Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZLNW2oD_NA5iSRK38V2V3j4_5H0.roa
File: ZLNW2oD_NA5iSRK38V2V3j4_5H0.roa (raw, json)
Hash identifier: /iLQGVJtPMHGyJiaqF2vw8oYTigyQORn2qyJH3eSxjE=
Subject key identifier: 64:B3:56:DA:80:FF:34:0E:62:49:12:B7:F1:5D:95:DE:3E:3F:E4:7D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FEAB3FB36BC27619E28301B2370524E72
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZLNW2oD_NA5iSRK38V2V3j4_5H0.roa
Signing time: Mon 10 Aug 2026 08:04:51 +0000
ROA not before: Mon 10 Aug 2026 08:04:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 45.130.124.0/24 maxlen: 24
192.166.153.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0d:2ac0::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b3:fb:36:bc:27:61:9e:28:30:1b:23:70:52:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 10 08:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64b356da80ff340e624912b7f15d95de3e3fe47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:91:c3:39:5a:e5:f0:0a:16:e6:ac:c4:bc:
a1:65:77:45:38:e6:9d:ad:a1:c3:d9:c8:be:84:93:
46:ea:7e:aa:f8:7c:2d:dc:ab:20:e9:ec:ba:fe:5d:
3a:3f:43:f3:c8:92:4a:4b:8b:09:4b:2d:77:f7:10:
5d:28:4a:25:13:ee:1c:96:37:2c:a7:46:02:38:73:
b9:2f:57:05:54:cd:13:ca:60:1b:44:b6:b2:4a:60:
03:72:dd:95:cd:1f:81:ae:83:4c:16:35:7d:bd:a1:
1a:02:55:2a:91:d3:4d:0b:cb:81:66:d5:9a:a3:34:
3e:33:30:f9:be:c8:93:2b:90:36:0c:28:ff:f6:9b:
68:75:74:74:c8:ed:df:e0:46:03:65:e3:63:1a:65:
cc:e2:49:42:a0:6b:99:14:fb:2e:4d:fc:37:2f:a0:
2e:e0:3d:ed:2b:13:0a:94:64:57:23:50:5f:67:5a:
24:62:c2:8e:f1:df:b3:2b:87:c7:e2:1b:6e:31:e1:
01:24:b3:ed:70:88:b5:35:15:42:c0:16:e3:30:a0:
78:34:b4:05:03:55:f4:f0:f0:58:0c:90:b5:37:55:
d2:37:bc:67:09:53:3c:e3:de:90:c6:b6:a3:78:dd:
83:23:c4:a2:b4:35:58:a8:81:40:aa:ac:f6:c6:8b:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:56:DA:80:FF:34:0E:62:49:12:B7:F1:5D:95:DE:3E:3F:E4:7D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZLNW2oD_NA5iSRK38V2V3j4_5H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.124.0/24
192.166.153.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/48
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0c:9240::/29
2a0d:2ac0::/29
2a0e:5800::/29
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a13:1380::/29
2a13:18c6:66::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
bf:fa:45:93:7c:d3:9b:a1:87:1d:b0:73:44:f5:cf:c3:ae:57:
