Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/zjwCw0s83rCnI1wl2eGsX4xRkOQ.roa
File: zjwCw0s83rCnI1wl2eGsX4xRkOQ.roa (raw, json)
Hash identifier: RWLymIjR2nfYLNaGfIBBwA+kG6wbl6Vyv58H4qwxlfA=
Subject key identifier: CE:3C:02:C3:4B:3C:DE:B0:A7:23:5C:25:D9:E1:AC:5F:8C:51:90:E4
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 019FF0CB1D86AD8C3AD781D0C2C82B6F9A23
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/zjwCw0s83rCnI1wl2eGsX4xRkOQ.roa
Signing time: Tue 11 Aug 2026 12:27:50 +0000
ROA not before: Tue 11 Aug 2026 12:27:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 23.19.56.0/21 maxlen: 24
23.19.56.0/24 maxlen: 24
23.19.59.0/24 maxlen: 24
23.19.62.0/24 maxlen: 24
23.81.32.0/21 maxlen: 21
23.106.32.0/21 maxlen: 21
23.106.56.0/21 maxlen: 21
23.106.232.0/21 maxlen: 21
81.17.56.0/21 maxlen: 24
81.17.56.0/22 maxlen: 22
81.17.60.0/24 maxlen: 24
81.17.61.0/24 maxlen: 24
81.17.62.0/24 maxlen: 24
81.17.63.0/24 maxlen: 24
95.168.176.0/20 maxlen: 24
95.168.176.0/21 maxlen: 21
95.168.184.0/24 maxlen: 24
95.168.185.0/24 maxlen: 24
95.168.186.0/23 maxlen: 23
95.168.186.0/24 maxlen: 24
95.168.187.0/24 maxlen: 24
95.168.188.0/22 maxlen: 22
173.208.48.0/21 maxlen: 21
173.234.16.0/21 maxlen: 24
173.234.16.0/24 maxlen: 24
173.234.17.0/24 maxlen: 24
173.234.18.0/23 maxlen: 23
173.234.18.0/24 maxlen: 24
173.234.19.0/24 maxlen: 24
173.234.20.0/23 maxlen: 23
173.234.22.0/23 maxlen: 23
173.234.72.0/21 maxlen: 21
173.234.136.0/21 maxlen: 21
185.222.24.0/22 maxlen: 24
185.222.24.0/24 maxlen: 24
2a0d:3000::/32 maxlen: 32
2a0d:3001::/32 maxlen: 32
2a0d:3002::/32 maxlen: 32
2a0d:3003::/32 maxlen: 32
2a0d:3004::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:cb:1d:86:ad:8c:3a:d7:81:d0:c2:c8:2b:6f:9a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Aug 11 12:27:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce3c02c34b3cdeb0a7235c25d9e1ac5f8c5190e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:de:37:b5:e9:5f:8c:70:71:ca:7d:f6:19:
4f:c9:7c:9c:a4:81:67:e6:06:25:d9:ba:da:80:07:
c4:73:ab:1a:23:f0:28:3d:8f:b8:0f:74:f5:5c:d9:
80:5f:ec:16:12:66:e4:f6:e9:50:7e:5b:23:e1:20:
66:36:70:bf:f4:e1:e4:2f:52:5d:df:b8:9a:97:9c:
c8:5c:48:43:64:5e:3e:a8:9c:a3:26:d7:e1:f7:44:
2d:41:37:2f:59:98:85:a7:38:8f:f1:13:84:81:bb:
1e:e4:5c:b5:2d:32:d5:bd:ae:f7:86:a7:3c:e3:80:
e0:27:ac:32:02:0b:d7:4d:9b:8d:28:aa:d7:07:df:
cd:5c:ed:b9:6b:56:30:10:e8:d7:ee:5a:16:ac:31:
4e:a3:0c:95:f5:b5:02:3d:73:6a:18:23:ce:07:7f:
f8:5d:94:bf:ba:01:45:06:64:07:36:c8:ee:dc:16:
1d:95:5e:2b:fc:eb:f1:d2:f5:e8:c0:84:24:80:47:
d3:5c:36:93:9c:ca:a6:7f:88:79:f0:b0:ad:5f:e5:
5d:cb:f9:7d:5e:3e:36:21:1a:ea:43:c2:17:73:17:
d5:6e:cb:f1:3b:9a:f0:61:a2:b8:6c:49:bb:3b:e9:
ee:74:9d:9c:9e:4f:63:e4:83:55:a3:21:1f:49:a2:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:02:C3:4B:3C:DE:B0:A7:23:5C:25:D9:E1:AC:5F:8C:51:90:E4
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/zjwCw0s83rCnI1wl2eGsX4xRkOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.19.56.0/21
23.81.32.0/21
23.106.32.0/21
23.106.56.0/21
23.106.232.0/21
81.17.56.0/21
95.168.176.0/20
173.208.48.0/21
173.234.16.0/21
173.234.72.0/21
173.234.136.0/21
185.222.24.0/22
IPv6:
2a0d:3000::-2a0d:3004:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:5f:6f:2b:70:ee:71:c6:2f:ea:2a:44:b4:6d:e3:63:21:93:
e7:c7:2d:a1:c4:22:dd:9a:f3:78:58:49:37:ed:ce:fd:97:fb:
21:5c:19:c4:6e:1d:48:5b:c1:1a:bb:d3:88:96:dd:15:a3:35:
32:92:1a:db:94:08:42:2f:1e:78:b2:37:66:fd:f6:d6:90:ff:
0a:5a:2c:f5:3c:8c:1f:4b:d0:68:83:fb:82:39:43:4f:d2:c9:
79:19:85:45:89:c1:6b:19:98:84:16:c0:3f:34:38:99:f2:b9:
4d:ef:1a:94:51:02:61:f9:86:32:a4:42:a9:6e:ca:5f:20:c7:
4b:71:cc:25:26:e8:6f:2e:58:ae:95:89:26:43:4e:21:3a:32:
4c:c5:cb:5c:ab:30:de:87:09:0d:6a:62:79:83:12:9b:ec:3d:
74:97:2a:ae:ca:5c:d9:9f:0d:f3:bb:9c:d3:e8:5a:c0:fc:f3:
28:87:d6:56:4c:42:8e:ac:93:0f:e3:3e:c4:c3:77:90:ea:78:
cb:cd:81:fa:55:80:5f:7a:e3:9d:d7:13:be:24:c8:aa:64:19:
e5:97:c2:56:e7:6e:7d:12:42:4d:ba:a4:09:a8:a2:79:55:3e:
70:72:1f:ae:46:26:cc:e8:f5:a4:88:3b:3a:4f:1f:db:13:f4:
a0:8b:f6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:10 2026 by rpki-client