Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zpTfqIHrOLv48P0_PpXsRS19UAI.roa
File: zpTfqIHrOLv48P0_PpXsRS19UAI.roa (raw, json)
Hash identifier: Qyxap6R4QUt8ExbFTZfhlG2bJ/dE8if0GDI4OIUxFdQ=
Subject key identifier: CE:94:DF:A8:81:EB:38:BB:F8:F0:FD:3F:3E:95:EC:45:2D:7D:50:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E2681BD534CE221CCFFDC48C412C7A4C2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zpTfqIHrOLv48P0_PpXsRS19UAI.roa
Signing time: Thu 14 May 2026 12:41:37 +0000
ROA not before: Thu 14 May 2026 12:41:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 45.8.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 18 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:81:bd:53:4c:e2:21:cc:ff:dc:48:c4:12:c7:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 14 12:41:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce94dfa881eb38bbf8f0fd3f3e95ec452d7d5002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:b4:f3:50:af:1e:79:f9:49:47:3c:5b:1c:
dc:68:ca:ac:80:88:90:d7:2a:13:e5:bf:a4:66:45:
cb:48:24:fd:d9:c1:21:18:79:41:fc:6d:51:5e:01:
84:7f:7f:e8:24:8c:f8:9b:4e:e5:3d:38:b2:c6:62:
f7:8d:32:64:6c:0a:b7:56:a9:05:c4:c5:19:bb:31:
35:58:30:0d:1e:32:21:94:ee:5c:b7:a6:c1:33:53:
5c:74:ff:5c:ca:30:04:91:06:82:42:0c:60:71:ad:
be:dc:3f:2e:a0:22:76:4d:bf:f0:3d:8a:e1:c5:22:
ea:96:aa:2c:40:91:3e:a3:6c:14:d7:cb:32:90:75:
5d:0b:8b:9b:a9:6b:88:16:07:df:34:ca:c5:df:5d:
20:bb:23:39:c0:47:58:c2:5d:9a:14:50:01:8e:9c:
19:88:1d:d1:2d:48:e3:da:10:54:c6:2b:3e:dd:89:
a2:24:38:7a:61:e1:8b:4c:7b:6a:fd:a3:67:be:76:
69:d6:48:0b:69:8d:3c:08:54:02:ac:67:b2:91:30:
5f:19:d7:b0:9a:03:16:b9:03:c3:44:f0:ad:0e:77:
17:b3:03:6b:d2:aa:11:c4:ff:e9:63:de:ad:1d:71:
19:f3:85:aa:f4:3b:c7:97:14:d3:7e:77:36:1f:9d:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:DF:A8:81:EB:38:BB:F8:F0:FD:3F:3E:95:EC:45:2D:7D:50:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zpTfqIHrOLv48P0_PpXsRS19UAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bf:a3:70:9b:5d:ed:dd:68:04:64:30:93:68:e1:77:b4:b7:
10:30:42:29:2d:6c:46:40:72:db:26:72:37:9d:c8:2d:7b:2b:
1a:ae:3f:2f:23:50:4b:f4:ef:49:b9:11:23:cc:d3:6d:23:dd:
14:70:b6:36:f7:04:c8:a3:4a:b0:e4:2a:b0:dd:65:54:93:d9:
4c:c2:bc:b8:4b:be:83:9e:d2:31:ae:6a:96:4d:44:06:79:25:
2f:8d:2b:62:56:ed:56:1f:03:aa:63:20:56:d9:7b:69:b6:00:
46:53:7d:fa:ab:8d:6d:36:c9:58:ad:57:67:3c:d8:8f:f9:ed:
df:1e:0a:6c:77:4d:c6:6e:0d:ca:05:af:87:4a:c9:14:01:37:
14:ed:9d:fb:01:27:e4:27:3a:9f:c6:e9:f1:7f:5f:6f:f2:d0:
de:2a:3f:a2:d1:0d:23:f6:2a:eb:13:b2:ec:d9:ef:ea:14:57:
1c:d3:17:cf:49:6a:80:ab:4b:91:fb:9a:6f:7e:94:46:61:11:
e2:63:6d:d8:cb:54:58:5b:cf:cb:5f:a7:82:c1:75:7a:fa:6b:
c2:81:bd:16:ee:99:80:bc:d9:ce:e7:86:6d:47:43:1e:96:24:
7f:30:43:12:1f:13:f4:fb:3c:7c:a9:1d:44:36:b4:34:48:c9:
18:26:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 01:43:11 2026 by rpki-client