Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZRVD0WPklOdLXEHNOmwqHr5GE3I.roa
File: ZRVD0WPklOdLXEHNOmwqHr5GE3I.roa (raw, json)
Hash identifier: S8PczszyV2Drgf7KZMkAHMR12MGLfPfplVg/ZSiaB0g=
Subject key identifier: 65:15:43:D1:63:E4:94:E7:4B:5C:41:CD:3A:6C:2A:1E:BE:46:13:72
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F3BDE62C3864CB0C9DABB8EA316E176AA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZRVD0WPklOdLXEHNOmwqHr5GE3I.roa
Signing time: Tue 07 Jul 2026 09:17:37 +0000
ROA not before: Tue 07 Jul 2026 09:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 88.209.203.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:de:62:c3:86:4c:b0:c9:da:bb:8e:a3:16:e1:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 7 09:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=651543d163e494e74b5c41cd3a6c2a1ebe461372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:5f:0f:24:c1:75:26:cf:2a:66:76:2a:a1:
68:fd:c7:79:83:35:c5:2c:be:50:c2:4a:86:e8:bb:
11:99:40:ba:29:63:e3:10:47:30:d2:f4:3d:d5:e1:
78:14:e5:7b:63:4b:11:6a:f3:0a:a4:14:fd:f5:d0:
7e:04:65:59:07:87:58:51:a6:d1:9d:0d:de:f2:c9:
05:37:b4:85:ba:f6:34:37:78:a9:96:72:4f:b3:61:
86:a9:eb:2f:e3:b8:ea:a6:37:f7:14:8c:f5:37:e2:
67:c3:5c:a1:16:39:03:71:1d:ab:db:32:54:01:ba:
0a:f6:ad:1e:2e:f7:c8:d3:ac:28:de:b3:58:d0:08:
af:1a:08:46:ae:79:c7:28:ff:cc:14:0a:34:b3:34:
29:8e:ab:6e:07:6c:b8:ae:5f:c6:20:43:a0:c8:1b:
8d:00:02:9d:d2:56:46:ef:a1:9c:72:1e:3c:b3:81:
8a:b2:e1:35:09:2f:66:d2:b2:87:33:ab:18:ad:af:
bb:fb:58:b6:5d:6f:cf:f5:cc:e0:cb:54:5d:90:e6:
ed:40:31:b6:86:3a:31:79:52:b4:46:e8:64:cd:a0:
8f:03:35:d1:e5:73:01:e5:18:df:08:1b:af:20:54:
bd:2e:14:cf:d5:a1:d2:af:c4:56:94:3d:98:cb:eb:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:43:D1:63:E4:94:E7:4B:5C:41:CD:3A:6C:2A:1E:BE:46:13:72
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZRVD0WPklOdLXEHNOmwqHr5GE3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.203.0/24
88.209.230.0/24
88.209.255.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:28:90:9c:14:71:6d:dd:ea:0b:52:21:d3:0a:ef:8f:6b:f2:
6f:e4:16:f0:63:44:28:d8:8c:f0:fc:bf:e9:56:8b:f4:22:d6:
19:cd:73:a2:21:65:57:1c:1c:17:99:d6:1e:75:9f:a5:74:83:
ef:73:fb:90:dd:9b:31:52:9d:1e:5b:81:be:da:c1:cb:62:74:
0e:54:5b:45:63:b8:8d:19:e6:77:fa:c2:0f:3c:9c:b1:5e:67:
1e:51:5c:f7:8e:23:cd:01:c7:19:64:bd:35:4a:93:9d:7d:b8:
3a:be:fc:88:e3:c7:a3:09:cb:e2:46:f2:bd:3b:5a:c4:a7:24:
a6:60:ba:85:e6:29:a9:69:0f:b4:8b:65:1a:54:50:f7:8a:ef:
90:b1:3c:c9:74:e2:a2:c9:34:94:14:20:93:59:06:c7:8a:0d:
ae:8f:2a:2c:a1:fa:00:bc:86:04:b0:84:16:39:9c:64:2c:8f:
a1:97:55:a4:3e:ea:0e:92:a7:84:2e:7a:f1:8f:f4:54:98:ed:
a0:c0:a9:3e:3e:f9:77:a2:e6:ce:00:3a:73:6c:ea:32:c1:80:
9f:73:0e:68:0b:d8:5d:36:05:76:31:98:a0:49:f7:9f:2a:1a:
f7:19:4e:6b:fb:fa:67:71:a4:65:38:2d:6e:1d:f5:44:27:7d:
a6:f8:b1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:15:07 2026 by rpki-client