Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Zk7BXDAD8swCfcay_TQTTci5MyA.roa
File: Zk7BXDAD8swCfcay_TQTTci5MyA.roa (raw, json)
Hash identifier: xOlyKCm8k9FJT9r5Z+4lM4Mbi5EsqpMp+TAFHGSnfzU=
Subject key identifier: 66:4E:C1:5C:30:03:F2:CC:02:7D:C6:B2:FD:34:13:4D:C8:B9:33:20
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019E365A6E960F2DA5B18C38F910A544B6AF
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Zk7BXDAD8swCfcay_TQTTci5MyA.roa
Signing time: Sun 17 May 2026 14:32:36 +0000
ROA not before: Sun 17 May 2026 14:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206854
IP address blocks: 94.139.184.0/24 maxlen: 24
94.139.185.0/24 maxlen: 24
94.139.186.0/24 maxlen: 24
94.139.187.0/24 maxlen: 24
94.139.188.0/24 maxlen: 24
94.139.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:36:5a:6e:96:0f:2d:a5:b1:8c:38:f9:10:a5:44:b6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: May 17 14:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=664ec15c3003f2cc027dc6b2fd34134dc8b93320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:a7:41:79:2a:bd:fc:b8:9c:0c:eb:71:b3:
c0:7f:f9:b0:1f:6a:09:07:e6:39:c6:9b:46:c3:72:
af:88:a7:8f:dc:65:58:58:9e:9e:16:d5:e5:0c:38:
37:c3:30:32:2a:7c:57:ed:71:d3:d2:75:97:ad:4a:
0a:3b:16:56:71:4f:e6:af:a4:8c:77:01:ab:9e:49:
1a:8d:c3:f3:55:68:e8:1c:9f:2c:83:d9:50:67:eb:
18:b5:a4:0f:48:0c:c2:df:06:d1:26:9f:ac:bb:e3:
5f:b4:7f:34:1c:5c:56:2a:df:fa:22:f0:ea:21:2f:
22:8a:b3:00:84:e1:d6:b2:81:24:64:2a:67:5c:71:
77:f6:64:41:e0:56:ad:03:db:93:9e:d0:0c:ae:65:
02:54:ea:7b:ee:db:ed:15:2f:75:6b:6a:f1:45:70:
74:2f:13:a5:47:59:a6:9b:b6:4b:b9:b1:63:8b:b7:
65:d8:ce:f8:18:27:02:58:7d:c6:b9:9b:e6:51:36:
6e:06:c8:03:4b:2b:47:b8:9d:b4:8d:53:be:ca:52:
eb:90:49:90:5e:00:de:67:65:40:2a:35:a2:89:6e:
15:da:29:21:75:94:7c:ee:d8:e2:bc:30:1f:55:d7:
c6:94:32:0f:19:a1:b0:e0:8f:79:b4:6f:21:04:96:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4E:C1:5C:30:03:F2:CC:02:7D:C6:B2:FD:34:13:4D:C8:B9:33:20
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Zk7BXDAD8swCfcay_TQTTci5MyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.184.0-94.139.188.255
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
62:97:61:f5:3d:12:bc:86:ec:66:ed:23:79:9d:f1:f6:30:8b:
12:8f:6e:bd:54:c7:ce:ae:2f:b9:33:e9:0f:3d:97:2c:ed:a4:
c4:51:34:4b:82:bd:85:a6:07:21:bb:bc:c6:28:83:2f:10:59:
65:5e:b6:af:27:3a:df:76:86:4b:68:40:c2:d9:cb:f2:2b:71:
b9:7a:93:f3:49:b5:69:6b:d5:21:6f:a4:97:81:39:29:e0:12:
c9:43:55:14:93:8c:8d:d6:62:f7:e3:97:cc:29:7a:f1:3c:52:
33:88:a0:53:ca:c0:36:0e:77:37:4a:11:3a:b2:80:f6:e6:00:
3a:68:05:57:87:52:b2:b1:c6:0e:26:7a:93:6b:31:55:ab:1b:
0e:92:8b:00:3a:84:e6:a6:9f:33:04:d0:8c:ea:90:f9:3a:c3:
ff:89:83:3f:27:d8:ae:bd:6b:d7:9c:e6:7b:fc:78:ed:3a:93:
41:4b:18:4e:53:0e:50:70:8c:f1:ff:2a:f3:9d:1a:74:2c:ae:
4d:f2:8a:e3:e4:f7:d1:59:b4:30:52:f7:31:4d:db:e3:cd:2e:
a5:ef:39:7f:8a:63:75:c2:10:44:7f:d8:99:e3:8f:fc:7a:95:
8d:af:09:04:eb:76:25:0a:55:4c:3a:e6:f5:eb:94:bd:7a:51:
25:73:81:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:13:55 2026 by rpki-client