Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/PgnYPQeoD3htOSSL2DOBZ_zruts.roa
File: PgnYPQeoD3htOSSL2DOBZ_zruts.roa (raw, json)
Hash identifier: 7Nep1MbHNxc/0r8ke4ZXbOddKK4c8tJ7KyhGttz9bYU=
Subject key identifier: 3E:09:D8:3D:07:A8:0F:78:6D:39:24:8B:D8:33:81:67:FC:EB:BA:DB
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 01A04212DD2FE9E855CC6EF217C731206F01
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/PgnYPQeoD3htOSSL2DOBZ_zruts.roa
Signing time: Thu 27 Aug 2026 07:15:27 +0000
ROA not before: Thu 27 Aug 2026 07:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205847
IP address blocks: 5.181.56.0/24 maxlen: 24
5.181.57.0/24 maxlen: 24
5.181.58.0/23 maxlen: 23
5.181.58.0/24 maxlen: 24
5.181.59.0/24 maxlen: 24
91.223.67.0/24 maxlen: 24
2a0c:a740:100::/48 maxlen: 48
2a0c:a741::/38 maxlen: 38
2a0c:a741:400::/38 maxlen: 38
2a0c:a741:800::/38 maxlen: 38
2a0c:a741:1000::/38 maxlen: 38
2a0c:a741:2000::/38 maxlen: 38
2a0c:a741:2400::/38 maxlen: 38
2a0c:a741:2800::/38 maxlen: 38
2a0c:a741:2c00::/38 maxlen: 38
2a0c:a741:3000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:12:dd:2f:e9:e8:55:cc:6e:f2:17:c7:31:20:6f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Aug 27 07:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e09d83d07a80f786d39248bd8338167fcebbadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:3b:1e:db:81:69:80:db:52:5f:01:6a:f4:
2c:4f:88:c1:10:4f:8c:ad:b4:67:dc:49:4c:e9:5a:
c4:a4:c1:b6:0c:33:a1:7e:b8:6b:c6:23:1a:2a:0a:
33:67:b0:c4:23:32:bd:fd:f7:3b:30:1a:ba:9d:42:
af:95:06:f2:14:d9:2b:f4:81:98:38:ba:8b:76:08:
d6:e8:57:8e:11:4a:e5:6f:49:da:5d:f3:2a:7e:41:
d8:85:cb:89:54:c9:e0:a6:c9:b3:e7:81:c5:b5:f3:
cb:c4:a5:16:a9:1a:5e:0c:b1:ed:3f:10:f5:88:b4:
9a:80:4b:02:3a:f4:95:a4:e3:da:17:6c:03:b5:67:
4a:f8:47:4b:3a:bb:8a:55:8d:1c:8c:b7:08:63:67:
66:47:18:3a:7a:c9:8a:1d:0e:33:5e:56:d9:eb:88:
13:6f:0c:ba:47:10:21:2c:3b:ef:ed:35:75:40:a1:
de:7f:da:72:db:f1:83:b8:7f:a4:eb:21:34:b0:f8:
96:7f:c2:1e:73:ac:1b:d2:6a:75:cc:cb:57:77:0d:
22:5c:ec:2c:19:bd:dd:59:cb:6e:67:43:98:1b:50:
ce:c1:04:5f:26:f5:94:6f:68:7d:79:1f:4e:3b:01:
9f:fc:57:d5:e3:eb:da:0e:a6:1f:65:f0:0d:80:b0:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:D8:3D:07:A8:0F:78:6D:39:24:8B:D8:33:81:67:FC:EB:BA:DB
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/PgnYPQeoD3htOSSL2DOBZ_zruts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.56.0/22
91.223.67.0/24
IPv6:
2a0c:a740:100::/48
2a0c:a741::-2a0c:a741:bff:ffff:ffff:ffff:ffff:ffff
2a0c:a741:1000::/38
2a0c:a741:2000::-2a0c:a741:33ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
24:85:dd:cb:56:ac:b8:f9:23:a3:cc:b4:ca:c2:2f:e2:19:91:
ae:f5:89:20:98:93:d6:21:18:80:fe:96:03:33:0b:42:d3:30:
0f:8f:20:7f:a7:43:d9:f8:08:90:52:f7:08:67:a2:a5:9e:85:
c1:d9:ce:da:0b:cf:f3:83:4d:6d:8a:73:b8:c0:dc:6a:44:5d:
d6:ee:9d:57:f5:7e:34:0f:28:8b:27:17:5d:e3:ab:da:8a:e3:
15:21:7f:83:bb:5f:43:f5:0a:de:9c:ce:0f:99:e5:06:fe:02:
7c:a5:52:d5:55:f1:d3:5d:05:26:36:b3:7b:7d:3c:0f:52:e1:
d3:01:d3:4c:6d:fe:f8:94:9a:2e:a0:95:d1:5d:2d:00:6c:1d:
0c:4d:74:2f:6a:cf:4d:d7:ec:5e:af:06:7b:f0:4a:1f:58:88:
5c:63:c1:89:22:a2:f1:f9:58:ac:4a:8c:59:46:c8:1d:da:9a:
63:4b:83:53:1f:d2:18:51:11:26:cd:4c:7a:75:21:e7:17:c2:
46:67:da:c4:37:56:5a:d6:cc:52:71:37:c5:ff:63:bc:23:e8:
53:90:92:b3:8b:16:33:9d:a1:e4:08:e8:f7:02:32:06:40:25:
5a:9b:29:1c:4c:45:9d:1f:11:43:ca:cf:47:95:d4:71:a5:dc:
77:9b:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:56:34 2026 by rpki-client