Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/zgvEdMDZHbRR3S85g3W5-vdoz24.roa
File: zgvEdMDZHbRR3S85g3W5-vdoz24.roa (raw, json)
Hash identifier: gVCQ/4xNYvogByqiF6Uw696rFdgMuXOWFwRJziSooto=
Subject key identifier: CE:0B:C4:74:C0:D9:1D:B4:51:DD:2F:39:83:75:B9:FA:F7:68:CF:6E
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F23683487B61AFAE769F95F288372E609
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/zgvEdMDZHbRR3S85g3W5-vdoz24.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136787
IP address blocks: 31.42.156.0/24 maxlen: 24
31.42.157.0/24 maxlen: 24
31.42.158.0/24 maxlen: 24
31.42.159.0/24 maxlen: 24
185.102.48.0/24 maxlen: 24
185.102.49.0/24 maxlen: 24
185.102.50.0/24 maxlen: 24
185.102.51.0/24 maxlen: 24
185.183.88.0/24 maxlen: 24
185.183.89.0/24 maxlen: 24
185.183.90.0/24 maxlen: 24
185.183.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:87:b6:1a:fa:e7:69:f9:5f:28:83:72:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce0bc474c0d91db451dd2f398375b9faf768cf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:22:d2:68:82:54:54:c4:06:93:3f:75:6d:
09:18:9c:5e:b0:2b:c4:dd:35:a6:5d:22:b2:9b:09:
04:3f:e9:f1:fe:73:b6:e7:5c:15:60:c1:41:bf:47:
59:1b:a9:6d:a5:bd:fa:c6:b8:eb:15:19:00:86:4c:
c0:8c:7d:16:8e:e8:1b:11:ae:40:91:fa:ed:a0:b7:
e6:4d:3d:9b:43:ce:c1:94:49:5f:cd:68:a1:c9:88:
0b:16:ec:35:5e:06:e6:32:ba:27:7d:d5:de:0b:64:
fa:7d:ff:2c:82:f1:55:76:b0:34:b9:39:d1:31:80:
ff:f6:98:30:c1:71:f7:70:81:7a:e0:16:a5:a7:a3:
3a:99:64:38:06:13:c7:ae:1e:0d:9c:36:e7:b0:2c:
90:20:9f:8d:11:ab:c4:66:44:c1:cb:25:fe:92:ea:
db:aa:48:04:4b:54:2d:18:17:4d:65:57:4d:30:4e:
d2:b9:93:6d:1b:44:f3:13:ef:e8:94:a8:da:c0:3e:
4f:e6:b0:ee:84:e0:a7:3f:16:56:96:b0:7a:59:11:
11:1d:64:5b:b9:97:ba:db:61:29:08:ca:3e:a4:b4:
7c:25:78:9f:81:5a:dc:c7:cc:29:b7:71:7f:2f:e6:
18:dd:16:b9:af:db:63:51:90:26:c2:25:9e:01:91:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:C4:74:C0:D9:1D:B4:51:DD:2F:39:83:75:B9:FA:F7:68:CF:6E
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/zgvEdMDZHbRR3S85g3W5-vdoz24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.156.0/22
185.102.48.0/22
185.183.88.0/22
Signature Algorithm: sha256WithRSAEncryption
66:a7:8a:22:71:72:be:83:47:38:9e:8b:f8:b6:e3:47:b4:3f:
eb:54:54:05:1e:ab:57:df:48:b8:88:1a:bc:70:17:05:96:65:
cd:54:58:0c:fb:44:16:37:69:4e:32:b3:e7:b4:0e:57:b1:f7:
d7:29:6e:fe:af:31:9c:de:71:7d:f1:9b:3d:93:5f:20:7b:b3:
de:ef:3d:e0:c5:f0:5f:16:2e:94:75:f8:8e:ab:59:64:92:6f:
bf:11:42:2e:a2:a7:67:4c:b5:4b:d7:06:a9:3a:85:38:f5:75:
03:de:d3:e0:6b:29:0f:c4:0f:0e:c0:48:32:10:47:c8:30:a6:
fb:ab:de:19:d4:f2:5a:7f:ad:e1:a6:c0:35:c8:39:96:4a:6b:
a5:59:cb:f9:c5:07:4e:3e:27:3f:a7:69:aa:43:8e:bf:56:15:
85:08:d9:c3:a4:8c:d6:9a:4e:e5:5f:b9:fb:ff:cb:44:81:93:
ea:59:3f:c3:1c:6b:3b:71:cf:43:3d:60:85:fb:aa:ad:ab:98:
a4:51:bc:55:5d:95:4d:cf:52:ab:ae:89:f3:cb:d0:bb:90:a5:
06:cd:79:a0:04:f7:43:73:73:ea:66:bb:fc:dd:c0:e3:32:4c:
6c:07:4b:45:b7:51:b8:2a:f3:3a:b8:24:fa:9d:ef:fb:69:b4:
8d:b6:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:28:45 2026 by rpki-client