Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zk68PVcNUWuDcWM1qsFqXgYmLNg.roa
File: zk68PVcNUWuDcWM1qsFqXgYmLNg.roa (raw, json)
Hash identifier: am2RjkLUZtnqW8usAgOri6JyLbuyFfk2gL7M3sjUw6g=
Subject key identifier: CE:4E:BC:3D:57:0D:51:6B:83:71:63:35:AA:C1:6A:5E:06:26:2C:D8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E269E1EF0BEF0828FFD57909437BF9235
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zk68PVcNUWuDcWM1qsFqXgYmLNg.roa
Signing time: Thu 14 May 2026 13:12:37 +0000
ROA not before: Thu 14 May 2026 13:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.253.38.0/24 maxlen: 24
45.15.143.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
193.168.208.0/24 maxlen: 24
193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:9e:1e:f0:be:f0:82:8f:fd:57:90:94:37:bf:92:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 14 13:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce4ebc3d570d516b83716335aac16a5e06262cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:ad:a1:88:9e:e0:bd:7d:0a:d6:1d:6f:fa:
37:84:93:41:63:83:7e:08:76:12:f6:b5:7e:cc:c1:
ee:06:06:ba:0d:94:9d:e5:0b:78:17:a7:4a:87:00:
33:f3:77:4a:7f:ee:ba:aa:8b:c0:12:8c:e5:ff:27:
4a:0f:5c:20:d2:af:47:d8:f7:a7:e0:6d:36:35:b4:
be:e4:4c:bd:7e:fe:aa:ec:c9:26:47:fe:e1:33:04:
d2:8c:aa:1c:e0:e2:7d:c2:4f:af:8e:c1:b3:c2:96:
b6:1e:b2:7f:63:54:42:37:5f:04:74:43:c9:03:0e:
72:90:83:8d:d7:80:48:06:70:72:e2:fc:b9:4a:2d:
7c:78:7a:ec:89:21:51:04:81:80:86:d9:d1:44:f4:
1b:3b:56:d5:9f:0b:5d:09:bd:65:35:53:38:63:80:
16:35:2b:98:eb:69:28:41:0e:13:8e:15:1d:08:e4:
af:7d:2d:4f:1f:2b:7a:c8:b2:41:25:b0:59:97:8f:
ab:8d:fe:4c:42:b8:18:3f:2a:a0:4e:ae:6f:6d:41:
9c:51:72:ef:a7:e7:a4:4d:00:26:64:11:c8:4e:fc:
03:c7:09:ad:be:bf:de:33:06:50:1d:04:bf:95:f7:
de:52:02:c3:f3:10:80:10:d0:4e:a1:d5:bc:65:e7:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:BC:3D:57:0D:51:6B:83:71:63:35:AA:C1:6A:5E:06:26:2C:D8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zk68PVcNUWuDcWM1qsFqXgYmLNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
45.15.143.0/24
45.92.195.0/24
193.168.208.0/24
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:0e:1a:fc:8f:dc:00:13:a8:59:63:eb:a8:e6:13:82:03:75:
bf:58:a4:36:9e:dd:2d:7c:e7:8b:33:26:86:da:f4:95:72:88:
2b:25:90:32:51:36:97:9b:7c:81:4c:26:64:bf:86:b9:09:fe:
0b:bd:02:45:ce:60:9f:9d:dc:a9:9d:f1:5e:d2:7f:68:f4:5e:
03:5b:d6:60:40:ae:3a:65:17:d7:65:ce:a8:c5:ad:8b:20:63:
dd:53:30:de:24:c4:6e:e2:81:df:73:08:7f:4c:ee:ed:eb:13:
46:a5:ec:83:f9:61:07:51:2c:c5:c3:88:76:fd:b4:6a:d7:5c:
15:97:c8:16:08:be:ea:70:b1:b1:0f:2c:83:a1:8a:0f:62:e2:
8f:b5:b8:56:b6:57:ed:e1:90:54:45:69:84:bf:da:d0:4f:c3:
9c:36:e1:f6:58:47:e5:2d:18:bf:6f:82:af:5e:95:fa:e6:f9:
09:e1:73:bd:24:3c:df:e9:93:e0:91:34:25:ab:a1:17:fb:96:
ad:91:b8:1b:52:c0:5d:2d:1a:4d:37:f0:98:b4:7f:2b:ff:68:
8f:e3:48:0a:7a:ba:04:50:f3:4a:98:5f:9d:59:e3:35:fa:0c:
86:18:b8:5b:0d:03:6b:a3:63:db:be:9a:4e:6a:f2:f7:41:78:
2b:40:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:17:21 2026 by rpki-client