Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/ZexxmISdFuh_7wIWZHbw3a60nhE.roa
File: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (raw, json)
Hash identifier: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=
Subject key identifier: 65:EC:71:98:84:9D:16:E8:7F:EF:02:16:64:76:F0:DD:AE:B4:9E:11
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 019E6EFC94501DC5C004E6A46269268ADFBF
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/ZexxmISdFuh_7wIWZHbw3a60nhE.roa
Signing time: Thu 28 May 2026 14:28:27 +0000
ROA not before: Thu 28 May 2026 14:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208843
IP address blocks: 45.83.64.0/22 maxlen: 22
194.187.176.0/22 maxlen: 22
2a0e:7b83:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:fc:94:50:1d:c5:c0:04:e6:a4:62:69:26:8a:df:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: May 28 14:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65ec7198849d16e87fef02166476f0ddaeb49e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:2c:1b:18:71:75:ca:c8:93:75:26:e1:75:
69:48:e2:ee:81:0b:55:aa:38:e7:7e:07:ff:63:0f:
1b:12:81:3d:b1:68:f3:ef:ad:63:d3:02:e2:16:49:
b8:c0:6c:54:38:8b:c3:67:cb:e7:39:29:e4:17:81:
79:56:28:a2:c2:c9:de:01:cc:81:76:7d:a1:0f:06:
84:15:6c:12:83:1f:f9:47:4b:b6:87:aa:37:d3:5d:
f7:d1:99:a3:6f:b6:5a:cf:9d:70:c8:23:bb:4b:45:
fc:da:e6:17:6f:57:b4:d4:57:6e:fc:72:58:4e:27:
aa:9f:ce:58:9c:db:f9:ba:2f:5b:5a:05:e1:66:27:
22:32:61:44:cd:35:5b:92:1b:9c:8e:af:09:4f:ae:
a4:73:fc:ce:b1:65:da:ad:57:52:0e:3c:be:4b:da:
71:ce:02:de:ec:be:5a:0f:4e:7e:39:40:dd:c6:ac:
55:b4:3c:a6:04:00:68:a9:aa:14:bb:7e:a6:5d:b1:
43:0d:c5:ac:6d:c8:7b:de:c4:ce:14:da:af:c8:d7:
e7:3e:85:02:ba:83:b1:d8:96:00:5f:c7:cb:d1:cc:
9c:f1:05:4c:39:bc:cf:e9:01:55:66:05:a3:46:7e:
db:ab:42:f1:cd:a0:c7:51:b7:a9:1e:f7:7c:81:00:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EC:71:98:84:9D:16:E8:7F:EF:02:16:64:76:F0:DD:AE:B4:9E:11
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/ZexxmISdFuh_7wIWZHbw3a60nhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.64.0/22
194.187.176.0/22
IPv6:
2a0e:7b83:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
26:3c:45:c8:e6:d5:0a:ce:96:c0:9c:a8:d0:4c:7b:fb:4f:f4:
58:de:99:91:e6:7d:36:a4:32:fc:8c:24:77:4a:84:dc:18:51:
41:9b:9a:18:24:5c:43:37:5e:c3:ae:63:69:b5:2a:de:6d:6e:
35:b5:c4:f5:29:cf:59:9c:a0:db:c4:b3:4e:c2:37:6b:4f:fd:
8a:f1:1c:37:3c:62:34:fd:4f:8e:cc:5d:04:c8:f0:15:73:dc:
b7:39:68:ff:83:bf:f7:1f:59:cb:e0:1c:68:c4:cd:f4:fc:ad:
77:a7:89:f9:4f:08:12:23:4d:87:f9:15:11:96:26:29:67:e2:
88:83:3f:fd:f2:14:a5:fa:1a:0f:f3:07:1a:d5:5a:1b:3a:e9:
d6:8a:24:82:4b:1d:69:73:40:ba:ca:24:2f:06:2c:58:70:93:
7d:64:60:fb:d4:53:69:cf:d7:b0:b6:aa:60:54:82:e3:63:4e:
19:8c:2d:2e:d0:4c:a9:ad:47:64:8c:0c:3a:7e:d0:f4:e1:b7:
12:e0:86:08:5a:e6:d9:2d:91:a1:9c:ec:c4:7c:d8:52:6c:3d:
f6:20:64:fc:9c:27:49:27:c0:f1:e7:bd:29:b7:0f:f5:2e:33:
18:c9:13:55:a7:43:03:f0:15:02:26:a9:dc:1f:d0:3a:64:a8:
fd:29:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:40:08 2026 by rpki-client