Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/ZkLblUWbsd6Gqdm649m8Qm-hMco.roa
File: ZkLblUWbsd6Gqdm649m8Qm-hMco.roa (raw, json)
Hash identifier: v7xUCKpEsuDjf2wcsuhSYlrnw3Wb9rhP2j0ODoDgQwk=
Subject key identifier: 66:42:DB:95:45:9B:B1:DE:86:A9:D9:BA:E3:D9:BC:42:6F:A1:31:CA
Certificate issuer: /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial: 01A14A2841EB596DA48E75592487F52166B3
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/ZkLblUWbsd6Gqdm649m8Qm-hMco.roa
Signing time: Sat 17 Oct 2026 13:58:34 +0000
ROA not before: Sat 17 Oct 2026 13:58:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 91.229.92.0/24 maxlen: 24
185.84.20.0/24 maxlen: 24
185.84.22.0/24 maxlen: 24
185.84.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:28:41:eb:59:6d:a4:8e:75:59:24:87:f5:21:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Validity
Not Before: Oct 17 13:58:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6642db95459bb1de86a9d9bae3d9bc426fa131ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:14:72:3a:22:d1:8e:26:c5:41:63:53:8d:
fe:6d:94:7a:80:8d:66:1d:6b:e3:5a:3b:64:d5:51:
b9:bc:0b:22:8e:50:81:6e:8d:eb:e1:ea:d9:1e:54:
31:b5:56:c5:95:82:1b:05:17:bb:0a:9a:e5:8e:a0:
35:f1:70:95:13:ed:c9:82:0e:19:ee:08:60:09:52:
ed:42:e8:aa:11:90:16:e8:a1:fe:d1:cb:c9:e3:74:
5b:9a:d6:d7:22:a2:91:71:38:99:6a:0f:8c:ee:70:
a6:cc:bb:36:85:7a:7e:d9:70:10:50:9b:60:ea:2e:
42:3a:c1:20:d1:b1:9c:a8:d8:fe:31:b6:0b:2d:9b:
e1:b6:ab:22:25:74:34:93:60:5d:08:63:97:4b:c6:
be:0e:30:0c:f8:44:93:99:02:45:52:de:74:ea:3c:
21:8d:09:8f:b2:38:7f:64:fa:db:57:7a:47:09:44:
f7:81:f9:11:67:54:d5:93:f8:e3:c0:97:6e:9c:91:
9d:7d:db:25:3d:d4:b2:e7:63:41:f6:96:f0:77:ff:
52:ff:df:5f:af:c5:4e:2d:07:bf:e8:96:60:51:03:
ec:5b:37:a5:90:96:21:e0:69:33:45:f9:64:c0:24:
72:a1:a6:9d:21:89:09:a5:1c:b0:1e:27:13:95:a7:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:DB:95:45:9B:B1:DE:86:A9:D9:BA:E3:D9:BC:42:6F:A1:31:CA
X509v3 Authority Key Identifier:
keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/ZkLblUWbsd6Gqdm649m8Qm-hMco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.92.0/24
185.84.20.0/24
185.84.22.0/23
Signature Algorithm: sha256WithRSAEncryption
62:f8:e4:70:d9:77:30:6c:81:73:1b:2e:9f:5b:93:f2:0c:47:
89:1b:ea:72:d4:d0:7d:1c:0d:b3:52:2b:3b:a4:14:35:1c:bf:
9d:ee:73:2e:d3:fd:3f:05:ca:dd:ad:9d:34:0c:d3:61:31:5e:
40:17:0d:5e:ac:fe:5a:eb:82:6f:9e:90:70:be:f4:d7:73:96:
d3:33:74:a2:40:bb:4b:ef:f1:1f:b3:61:9c:ed:a8:02:b7:e2:
65:dc:0f:72:c1:50:b3:1d:63:db:3b:1c:7d:ae:03:63:35:3b:
61:9e:ad:33:a9:f2:16:69:ca:88:22:d5:5c:94:cb:1a:ec:16:
aa:30:40:eb:cf:56:6e:70:d5:af:69:f8:f5:9b:c9:68:2f:12:
a6:39:e5:40:ae:26:65:96:f2:c6:e8:9b:29:dd:5b:03:1f:c8:
58:17:4e:f7:71:8a:20:67:07:15:4b:7b:b6:b6:b3:be:cf:8f:
5a:7b:70:76:02:c9:f5:68:08:b9:12:56:25:20:eb:d2:20:42:
ec:e5:d1:56:0c:a2:f0:69:5b:35:ab:7c:8f:28:56:c8:68:8e:
a1:fb:8a:fe:3a:61:4e:45:41:c1:e2:32:ab:63:40:24:91:93:
c8:08:f6:f7:82:d0:c0:c2:c8:74:11:33:1a:e0:64:98:91:fe:
8e:55:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:48 2026 by rpki-client