Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa
File: zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa (raw, json)
Hash identifier: ZkfO9/jzoHTqMuf/g6245EMxohpj+UHCz0pRarj0WJw=
Subject key identifier: CE:DD:2F:9F:E1:61:DD:3D:09:71:A9:51:8E:14:41:F8:48:35:D2:96
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019E31A6840A56269412F340E541F23E255E
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa
Signing time: Sat 16 May 2026 16:37:36 +0000
ROA not before: Sat 16 May 2026 16:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.251.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 19 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:a6:84:0a:56:26:94:12:f3:40:e5:41:f2:3e:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: May 16 16:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cedd2f9fe161dd3d0971a9518e1441f84835d296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:3d:f6:9c:1a:df:a4:a8:5d:27:28:99:8e:
5c:4d:f8:c2:d8:98:54:da:1e:6b:58:6d:78:64:aa:
da:6c:be:20:ce:fd:bd:f1:b4:0b:cd:ba:08:b7:10:
23:d5:c1:e1:43:b9:e5:77:2d:eb:06:6a:4a:a5:4d:
f1:7e:35:c6:5c:c7:7d:0c:1e:5a:7c:77:70:1c:3f:
d3:e8:12:3a:e1:a5:20:83:30:25:2b:10:32:c1:92:
a8:3c:cd:40:b2:b9:8d:3d:04:7a:2e:25:55:0e:89:
1c:52:f9:ca:0e:09:ae:92:40:f9:a7:4b:42:14:f4:
6d:ab:97:b3:f1:27:2f:a2:a2:0f:1d:84:1d:f9:fd:
04:bd:32:5d:a8:68:e6:a8:6b:46:ce:cd:03:68:e4:
15:ef:e0:70:29:42:f0:89:52:ed:33:4b:cd:0d:c1:
f4:d6:ca:55:bd:f1:ce:21:7c:4e:06:b8:70:df:2c:
bf:ee:0a:5a:18:81:f2:2f:d2:88:f1:5c:ff:97:13:
af:90:90:01:ef:e0:17:bf:b4:d2:54:ca:eb:a2:1f:
1c:cd:67:8e:41:52:6f:b2:ab:39:9e:0b:c6:e0:ef:
44:2e:ed:b2:d5:e2:3b:25:86:82:fc:06:3a:d3:a4:
6c:a1:bb:74:49:08:02:bf:3d:bd:86:6f:f1:9a:ab:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DD:2F:9F:E1:61:DD:3D:09:71:A9:51:8E:14:41:F8:48:35:D2:96
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/24
Signature Algorithm: sha256WithRSAEncryption
53:42:81:42:8f:5d:d6:43:9e:8b:34:15:f1:ac:76:97:0c:d4:
45:f8:01:da:09:22:c7:57:1f:2c:74:c1:5a:10:1d:6a:4f:df:
56:2a:ad:ec:29:c0:5f:c8:37:f7:50:db:df:7c:a3:fa:d8:44:
28:b5:03:dc:b7:ed:34:57:e8:34:a1:64:ed:6b:29:6d:01:ad:
bf:c4:b7:6f:fb:bc:d9:09:21:df:b6:44:bd:f8:28:27:1b:72:
d2:86:ee:47:bf:1d:e0:dd:1e:2e:17:4f:ac:d4:03:70:11:b1:
a8:e2:6c:53:cc:2e:4f:ec:81:4d:da:24:f1:27:87:63:75:c6:
11:43:ef:b6:c6:33:51:49:31:bb:03:64:68:2a:2e:17:33:a5:
8a:b8:ee:81:82:cc:92:6a:a6:7a:e0:e4:8f:b9:6a:f0:39:8d:
d1:bd:28:1c:58:c3:f8:26:b2:45:94:39:13:92:4c:ee:da:81:
c6:f0:d7:4a:e5:81:cc:9b:29:d9:6f:3d:73:d9:6c:4a:29:b0:
3a:80:b3:62:d9:67:b2:c3:56:94:2d:15:7d:d2:94:dc:5a:de:
6d:b1:f8:47:b9:35:c1:94:50:a4:82:06:ab:c2:18:00:36:0d:
11:05:04:bd:54:5e:50:2c:21:a8:8b:3f:9f:b8:4c:5d:05:ed:
d5:5f:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 07:42:19 2026 by rpki-client