Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ZqWDhVxM8qdYaFH9Yk2xJ1tXsJg.roa
File: ZqWDhVxM8qdYaFH9Yk2xJ1tXsJg.roa (raw, json)
Hash identifier: eToQMhEgpJMDvrJen7hHcwd5VqrAu1zN/ruTDDmmCyc=
Subject key identifier: 66:A5:83:85:5C:4C:F2:A7:58:68:51:FD:62:4D:B1:27:5B:57:B0:98
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A0F65D84E9669638C9464DD43DD4544EF0
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ZqWDhVxM8qdYaFH9Yk2xJ1tXsJg.roa
Signing time: Thu 01 Oct 2026 07:28:38 +0000
ROA not before: Thu 01 Oct 2026 07:28:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 45.141.235.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:5d:84:e9:66:96:38:c9:46:4d:d4:3d:d4:54:4e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 1 07:28:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66a583855c4cf2a7586851fd624db1275b57b098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:81:8e:03:9f:96:87:bb:e6:0f:3d:5c:e1:
7d:8e:eb:17:eb:27:98:5e:a9:5a:51:b7:bb:a0:27:
e1:7e:55:48:e4:62:d5:11:d9:1d:97:c8:fd:6a:f2:
ab:01:a3:d9:21:40:a9:f2:8b:12:ba:7d:69:f1:5d:
1a:a0:51:2e:ad:e8:76:fb:91:a6:5b:8e:14:9a:0a:
02:24:fc:33:9e:18:20:91:2f:07:96:1d:6f:08:88:
6d:25:68:1f:eb:66:cc:52:8d:9e:ef:5a:c3:44:67:
e0:24:1e:b3:09:f9:ef:bd:2e:0f:1f:b0:82:6b:38:
ee:f6:1d:34:2d:6f:c8:b3:c2:8d:fe:55:1c:d9:ec:
97:a8:ab:6d:c9:ca:e4:fd:a3:fe:70:7a:4e:49:c0:
b5:56:34:4c:85:a4:12:1c:83:99:4e:7d:c8:82:28:
ea:c8:cb:bf:86:4d:ee:c8:4f:4c:c7:78:80:5c:83:
4e:1e:23:df:84:75:ae:07:21:a4:7c:30:f8:4c:71:
9e:55:eb:dd:7d:91:57:03:5d:52:88:3c:7e:3c:5e:
81:52:19:d9:76:69:12:cd:6a:8e:15:0d:02:81:3e:
95:8f:3e:9e:94:da:1b:3a:3f:d1:fa:05:fa:0f:fc:
de:5d:f9:7d:be:b8:05:03:3a:2d:d4:d0:58:3a:ed:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:83:85:5C:4C:F2:A7:58:68:51:FD:62:4D:B1:27:5B:57:B0:98
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ZqWDhVxM8qdYaFH9Yk2xJ1tXsJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.235.0/24
91.92.33.0-91.92.34.255
91.92.43.0/24
91.92.49.0/24
93.152.205.0-93.152.206.255
93.152.211.0-93.152.213.255
93.152.215.0/24
93.152.220.0/24
93.152.224.0/24
94.26.90.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f3:39:49:19:33:7a:d4:f9:80:5d:35:a1:74:c9:63:6d:7c:
96:90:93:ff:7d:3c:6a:31:81:4d:ed:07:ed:c5:dc:a5:38:61:
68:d6:22:14:fb:7a:0f:43:be:f6:1b:59:f6:fd:7d:b7:fe:89:
f2:57:78:c6:01:62:32:b5:49:bd:5b:73:00:1d:16:85:67:de:
05:34:cc:00:dc:ae:26:3a:e7:0b:63:30:83:28:68:b1:7e:77:
7b:82:46:4b:88:e2:55:49:43:61:8a:b3:dd:c4:e4:02:83:43:
82:ff:fb:27:f7:f8:b3:e2:cf:4a:7a:52:ea:29:3d:a1:d4:27:
62:2e:cf:56:29:f5:2c:e3:62:af:88:d5:60:1a:7e:2f:65:97:
d8:5f:4c:07:53:f1:85:f4:25:c9:67:15:28:e3:11:ab:f2:11:
3c:dc:50:a9:1d:de:d0:54:64:8b:bb:66:cc:e1:79:62:7e:65:
f3:67:91:5e:83:e4:36:a1:80:12:80:a1:be:96:a3:86:f5:7e:
b6:e0:b7:d6:32:8f:8e:6a:af:af:c5:8f:41:40:4a:4c:9a:3c:
01:c5:05:02:45:e2:35:98:3f:3c:d0:34:8a:4e:60:9d:bc:f1:
3f:9d:58:3b:a9:0e:83:20:55:28:21:e2:ee:bc:92:d3:ae:10:
93:7e:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:25 2026 by rpki-client