Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZDTUraNcXQBA0wiZ5t2vF0-jEV4.roa
File: ZDTUraNcXQBA0wiZ5t2vF0-jEV4.roa (raw, json)
Hash identifier: Q2cpkMZA8Oiw2RY16yAtyHH4MWa39OtVir0Atc4/0Qs=
Subject key identifier: 64:34:D4:AD:A3:5C:5D:00:40:D3:08:99:E6:DD:AF:17:4F:A3:11:5E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F79749082CFF20D2F995C5C9B69BFE466
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZDTUraNcXQBA0wiZ5t2vF0-jEV4.roa
Signing time: Sun 19 Jul 2026 08:18:29 +0000
ROA not before: Sun 19 Jul 2026 08:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 212.135.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:74:90:82:cf:f2:0d:2f:99:5c:5c:9b:69:bf:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 08:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6434d4ada35c5d0040d30899e6ddaf174fa3115e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:7c:c8:ac:f6:9b:fb:17:82:d9:ac:50:20:
c5:4f:b5:5f:fc:c9:27:c2:2f:c6:ee:98:ed:3b:46:
00:96:ed:7a:a6:f8:bd:c0:38:d0:c3:e8:fb:ca:58:
3e:46:ea:df:4b:3f:e4:06:4d:07:f5:6a:0e:70:54:
3b:d0:60:ee:cd:07:17:77:d5:da:23:50:76:0c:e2:
df:24:0a:e8:64:d3:98:ad:7f:c1:00:59:a0:4b:ba:
bd:c1:8b:60:18:4d:ac:e5:b4:b5:f9:1d:e3:df:42:
21:f2:10:b1:ce:55:a4:1d:70:64:83:05:4e:de:a8:
13:ef:9d:74:8b:da:5c:6e:4f:be:45:9e:09:70:2f:
c8:5b:86:9b:25:55:8b:c3:72:f2:c3:a5:77:a7:81:
22:f9:ca:9a:47:89:33:07:3d:69:a8:57:1a:76:76:
09:ee:0e:54:6e:fe:96:0f:41:2f:30:9f:94:e6:6b:
b2:5d:f3:9d:af:99:b4:50:1f:be:53:75:db:9c:b8:
e5:df:73:9f:bc:b5:b7:46:89:12:1c:5e:12:9c:c9:
a6:0e:9c:75:61:d2:6c:49:f9:df:f5:b8:5e:32:b0:
5a:33:a3:47:9b:f3:a1:6e:e8:1d:2e:88:db:c8:9a:
8a:79:de:df:ec:16:9c:12:d3:45:4a:57:8f:b1:cd:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:34:D4:AD:A3:5C:5D:00:40:D3:08:99:E6:DD:AF:17:4F:A3:11:5E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZDTUraNcXQBA0wiZ5t2vF0-jEV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.143.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2e:fd:a3:66:8f:30:24:49:ef:87:8d:93:3d:b5:52:1c:32:
e5:2c:78:ec:16:1f:56:2d:f2:4a:62:8f:42:f7:21:1e:dc:ef:
c0:4b:2f:af:74:af:2d:54:e0:64:ac:a4:cc:db:b1:59:68:21:
1e:19:fb:7e:ca:55:9b:b4:57:5d:6b:94:d1:e4:e0:c4:4f:93:
49:c4:d7:f1:a8:de:04:69:13:f9:2e:4f:de:cc:fb:10:9a:ae:
b5:97:36:f6:7e:4c:a6:9b:04:00:5b:21:f8:da:81:77:e7:23:
d6:2d:f0:8f:f3:07:b6:b7:0c:1e:a5:04:8d:28:0c:ae:75:9c:
e8:74:10:2a:14:5d:14:5c:b3:5d:c2:36:e4:13:74:1c:9e:96:
e7:a1:55:45:33:c0:dc:ae:2d:32:a6:e7:50:bb:37:47:b6:0a:
7f:3d:4c:02:db:98:d6:67:5c:fc:4f:66:bd:01:eb:1b:33:e5:
9a:aa:27:56:d2:68:86:66:d0:ca:75:44:4a:e3:4e:03:a2:81:
c8:3e:fa:fd:97:df:bb:c7:e7:bd:8b:5a:c3:f4:bd:b4:cf:8a:
1c:ac:4a:e1:e5:88:a2:ef:d7:8b:75:d0:86:45:13:0a:88:c7:
d7:c1:8d:9c:c4:34:ac:51:e6:f2:40:ac:a3:78:97:6e:de:9b:
8d:fc:bd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:20 2026 by rpki-client