Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/zsmBCvMBFiLh5zI01XSmpVHLzac.roa
File: zsmBCvMBFiLh5zI01XSmpVHLzac.roa (raw, json)
Hash identifier: py2QFHBhaxOUQ3FH29RNTtBqgRB2pECPvs4I/DnYCyQ=
Subject key identifier: CE:C9:81:0A:F3:01:16:22:E1:E7:32:34:D5:74:A6:A5:51:CB:CD:A7
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23685D43E2B3B3D048397062D1442F51
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/zsmBCvMBFiLh5zI01XSmpVHLzac.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 189.74.113.0/24 maxlen: 24
191.44.48.0/24 maxlen: 24
191.44.49.0/24 maxlen: 24
191.44.50.0/24 maxlen: 24
191.44.51.0/24 maxlen: 24
191.44.52.0/24 maxlen: 24
191.44.53.0/24 maxlen: 24
191.44.54.0/24 maxlen: 24
191.44.55.0/24 maxlen: 24
191.44.56.0/24 maxlen: 24
191.44.57.0/24 maxlen: 24
191.44.58.0/24 maxlen: 24
191.44.59.0/24 maxlen: 24
191.44.60.0/24 maxlen: 24
191.44.61.0/24 maxlen: 24
191.44.62.0/24 maxlen: 24
191.44.63.0/24 maxlen: 24
201.50.96.0/24 maxlen: 24
201.50.97.0/24 maxlen: 24
201.50.98.0/24 maxlen: 24
201.50.99.0/24 maxlen: 24
201.50.100.0/24 maxlen: 24
201.50.101.0/24 maxlen: 24
201.50.102.0/24 maxlen: 24
201.50.103.0/24 maxlen: 24
201.50.104.0/24 maxlen: 24
201.50.105.0/24 maxlen: 24
201.50.106.0/24 maxlen: 24
201.50.107.0/24 maxlen: 24
201.50.108.0/24 maxlen: 24
201.50.109.0/24 maxlen: 24
201.50.110.0/24 maxlen: 24
201.50.111.0/24 maxlen: 24
201.50.112.0/24 maxlen: 24
201.50.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5d:43:e2:b3:b3:d0:48:39:70:62:d1:44:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cec9810af3011622e1e73234d574a6a551cbcda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:3e:9e:29:ac:9a:ab:0f:15:ed:03:5d:9f:
0b:29:17:83:b8:73:09:8e:7e:da:30:72:f0:3b:4a:
21:91:dc:53:40:0b:e6:13:96:29:ac:3f:4c:45:aa:
ff:ed:93:19:e0:e6:28:e9:67:c7:a1:7d:0f:d7:ae:
98:f4:a8:c3:ec:56:78:54:45:49:90:8a:4c:42:14:
5a:7b:c5:5e:82:7a:0e:7b:74:e3:0e:cd:24:84:ad:
ea:b2:e7:09:6b:1d:34:1d:60:e0:2f:3d:c4:58:ba:
50:43:21:43:3c:b3:78:77:f6:b0:f3:90:e1:56:e2:
f6:62:c0:b3:d8:e0:13:f2:1d:eb:6f:1a:79:42:56:
28:0f:0a:e7:56:d1:3c:81:31:9a:0f:bd:6c:c7:05:
a9:85:40:e3:b3:aa:fe:66:cf:21:d2:cb:61:c7:1a:
8c:ac:08:13:5b:de:c2:49:7e:06:3c:a4:e1:a9:5a:
3a:30:a2:cd:1b:ac:a1:5a:4a:72:15:46:2f:0c:ee:
32:f0:a0:73:9c:9e:76:4a:34:2c:cc:b8:1b:eb:c0:
f9:cc:ed:ff:31:d4:55:f9:7d:55:e6:e5:80:ec:99:
35:06:e1:94:1f:ef:d0:71:93:58:f8:63:e1:46:2c:
34:42:5a:51:f0:32:d9:c6:a9:2d:06:bb:97:57:4e:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:81:0A:F3:01:16:22:E1:E7:32:34:D5:74:A6:A5:51:CB:CD:A7
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/zsmBCvMBFiLh5zI01XSmpVHLzac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.113.0/24
191.44.48.0/20
201.50.96.0-201.50.113.255
Signature Algorithm: sha256WithRSAEncryption
44:f9:0d:72:7a:13:5a:5b:47:55:65:75:29:23:94:cf:b3:e2:
74:5d:96:01:c6:e7:78:61:fc:58:2a:cd:4a:57:3d:f9:c0:74:
8d:95:0e:42:22:01:49:0a:0e:43:8a:af:e8:83:ef:d2:81:34:
4f:57:25:41:d8:01:65:24:39:09:65:e0:94:3a:e7:02:06:4d:
d6:8a:26:1a:b0:bb:0a:87:c4:b5:a9:c5:db:63:fa:51:e3:90:
c0:a5:80:cf:a2:e0:eb:2d:47:f6:47:2e:6e:3e:e6:6d:53:15:
f5:9f:53:4d:dc:78:a3:b9:e7:cf:13:5d:c1:0e:fc:5a:85:5a:
51:43:d3:51:72:a1:5c:e8:c2:f9:0b:9a:73:8b:8c:32:e1:bd:
3d:dd:40:58:f4:bc:44:a8:5b:b5:d6:98:98:97:a7:9a:d3:81:
c7:9a:30:01:54:91:f9:0c:16:b8:a6:47:ca:04:15:95:f2:4e:
59:b7:de:8e:72:f1:51:db:02:d8:12:17:6a:95:44:e4:40:63:
17:43:be:e5:66:c9:e4:53:20:bf:dc:1e:b4:69:e1:8d:b3:7d:
4e:70:2e:3a:65:87:08:07:95:63:f3:9e:be:de:9b:76:ea:b2:
2b:88:43:d1:c4:70:99:3d:f0:ec:3b:d7:20:90:99:c5:f7:1e:
6e:0c:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client