47:15:ae:7b:0f:2c:27:84:50:45:b3:0c:c1:f5:56:48:b5:55:
9c:17:ba:e3:82:ef:b4:d6:02:1f:3b:0c:fe:10:be:b7:c7:62:
1e:1f:a5:4e:d8:a9:8d:8b:4f:9a:b9:30:a2:eb:e3:39:e3:e8:
f6:8b:1b:98:cf:e0:e9:9f:ff:04:98:5d:a7:7e:da:16:4b:94:
95:21:7e:46:f5:14:ee:a8:35:0f:ff:cd:38:cf:30:16:f1:ef:
62:23:c5:30:99:35:0a:3b:2c:23:93:5b:7c:de:32:e6:36:87:
16:dc:7d:d9:60:80:0a:32:ea:10:5f:9d:61:fa:ca:5b:52:ec:
60:87:17:c7:31:ea:be:3a:25:90:31:0b:f1:a5:2b:8e:56:44:
c5:36:3d:fd:37:c9:fe:d7:cc:e1:69:8b:35:f1:b2:f8:24:34:
70:d5:71:de:b9:22:48:b2:67:43:a7:9d:ef:ab:82:49:09:1b:
6e:1c:ff:e8:a1:89:69:8b:aa:6a:79:ad:3d:1f:f1:e8:b9:29:
42:db:94:a0:28:c1:fe:29:b8:44:27:8a:10:66:b6:f6:34:52:
e3:61:f5:14:3a:d3:35:ac:17:ee:3d:f1:fa:ad:d1:17:82:36:
4c:f7:a3:0a
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISAZ/qs/s2vCdhnigwGyNwUk5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODEwMDgwNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGIzNTZkYTgwZmYzNDBlNjI0OTEyYjdmMTVkOTVkZTNlM2ZlNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt2Rwzla5fAKFuasxLyhZXdFOOad
raHD2ci+hJNG6n6q+Hwt3Ksg6ey6/l06P0PzyJJKS4sJSy139xBdKEolE+4cljcs
p0YCOHO5L1cFVM0TymAbRLaySmADct2VzR+BroNMFjV9vaEaAlUqkdNNC8uBZtWa
ozQ+MzD5vsiTK5A2DCj/9ptodXR0yO3f4EYDZeNjGmXM4klCoGuZFPsuTfw3L6Au
4D3tKxMKlGRXI1BfZ1okYsKO8d+zK4fH4htuMeEBJLPtcIi1NRVCwBbjMKB4NLQF
A1X08PBYDJC1N1XSN7xnCVM8496QxrajeN2DI8SitDVYqIFAqqz2xosqzwIDAQAB
o4IDFTCCAxEwHQYDVR0OBBYEFGSzVtqA/zQOYkkSt/Fdld4+P+R9MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWkxOVzJvRF9OQTVpU1JLMzhWMlYzajRfNUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDASBAIAATAMAwQA
LYJ8AwQAwKaZMIH9BAIAAjCB9gMFAyoEn0ADBwAqBhGEAQEDBQMqBjvAAwUDKgeK
QAMFAyoJewADBwAqCi0GAQIDBQMqCn0AAwUDKgxIgAMHACoMeIYAmQMFAyoMkkAD
BQMqDSrAAwUDKg5YAAMFAyoPF8ADBQMqDyUAAwUDKg/SAAMFAyoP20ADBQMqEYiA
AwUDKhMTgAMHACoTGMYAZgMFAyoTLMADBQMqEy1AAwUDKhMtwAMFAyoTLkADBQMq
EzOAAwUDKhNJAAMFAyoTW4ADBQMqE3kAAwUDKhN9gAMFAyoTggADBQMqE9EAAwUD
KhPXAAMFAyoT2QADBQMqE/kAAwUDKhP7ADANBgkqhkiG9w0BAQsFAAOCAQEAv/pF
k3zTm6GHHbBzRPXPw65XRxWuew8sJ4RQRbMMwfVWSLVVnBe644LvtNYCHzsM/hC+
t8diHh+lTtipjYtPmrkwouvjOePo9osbmM/g6Z//BJhdp37aFkuUlSF+RvUU7qg1
D//NOM8wFvHvYiPFMJk1CjssI5NbfN4y5jaHFtx92WCACjLqEF+dYfrKW1LsYIcX
xzHqvjolkDEL8aUrjlZExTY9/TfJ/tfM4WmLNfGy+CQ0cNVx3rkiSLJnQ6ed76uC
SQkbbhz/6KGJaYuqanmtPR/x6LkpQtuUoCjB/im4RCeKEGa29jRS42H1FDrTNawX
7j3x+q3RF4I2TPejCg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 19:10:55 2026 by rpki-client