Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/ZPkrtvVur46cS-5w8dwIkAjNZYE.roa
File: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (raw, json)
Hash identifier: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=
Subject key identifier: 64:F9:2B:B6:F5:6E:AF:8E:9C:4B:EE:70:F1:DC:08:90:08:CD:65:81
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019EC5EAFA89CFEA41A22C81DA1ED0AF55AD
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/ZPkrtvVur46cS-5w8dwIkAjNZYE.roa
Signing time: Sun 14 Jun 2026 11:36:11 +0000
ROA not before: Sun 14 Jun 2026 11:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203938
IP address blocks: 136.175.222.0/24 maxlen: 24
136.175.223.0/24 maxlen: 24
163.123.192.0/24 maxlen: 24
163.123.194.0/24 maxlen: 24
205.220.226.0/24 maxlen: 24
205.220.227.0/24 maxlen: 24
2a11:3a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:ea:fa:89:cf:ea:41:a2:2c:81:da:1e:d0:af:55:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jun 14 11:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64f92bb6f56eaf8e9c4bee70f1dc089008cd6581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:53:0d:58:96:1c:cc:ab:0a:6d:7f:6b:a1:
dd:f6:b0:f1:71:ab:00:fc:fe:eb:32:b3:74:16:d3:
7f:30:2f:7c:29:db:6d:9d:4f:f7:a8:be:54:2a:43:
15:2e:2c:7b:16:a3:e1:a4:30:5b:60:a6:17:1e:04:
84:c6:e3:a3:8a:87:c4:06:44:77:51:4f:9b:58:e3:
41:2a:d0:79:23:b3:e6:f0:59:ff:ed:0a:2e:6a:9e:
59:c8:93:0f:6b:d0:e1:cf:92:21:9a:cf:36:4f:b4:
8f:6a:c2:95:84:d8:7f:92:c2:58:e8:b7:b5:72:c4:
b6:df:ca:f1:9f:ef:bb:6a:13:9c:58:b4:63:6a:03:
1b:9d:c7:02:4b:16:c2:c6:aa:4b:d0:33:76:9e:7d:
69:59:62:95:e2:2f:cb:ab:1b:c0:6c:49:b4:b5:68:
96:a9:5c:20:7e:08:fe:5b:c6:43:71:2b:14:c9:c0:
f6:0b:28:a8:d4:b1:b0:87:bd:51:5b:f2:9a:f7:6a:
f7:15:b2:0a:76:a9:95:2c:23:32:e8:01:67:87:09:
c9:74:fa:56:c4:75:4d:f4:e9:0d:d6:b1:5a:87:01:
01:ac:66:64:a8:fb:c9:19:d1:1a:42:dc:b6:1d:43:
9d:fd:44:10:39:b7:d3:8d:53:95:be:ee:15:7b:29:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:2B:B6:F5:6E:AF:8E:9C:4B:EE:70:F1:DC:08:90:08:CD:65:81
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/ZPkrtvVur46cS-5w8dwIkAjNZYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.175.222.0/23
163.123.192.0/24
163.123.194.0/24
205.220.226.0/23
IPv6:
2a11:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:0d:e3:f6:7f:48:e8:f2:63:aa:c2:93:99:08:00:bf:c8:4e:
cb:8f:e0:3e:fd:01:42:12:d3:de:de:a9:a5:ae:77:6e:72:e6:
47:de:43:a0:7b:6c:66:25:c6:81:e9:eb:5a:ed:bd:49:37:83:
8e:e3:70:98:c7:fd:0f:4a:f6:24:c0:33:37:d4:c5:62:85:01:
34:c7:37:9d:c9:19:55:9c:ad:78:bd:f3:9b:9f:37:32:44:b7:
d4:aa:7c:75:c0:08:fc:f3:c5:e4:82:78:81:b0:36:fb:13:2e:
1e:2d:d3:92:cd:e3:41:fb:da:95:a3:7f:f2:af:02:98:e2:7f:
fb:f8:c7:b0:a6:7d:9b:85:74:a9:3a:04:4a:ae:b5:1f:d6:b1:
d2:2a:f2:89:52:77:a3:30:45:72:93:d8:a9:42:ea:f1:91:03:
48:c0:62:72:44:80:19:17:d0:cf:59:54:69:0e:1e:25:4a:78:
03:8f:26:79:90:34:51:ce:ad:73:ed:43:4e:d1:f1:f5:33:2e:
1a:23:9f:d6:fb:f7:f2:b6:a1:42:f1:92:1e:7e:04:12:a4:2e:
7b:08:7d:40:2a:cf:86:be:51:bc:00:b4:33:9d:96:9e:72:a7:
9f:56:92:de:c5:04:7a:85:fe:39:48:0f:0f:0b:82:e3:ad:b5:
b6:be:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:30 2026 by rpki-client