Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ZHMjsQqVxx7rOWHRF92jjp-zvjk.roa
File: ZHMjsQqVxx7rOWHRF92jjp-zvjk.roa (raw, json)
Hash identifier: sKXngRLk8fuvYQ/cGHRKag7kflq9UnRB9uGaASuWaDg=
Subject key identifier: 64:73:23:B1:0A:95:C7:1E:EB:39:61:D1:17:DD:A3:8E:9F:B3:BE:39
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A010261B084CB3C7C6AE89BBEC2CBC1873
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ZHMjsQqVxx7rOWHRF92jjp-zvjk.roa
Signing time: Mon 17 Aug 2026 14:35:27 +0000
ROA not before: Mon 17 Aug 2026 14:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 187.13.73.0/24 maxlen: 24
189.74.112.0/24 maxlen: 24
189.74.119.0/24 maxlen: 24
189.74.122.0/24 maxlen: 24
189.74.123.0/24 maxlen: 24
189.74.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:26:1b:08:4c:b3:c7:c6:ae:89:bb:ec:2c:bc:18:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 17 14:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=647323b10a95c71eeb3961d117dda38e9fb3be39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:1b:0e:02:45:e1:0c:a3:cf:3e:e9:34:38:
a3:bb:22:bb:29:de:3f:72:d1:33:d8:c0:7f:00:ae:
b5:8f:13:ec:ca:20:42:f5:6b:94:81:02:8f:11:5e:
44:3b:0f:5e:85:b8:b9:92:cb:3e:19:ae:9f:06:74:
45:b4:45:c3:31:26:3e:49:66:b4:c7:30:76:86:0a:
3b:55:89:26:a3:a3:94:ff:30:61:bc:e3:fc:44:12:
c7:ec:43:82:e2:40:c7:1b:92:bb:9e:e5:39:41:bc:
29:b7:7b:b9:1f:b8:bf:02:20:bb:f1:0e:56:4c:d1:
ef:62:9d:57:8a:69:a9:18:2a:3d:6c:0e:a8:57:f1:
7d:e0:9c:39:84:7d:eb:42:0c:0c:aa:1e:d4:3b:c7:
cc:94:3a:7e:33:06:b8:7a:91:5b:43:d6:70:73:7d:
c0:46:ad:11:d7:41:f1:e3:f6:2e:5d:63:39:cd:e5:
b9:0d:85:c1:ca:6a:ed:fe:b7:f2:76:ed:13:d4:56:
fe:75:7f:5d:38:1a:24:66:ba:5b:a3:ae:97:0e:38:
4d:96:20:05:2d:36:e3:b2:73:85:78:c3:96:30:15:
4c:94:e8:c5:c4:92:b4:c5:23:d5:17:87:4e:a4:39:
5a:b0:6c:fb:2e:f5:13:b4:b2:48:2b:d0:15:22:fa:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:23:B1:0A:95:C7:1E:EB:39:61:D1:17:DD:A3:8E:9F:B3:BE:39
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ZHMjsQqVxx7rOWHRF92jjp-zvjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.73.0/24
189.74.112.0/24
189.74.119.0/24
189.74.122.0/23
189.74.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:36:fb:c7:31:e8:83:11:f9:ec:05:b2:00:18:49:0a:44:7f:
bf:62:7c:5e:66:ed:62:03:dc:fa:aa:d1:30:53:75:80:c0:0f:
f5:1e:d5:86:3d:a7:40:7b:30:68:2d:2a:69:c6:45:77:ca:08:
ff:88:b6:f9:45:1f:d7:5e:8c:f1:36:cf:9e:79:44:02:b1:d1:
aa:35:5c:72:cd:7c:9c:14:a3:d1:bd:99:e0:1e:e5:e7:53:10:
3d:42:1e:76:00:6d:9d:c2:ed:fa:44:91:eb:83:83:76:04:ce:
e4:5e:78:83:21:9e:ba:fb:7f:5f:73:a3:07:ce:8c:9c:93:db:
60:52:8f:6d:02:9b:a1:11:8a:b2:3e:6e:f9:13:49:51:e3:bb:
c3:73:e3:9c:80:5c:56:2b:5b:1b:6d:bf:15:48:0a:2f:e5:7e:
03:55:33:e2:ed:ac:88:9e:88:ca:81:3d:ca:b6:e9:e0:22:56:
0e:97:0f:8c:3f:22:13:0a:f4:f2:02:2f:a3:26:83:9f:64:46:
0a:4a:54:a8:40:e5:e6:ed:88:8e:21:fb:2a:35:e6:c5:0a:dc:
94:2b:85:d8:ac:7d:dc:08:8f:30:ae:ad:3b:fa:cd:fc:6a:b1:
f3:d9:f3:a4:c2:48:fa:f0:8f:ce:12:1a:8e:03:4b:20:38:cf:
a4:83:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:06 2026 by rpki-client