Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ZEalvqaDPg6vDFbBm38P1Z8Jq8s.roa
File: ZEalvqaDPg6vDFbBm38P1Z8Jq8s.roa (raw, json)
Hash identifier: FNJLPy4iN3h/6oz0YLRJiQciDIbh5VwflYDXb2NrPp4=
Subject key identifier: 64:46:A5:BE:A6:83:3E:0E:AF:0C:56:C1:9B:7F:0F:D5:9F:09:AB:CB
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019FF0E2EC1D4322B8EDBE9480AB8ED1CCFA
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ZEalvqaDPg6vDFbBm38P1Z8Jq8s.roa
Signing time: Tue 11 Aug 2026 12:53:51 +0000
ROA not before: Tue 11 Aug 2026 12:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.95.227.0/24 maxlen: 24
45.140.58.0/24 maxlen: 24
45.149.5.0/24 maxlen: 24
212.81.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:e2:ec:1d:43:22:b8:ed:be:94:80:ab:8e:d1:cc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 11 12:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6446a5bea6833e0eaf0c56c19b7f0fd59f09abcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:0d:b8:ee:56:dd:5a:1a:44:8b:94:c9:29:
84:92:8c:c2:7c:a0:74:ed:c3:ec:21:a0:b9:91:a1:
1a:cd:49:4c:a1:ea:45:b6:7f:1e:58:84:c1:9d:5c:
0e:18:50:6e:b9:ee:bf:df:13:f7:7c:30:6b:d2:f6:
4c:02:68:4b:ec:68:13:73:10:36:b5:0b:24:e8:9d:
68:e9:6d:25:4b:8f:38:fd:fa:1f:fb:02:72:83:4d:
11:c0:fb:73:b4:03:f3:74:02:6f:71:96:47:ba:52:
ba:38:09:16:c5:fa:61:d9:c6:72:8b:fa:56:0f:de:
69:05:7c:d3:43:77:33:e9:06:8e:6d:18:8f:fa:d0:
a3:75:9f:e1:ee:ba:f0:fe:6f:ef:ce:53:18:c1:cb:
7f:54:4b:94:da:03:5a:88:4a:c2:ce:48:80:3a:f1:
0b:58:fa:d3:97:45:ac:e5:3d:6f:ad:21:91:df:aa:
e6:ec:fb:0a:b2:54:9d:9b:3f:3f:22:83:11:54:0d:
cb:80:02:c2:a5:1b:54:80:a8:85:c4:fd:b9:fd:d7:
8c:fa:ff:9f:2b:88:46:96:88:8e:6e:c4:93:01:3d:
4e:65:03:a0:d6:e1:fc:01:29:2a:ec:90:d3:c5:aa:
5b:e7:92:68:03:94:a6:b6:86:50:54:4b:cc:ed:ab:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:A5:BE:A6:83:3E:0E:AF:0C:56:C1:9B:7F:0F:D5:9F:09:AB:CB
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ZEalvqaDPg6vDFbBm38P1Z8Jq8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.227.0/24
45.140.58.0/24
45.149.5.0/24
212.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f4:b7:f1:c2:11:3a:ec:7e:35:5b:36:72:12:a0:a7:f9:fe:
30:cb:b0:26:8e:93:47:86:42:a6:63:ef:50:d0:8c:a3:ec:82:
c3:52:15:2b:ec:1f:e4:3e:87:15:2a:29:1b:84:09:24:9f:0a:
34:ae:40:04:85:29:2c:39:15:75:c9:00:1f:0d:84:e6:29:18:
d1:15:fe:eb:c0:a2:3c:b3:cd:e3:1b:d5:f1:1c:4d:43:49:5e:
bd:55:a7:e8:b8:cd:c2:56:d6:bd:c0:23:6a:bc:7d:15:b3:45:
2b:03:fe:b9:b2:a6:e7:03:b2:34:16:23:2c:54:a0:22:43:66:
81:e2:1f:07:1d:fd:74:ae:4e:01:1d:8f:a3:38:9e:7e:22:fb:
24:23:88:1d:d3:b5:a6:40:ac:99:ab:2b:2d:da:39:88:1e:07:
f2:c6:86:a9:20:57:64:e9:e2:7c:6b:e8:02:d7:80:3b:02:08:
ca:0a:54:0b:a7:23:4e:77:39:a4:cf:68:77:55:90:b6:d0:50:
24:0b:34:f2:a3:fb:48:e2:93:f0:c5:cf:b6:5c:e9:c3:30:bf:
44:5c:e0:5e:b5:f8:49:0f:24:e6:b5:6c:c4:17:8c:0b:4a:1b:
c5:fa:1f:9c:77:95:a4:58:43:5d:3d:d7:09:37:88:88:ea:c9:
75:c7:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:57 2026 by rpki-client