Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ZL6zrkemzEADAhC0Fi3nhK_pom8.roa
File: ZL6zrkemzEADAhC0Fi3nhK_pom8.roa (raw, json)
Hash identifier: vHAbtfbPDaOsa5CvBYtUditrWJEPKQpb6oj185KbRTc=
Subject key identifier: 64:BE:B3:AE:47:A6:CC:40:03:02:10:B4:16:2D:E7:84:AF:E9:A2:6F
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F236837A7DC666CC577F377CE1E2FA5AF
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ZL6zrkemzEADAhC0Fi3nhK_pom8.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 31.42.128.0/24 maxlen: 24
31.42.129.0/24 maxlen: 24
31.42.131.0/24 maxlen: 24
31.42.144.0/24 maxlen: 24
31.42.145.0/24 maxlen: 24
31.42.153.0/24 maxlen: 24
185.206.56.0/24 maxlen: 24
185.206.57.0/24 maxlen: 24
185.206.58.0/24 maxlen: 24
185.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:a7:dc:66:6c:c5:77:f3:77:ce:1e:2f:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64beb3ae47a6cc40030210b4162de784afe9a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:a8:21:2b:e0:af:97:d6:34:2b:b4:1d:92:
4d:d4:56:2e:c7:2e:f4:cc:f6:8f:e6:66:e9:6f:86:
0d:72:be:fb:77:eb:a8:96:d4:4d:fd:13:8e:1b:fc:
81:10:78:a8:7d:bc:c1:d2:71:d8:b8:29:46:33:41:
1f:7d:08:99:29:48:d3:92:e9:4a:cf:36:8d:f0:9c:
4e:8a:e2:34:22:13:3e:d1:3e:06:65:28:34:c7:b1:
78:89:66:f6:0c:e5:06:d4:34:99:11:72:ac:7c:25:
b2:68:c2:15:98:46:eb:70:73:21:98:6d:f4:71:93:
c1:3f:05:0b:76:1c:f0:66:6f:86:c5:de:5e:48:fa:
5f:5b:5c:a3:8f:04:49:d7:56:a3:1d:73:c1:74:e4:
2b:39:07:c0:72:dd:ca:cf:1b:28:84:13:19:0c:3d:
1b:07:7b:83:5d:d8:d0:72:64:39:61:b0:aa:36:b8:
c4:eb:e0:55:d6:3b:eb:2d:f1:9d:1c:84:38:57:b0:
c1:7e:01:51:85:8d:0d:6d:5a:10:8f:6e:1b:53:47:
62:96:ca:df:45:83:c1:e0:29:0a:ec:00:ef:0b:0b:
51:9c:ed:09:11:1e:32:f9:a0:90:19:a5:dd:52:1c:
4d:c2:87:0d:93:07:06:d7:70:79:93:75:85:c9:97:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BE:B3:AE:47:A6:CC:40:03:02:10:B4:16:2D:E7:84:AF:E9:A2:6F
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ZL6zrkemzEADAhC0Fi3nhK_pom8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/23
31.42.131.0/24
31.42.144.0/23
31.42.153.0/24
185.206.56.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b6:75:40:7e:db:62:2c:1f:c3:5a:53:f6:20:73:f3:80:87:
62:18:2d:b1:0b:2b:4c:ed:61:36:20:e8:4a:df:6e:44:9b:9f:
5e:0d:98:bc:1c:8c:a5:bf:c0:85:1a:22:0f:da:30:a5:fd:df:
64:cf:43:ea:0b:8c:96:f9:d5:1f:de:6a:a0:bb:91:aa:47:cc:
1e:ce:f0:92:ae:c8:99:d5:fb:68:74:5d:21:6b:ba:f7:f9:1f:
5d:8e:5a:01:0c:89:b6:07:36:c0:2c:d9:9d:c4:54:e4:c4:f4:
d6:f2:88:48:bd:7c:d9:e5:60:a7:51:2c:11:c2:eb:c1:b8:c4:
d3:d0:ae:b1:13:fb:ae:4b:68:6c:d4:42:64:61:32:d9:b5:1a:
85:27:8d:b8:4e:52:75:24:c3:6f:b0:d8:6f:30:a2:bb:8b:39:
8f:ec:8a:cd:6e:b3:c6:93:04:09:39:67:f7:30:3d:bb:14:88:
96:ce:4b:a8:33:6c:13:97:83:25:4c:98:a4:be:60:ad:98:df:
67:e7:7b:89:ef:03:3a:74:0d:66:f4:94:25:62:95:1c:9e:a4:
2d:14:47:45:92:c9:b5:17:7e:0d:3a:01:56:69:b8:e1:ed:6d:
71:43:af:5f:d8:37:d4:20:f3:a2:20:18:ab:1a:53:3c:cc:54:
c9:53:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:28:48 2026 by rpki-client