Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/RZ35NKWeyB9F_s2cVBS9jmpmNNE.roa
File: RZ35NKWeyB9F_s2cVBS9jmpmNNE.roa (raw, json)
Hash identifier: ivNAOqkiBXytYjHUBlc4KByuRxTr29C0gyp+cv1UV+A=
Subject key identifier: 45:9D:F9:34:A5:9E:C8:1F:45:FE:CD:9C:54:14:BD:8E:6A:66:34:D1
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019CE4124E6F33B1727030C2BC63FA66DEB1
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/RZ35NKWeyB9F_s2cVBS9jmpmNNE.roa
Signing time: Thu 12 Mar 2026 22:02:10 +0000
ROA not before: Thu 12 Mar 2026 22:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.228.0/24 maxlen: 24
138.124.229.0/24 maxlen: 24
138.124.230.0/24 maxlen: 24
138.124.231.0/24 maxlen: 24
138.124.240.0/24 maxlen: 24
138.124.241.0/24 maxlen: 24
138.124.242.0/24 maxlen: 24
138.124.243.0/24 maxlen: 24
138.124.244.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
138.124.248.0/24 maxlen: 24
138.124.249.0/24 maxlen: 24
138.124.250.0/24 maxlen: 24
138.124.251.0/24 maxlen: 24
138.124.252.0/24 maxlen: 24
138.124.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:12:4e:6f:33:b1:72:70:30:c2:bc:63:fa:66:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Mar 12 22:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=459df934a59ec81f45fecd9c5414bd8e6a6634d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:82:bf:f1:cd:88:b7:c4:8a:2a:e4:57:c7:
c2:13:85:3c:ba:93:c0:21:a9:c1:a5:23:61:cf:06:
ed:d8:d1:09:d3:fe:cb:4b:12:62:a0:e6:70:a3:ee:
b3:7e:1b:76:0b:12:aa:75:1d:a6:5d:78:c0:87:61:
82:4d:b4:a8:b3:44:8c:43:2f:6a:5f:54:c6:5f:08:
59:84:19:6e:0c:85:8e:e8:21:7a:19:c9:d3:0f:a0:
f9:00:ee:96:f0:e9:31:ec:fe:2b:20:ae:b7:d8:38:
b3:1b:8a:35:05:24:ef:b3:11:60:c5:3d:03:b6:9c:
26:f7:28:32:15:13:96:ff:de:6c:16:f8:d8:8e:82:
9d:b5:ee:6f:76:e0:74:5b:a6:7f:31:d5:24:59:28:
73:f0:e6:29:cb:4f:37:fa:37:92:bb:79:6c:9c:5e:
bc:b1:2c:dc:b0:74:39:dd:84:7d:56:fc:65:25:4b:
95:5c:eb:ce:c0:90:1f:88:02:ff:06:85:85:78:99:
ca:1c:06:f1:54:57:dc:a9:57:1a:0c:5a:09:02:d6:
74:a6:81:a0:27:6f:b6:76:30:96:1a:e0:67:aa:ec:
bd:ac:64:c1:64:af:1a:8a:94:3e:87:50:63:50:55:
bc:fa:0a:e9:3d:c3:80:0d:5d:09:a3:73:8c:c6:b4:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9D:F9:34:A5:9E:C8:1F:45:FE:CD:9C:54:14:BD:8E:6A:66:34:D1
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/RZ35NKWeyB9F_s2cVBS9jmpmNNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.228.0/22
138.124.240.0-138.124.253.255
Signature Algorithm: sha256WithRSAEncryption
ae:63:ce:b2:1e:9e:08:fc:c0:25:07:b4:b9:68:57:8e:fc:37:
fa:95:99:ba:53:74:f2:32:46:c4:77:87:2e:f9:ec:1f:6b:e9:
11:22:4c:bb:4a:de:9c:d1:e7:4f:ef:68:02:c5:76:39:39:87:
c0:06:34:df:28:50:76:09:3c:00:6d:cd:5c:93:b3:6f:f1:3a:
58:bd:00:c5:1d:bb:02:08:07:d2:c2:05:bd:14:00:7e:94:2b:
a3:30:ab:9c:6b:16:c6:d7:b7:b0:3b:5f:3d:65:37:66:86:5d:
06:cf:9d:1e:87:ff:25:44:1a:b3:fd:6c:1c:60:06:c8:54:44:
2f:7d:cb:de:d4:51:48:e6:e6:47:45:b6:ad:54:00:2a:10:e5:
44:b7:54:59:64:d9:6d:1f:23:a3:24:c6:71:5e:c0:41:c8:da:
0c:fe:8b:78:f3:7d:a6:11:17:91:fe:3f:8b:55:71:67:5e:98:
9d:39:27:98:6d:59:c7:a4:99:26:ca:ba:ae:14:ec:2f:32:76:
71:44:67:e3:b2:17:1d:95:f6:20:55:17:1f:39:04:fd:55:fe:
9a:0c:e8:78:e3:69:ec:cf:d1:0d:bd:aa:5e:28:75:6d:83:18:
8f:02:b7:1b:5b:9e:7a:cf:79:6d:ba:37:83:bc:8a:53:42:13:
2e:93:8d:b8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZzkEk5vM7FycDDCvGP6Zt6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjYwMzEyMjIwMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTlkZjkzNGE1OWVjODFmNDVmZWNkOWM1NDE0YmQ4ZTZhNjYzNGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G+Cv/HNiLfEiirkV8fCE4U8upPA
IanBpSNhzwbt2NEJ0/7LSxJioOZwo+6zfht2CxKqdR2mXXjAh2GCTbSos0SMQy9q
X1TGXwhZhBluDIWO6CF6GcnTD6D5AO6W8Okx7P4rIK632DizG4o1BSTvsxFgxT0D
tpwm9ygyFROW/95sFvjYjoKdte5vduB0W6Z/MdUkWShz8OYpy083+jeSu3lsnF68
sSzcsHQ53YR9VvxlJUuVXOvOwJAfiAL/BoWFeJnKHAbxVFfcqVcaDFoJAtZ0poGg
J2+2djCWGuBnquy9rGTBZK8aipQ+h1BjUFW8+grpPcOADV0Jo3OMxrTzMQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEWd+TSlnsgfRf7NnFQUvY5qZjTRMB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEvUlozNU5LV2V5QjlGX3MyY1ZCUzlqbXBtTk5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCinzkMAwD
BASKfPADBAGKfPwwDQYJKoZIhvcNAQELBQADggEBAK5jzrIengj8wCUHtLloV478
N/qVmbpTdPIyRsR3hy757B9r6REiTLtK3pzR50/vaALFdjk5h8AGNN8oUHYJPABt
zVyTs2/xOli9AMUduwIIB9LCBb0UAH6UK6Mwq5xrFsbXt7A7Xz1lN2aGXQbPnR6H
/yVEGrP9bBxgBshURC99y97UUUjm5kdFtq1UACoQ5US3VFlk2W0fI6MkxnFewEHI
2gz+i3jzfaYRF5H+P4tVcWdemJ05J5htWcekmSbKuq4U7C8ydnFEZ+OyFx2V9iBV
Fx85BP1V/poM6HjjaezP0Q29ql4odW2DGI8CtxtbnnrPeW26N4O8ilNCEy6Tjbg=
-----END CERTIFICATE-----
Generated at Wed Mar 25 17:18:26 2026 by rpki-client