Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZrKbVYZNDGXyPoX9TehXx3w9Tpk.roa
File: ZrKbVYZNDGXyPoX9TehXx3w9Tpk.roa (raw, json)
Hash identifier: RZBo/THn7wot6RF9hc5wTm8k6FUTbQLttqg9GFy+l14=
Subject key identifier: 66:B2:9B:55:86:4D:0C:65:F2:3E:85:FD:4D:E8:57:C7:7C:3D:4E:99
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E4A1DA6359064FF2551BA9BEF939DFC32
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZrKbVYZNDGXyPoX9TehXx3w9Tpk.roa
Signing time: Thu 21 May 2026 10:38:37 +0000
ROA not before: Thu 21 May 2026 10:38:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212017
IP address blocks: 45.90.236.0/24 maxlen: 24
45.90.237.0/24 maxlen: 24
185.106.124.0/22 maxlen: 24
185.128.52.0/22 maxlen: 22
185.227.172.0/22 maxlen: 22
185.232.8.0/22 maxlen: 24
185.232.10.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:1d:a6:35:90:64:ff:25:51:ba:9b:ef:93:9d:fc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 21 10:38:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66b29b55864d0c65f23e85fd4de857c77c3d4e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:ad:36:ab:30:9e:69:b1:f3:f7:6c:10:c8:
4d:e8:ce:b6:01:f9:27:23:7d:62:c7:11:a9:b8:b4:
32:9f:01:fd:d2:2a:34:b9:3b:08:a7:a3:46:59:2c:
ba:ff:fa:bd:bf:6b:37:75:e3:62:35:0c:b2:ba:47:
b9:ae:e4:c7:00:e8:f2:36:94:c0:a6:39:90:10:15:
b2:c2:1e:99:f8:33:e4:0f:4e:54:c5:d9:21:ba:d7:
b4:77:07:18:b0:8c:d3:65:3e:f8:e5:8f:70:52:2e:
70:f8:88:00:db:3d:f3:2c:5d:af:8a:b3:6c:4a:2e:
ac:96:82:35:e2:17:57:77:6e:5c:6b:c5:c3:b2:28:
18:95:73:8a:ef:8c:61:f9:10:82:be:21:cf:e2:af:
56:e5:fd:de:ac:3e:7e:30:ef:7e:2c:5c:0d:75:75:
ea:6a:aa:a1:25:44:ac:4b:1b:59:ef:96:53:1f:fb:
4c:36:d1:26:55:d0:40:4d:52:5a:d0:12:4d:33:44:
37:4b:2d:48:1d:e7:77:28:0f:64:58:95:2a:fb:ba:
1a:fa:67:8a:79:27:18:fd:e4:b7:d4:6f:e0:99:72:
e0:57:a3:b5:54:de:9d:b3:ec:6f:90:cd:8b:56:e4:
42:84:84:00:ac:05:93:7c:ab:69:71:be:32:d6:3e:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:9B:55:86:4D:0C:65:F2:3E:85:FD:4D:E8:57:C7:7C:3D:4E:99
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZrKbVYZNDGXyPoX9TehXx3w9Tpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/23
185.106.124.0/22
185.128.52.0/22
185.227.172.0/22
185.232.8.0/22
193.17.182.0/24
194.48.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:de:cd:6d:c2:9e:3c:4b:41:8d:3b:51:44:2d:08:80:c5:f7:
6e:53:0b:9d:b3:59:69:2d:a6:c5:9d:91:5c:50:e2:60:e2:33:
f7:74:dd:99:b5:22:a5:3e:3e:63:a2:bf:b8:c4:51:77:60:31:
cc:6e:7a:64:75:12:5d:e2:86:dc:71:04:85:61:12:af:78:e4:
08:1b:d0:cc:93:0e:62:9b:b3:8a:e3:ad:35:75:9c:68:8b:bb:
91:76:ef:c3:68:69:c6:27:06:8a:c5:c1:e7:48:7c:ef:a2:f5:
d0:b2:15:2e:22:07:11:f4:7a:fb:19:14:91:89:86:9f:2c:50:
cb:85:f6:1e:e6:8d:30:52:9d:4f:8a:66:af:ae:cf:54:bf:16:
45:8d:c7:f0:2c:0e:57:18:58:b2:cc:7f:09:c8:13:cd:43:4b:
5d:ac:b9:7e:e9:01:a3:65:71:dc:92:d6:c9:58:3a:6f:91:fa:
ac:22:ee:a6:a2:fb:fa:0e:47:f1:4a:f4:90:10:fc:30:a8:75:
c4:87:57:aa:11:0d:6a:fb:e9:d3:63:65:d2:c5:d8:02:15:44:
01:ca:63:26:29:57:59:9f:0a:22:16:5e:b8:95:65:05:d2:a5:
d2:8c:c0:41:34:19:96:80:2c:20:b4:d0:15:a5:1f:d2:67:d0:
34:9b:33:83
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ5KHaY1kGT/JVG6m++TnfwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwNTIxMTAzODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmIyOWI1NTg2NGQwYzY1ZjIzZTg1ZmQ0ZGU4NTdjNzdjM2Q0ZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznetNqswnmmx8/dsEMhN6M62Afkn
I31ixxGpuLQynwH90io0uTsIp6NGWSy6//q9v2s3deNiNQyyuke5ruTHAOjyNpTA
pjmQEBWywh6Z+DPkD05Uxdkhute0dwcYsIzTZT745Y9wUi5w+IgA2z3zLF2virNs
Si6sloI14hdXd25ca8XDsigYlXOK74xh+RCCviHP4q9W5f3erD5+MO9+LFwNdXXq
aqqhJUSsSxtZ75ZTH/tMNtEmVdBATVJa0BJNM0Q3Sy1IHed3KA9kWJUq+7oa+meK
eScY/eS31G/gmXLgV6O1VN6ds+xvkM2LVuRChIQArAWTfKtpcb4y1j6jdwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFGaym1WGTQxl8j6F/U3oV8d8PU6ZMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWnJLYlZZWk5ER1h5UG9YOVRlaFh4M3c5VHBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLVrsAwQC
uWp8AwQCuYA0AwQCueOsAwQCuegIAwQAwRG2AwQCwjCMMA0GCSqGSIb3DQEBCwUA
A4IBAQAe3s1twp48S0GNO1FELQiAxfduUwuds1lpLabFnZFcUOJg4jP3dN2ZtSKl
Pj5jor+4xFF3YDHMbnpkdRJd4obccQSFYRKveOQIG9DMkw5im7OK4601dZxoi7uR
du/DaGnGJwaKxcHnSHzvovXQshUuIgcR9Hr7GRSRiYafLFDLhfYe5o0wUp1Pimav
rs9UvxZFjcfwLA5XGFiyzH8JyBPNQ0tdrLl+6QGjZXHcktbJWDpvkfqsIu6movv6
DkfxSvSQEPwwqHXEh1eqEQ1q++nTY2XSxdgCFUQBymMmKVdZnwoiFl64lWUF0qXS
jMBBNBmWgCwgtNAVpR/SZ9A0mzOD
-----END CERTIFICATE-----
Generated at Mon May 25 01:52:33 2026 by rpki-client