Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZVszcbHszMbPqz4AC9Tgf7QIeBE.roa
File: ZVszcbHszMbPqz4AC9Tgf7QIeBE.roa (raw, json)
Hash identifier: rAWhwN0RZwlmLUpz8mzwV5+zoLfKDDrhtt9ZrMN1QP8=
Subject key identifier: 65:5B:33:71:B1:EC:CC:C6:CF:AB:3E:00:0B:D4:E0:7F:B4:08:78:11
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D066B51D105334FAEA29300849065ADFF
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZVszcbHszMbPqz4AC9Tgf7QIeBE.roa
Signing time: Thu 19 Mar 2026 14:06:29 +0000
ROA not before: Thu 19 Mar 2026 14:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 138.249.15.0/24 maxlen: 24
138.249.22.0/24 maxlen: 24
138.249.23.0/24 maxlen: 24
138.249.102.0/24 maxlen: 24
138.249.103.0/24 maxlen: 24
138.249.112.0/24 maxlen: 24
138.249.116.0/24 maxlen: 24
170.168.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:6b:51:d1:05:33:4f:ae:a2:93:00:84:90:65:ad:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 19 14:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=655b3371b1ecccc6cfab3e000bd4e07fb4087811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:33:14:5c:43:8a:77:29:d0:e0:d2:20:ac:
2e:4f:34:e5:72:55:d5:47:b0:85:9f:4e:ab:0b:cb:
06:69:b5:1d:27:57:ba:f1:ce:62:ee:d2:dc:67:b0:
fd:eb:d4:13:9a:61:51:25:d5:72:1f:e9:59:ce:15:
9b:94:b2:26:af:cf:8b:df:a0:aa:de:dd:29:b3:1d:
23:3e:52:e8:13:ba:b4:92:f1:4c:c2:9a:54:85:72:
e2:b1:a8:c0:fc:50:8a:d4:63:28:81:38:77:fa:dd:
96:b1:da:07:85:c1:3e:d2:a7:0d:0f:c2:ed:63:0e:
8f:91:ab:c7:2d:f2:4a:32:5c:60:b2:bd:e1:47:5f:
3a:1c:3b:38:97:41:82:7b:fc:bf:bf:98:74:9e:6c:
2a:e8:fc:4c:c2:b1:50:f2:4a:fa:37:f6:14:e5:2c:
e2:eb:b0:7b:c6:10:81:38:98:55:07:ec:7c:37:36:
0b:bb:37:db:78:bb:01:4d:02:05:19:a2:7e:32:38:
e2:9d:3d:57:1a:97:e8:6c:33:0d:78:14:48:ed:20:
cb:e5:99:2e:28:c0:cb:50:ea:c1:13:4e:c1:82:ec:
2c:44:3a:f1:42:a8:cf:d8:66:0a:3c:3d:85:13:79:
ee:8b:19:f2:e6:6c:41:fe:85:48:7d:9d:2d:f9:44:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5B:33:71:B1:EC:CC:C6:CF:AB:3E:00:0B:D4:E0:7F:B4:08:78:11
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZVszcbHszMbPqz4AC9Tgf7QIeBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.15.0/24
138.249.22.0/23
138.249.102.0/23
138.249.112.0/24
138.249.116.0/24
170.168.88.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8d:eb:b3:39:80:44:36:5f:c9:8b:e4:0f:54:ad:69:6b:9e:
d4:01:62:17:89:a7:ba:76:21:82:a6:d4:ff:3a:8f:63:a1:15:
3b:dc:7a:fa:bd:8f:6d:46:cf:91:2f:70:04:6d:61:7a:4f:a8:
81:a7:10:8f:28:fc:40:b6:e8:02:39:78:44:95:74:ec:7c:b1:
8f:69:42:99:cf:90:be:b6:f2:e3:c3:c4:b0:e9:ad:ad:03:a5:
96:aa:e2:6d:49:2a:4d:6e:0b:4c:2f:83:5b:97:73:3b:9a:90:
5b:5b:76:b8:2d:69:a4:fd:6f:76:99:cb:44:e1:0e:2c:9f:c0:
3a:31:fc:59:76:ca:64:59:cf:81:ee:d6:37:d2:88:a5:03:1a:
3a:5a:54:72:e9:61:15:1d:07:9c:53:ec:bc:1c:03:6a:06:d0:
f7:b5:2e:90:cb:87:30:85:45:64:4c:f1:5d:e5:e4:80:70:66:
3d:ac:ea:bd:18:f9:29:82:42:0a:10:80:fe:6e:b4:db:8b:d9:
b3:b4:10:fd:1b:75:d4:a6:72:ef:6b:97:de:8a:e1:b9:ba:c3:
d5:9e:02:18:d1:52:7a:17:38:a9:a7:b7:26:5a:c4:35:ef:e0:
7a:f2:f3:fd:10:8b:54:5b:93:38:83:c5:4b:36:ca:eb:ee:d1:
be:ea:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:52:36 2026 by rpki-client