01:ad:d9:e0:d2:1c:9d:dc:bc:10:7a:4b:5f:6e:cc:dc:
57:bf:30:86:a1:3e:d4:b4:1c:b7:60:eb:da:1d:31:59:6c:a1:
50:bd:d7:23:30:91:19:99:3d:a3:9e:cb:92:7b:4d:ff:c1:22:
2a:1c:74:7b:fb:19:d6:11:de:f0:ef:bf:cc:9e:ca:2a:ec:27:
a7:7b:46:67:4d:53:4f:0a:30:5a:ce:0a:56:43:7f:c6:2f:4e:
ec:e6:a6:9d:c2:b3:85:19:3f:cc:8f:74:27:97:6f:e6:74:df:
f9:63:15:d6:a5:75:e4:6b:fc:83:17:36:62:a6:12:a1:c2:30:
1a:cd:ba:2f:6e:e3:0e:77:1e:65:b1:bb:59:61:e5:fd:1a:41:
b4:03:8a:ec:2c:91:82:95:11:86:5f:b5:e1:2c:25:4b:8f:42:
59:e7:4e:8b:0d:6d:09:84:e5:65:0d:14:f1:cd:4f:9b:03:28:
67:67:50:4b:b7:6a:69:09:e0:e3:8c:27:4f:58:65:a5:8a:1f:
9b:d4:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:11 2026 by rpki-client