Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/zTdl3fj02AcI9H4s8ZBF6ZAHZbQ.roa
File: zTdl3fj02AcI9H4s8ZBF6ZAHZbQ.roa (raw, json)
Hash identifier: Y/MZK+Lf6qkYapa6jxWN717KodB4qx6aFOutmlhqzfo=
Subject key identifier: CD:37:65:DD:F8:F4:D8:07:08:F4:7E:2C:F1:90:45:E9:90:07:65:B4
Certificate issuer: /CN=6b9e1c3e395f7657515d0e85fb3c50d351d20020
Certificate serial: 019F2368EA292FAD7ED54515EFB51917267E
Authority key identifier: 6B:9E:1C:3E:39:5F:76:57:51:5D:0E:85:FB:3C:50:D3:51:D2:00:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/zTdl3fj02AcI9H4s8ZBF6ZAHZbQ.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202619
IP address blocks: 94.158.32.0/21 maxlen: 32
94.158.40.0/21 maxlen: 32
176.109.176.0/21 maxlen: 32
176.109.184.0/21 maxlen: 32
176.109.224.0/20 maxlen: 32
176.109.240.0/20 maxlen: 32
185.33.140.0/23 maxlen: 32
185.33.142.0/23 maxlen: 32
193.192.36.0/24 maxlen: 32
193.192.37.0/24 maxlen: 32
194.246.92.0/23 maxlen: 32
194.246.94.0/23 maxlen: 32
2a03:a9c0::/30 maxlen: 128
2a03:a9c4::/30 maxlen: 128
2a0d:ec0::/30 maxlen: 128
2a0d:ec4::/30 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:29:2f:ad:7e:d5:45:15:ef:b5:19:17:26:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9e1c3e395f7657515d0e85fb3c50d351d20020
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd3765ddf8f4d80708f47e2cf19045e9900765b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:d5:ce:f3:94:f6:be:03:07:56:48:18:81:
78:b5:49:f3:52:aa:86:07:65:eb:e6:6c:93:9a:fe:
9c:fc:4a:65:f1:cf:82:bc:d5:13:bd:24:c2:d5:d9:
cf:99:b9:e6:95:d1:c9:d4:54:d3:35:4f:2d:ae:fd:
4b:56:60:ac:91:63:d5:56:9d:80:eb:e4:90:43:74:
ab:8c:3a:26:6e:6c:00:2d:d9:ec:8d:db:a3:47:ac:
37:0c:fa:c9:05:5d:e5:7b:42:d7:46:e3:79:84:03:
79:25:8f:87:44:7f:99:35:fb:d8:ff:b0:47:cb:11:
e7:92:45:29:60:18:10:f2:d1:44:2f:9e:21:74:4b:
b8:bc:d1:ba:4b:35:6d:e8:8b:4e:53:1a:13:e8:33:
b7:3d:2d:53:46:2b:6a:6d:2b:5d:bb:00:6b:4e:7a:
5a:3c:70:2d:b5:ed:7b:a1:19:82:a1:da:cb:fb:90:
dc:07:5f:dd:7b:35:84:e4:c9:6f:53:8b:d1:1a:d3:
f8:1c:06:7b:50:ff:32:9c:75:96:a0:9e:8a:4f:25:
2b:5c:2a:7d:f4:14:36:a8:0f:42:fe:6f:07:5d:0d:
01:94:12:9f:5d:09:6b:5c:35:73:0b:eb:6b:9d:5b:
5d:12:16:8e:de:f3:1f:10:73:64:7c:0f:f5:c5:b9:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:65:DD:F8:F4:D8:07:08:F4:7E:2C:F1:90:45:E9:90:07:65:B4
X509v3 Authority Key Identifier:
keyid:6B:9E:1C:3E:39:5F:76:57:51:5D:0E:85:FB:3C:50:D3:51:D2:00:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/zTdl3fj02AcI9H4s8ZBF6ZAHZbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.32.0/20
176.109.176.0/20
176.109.224.0/19
185.33.140.0/22
193.192.36.0/23
194.246.92.0/22
IPv6:
2a03:a9c0::/29
2a0d:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
66:3b:0c:2c:0a:c8:04:51:af:27:f5:41:ac:e0:0f:28:ea:f4:
86:ac:6c:78:02:5c:55:e8:97:9b:41:8d:79:06:00:e3:72:28:
dc:d7:e9:e5:87:6b:cb:8c:a5:2f:bf:6b:e0:3e:48:d1:09:1f:
46:24:4f:36:33:fd:c4:0c:7e:97:80:09:44:af:9d:21:a4:7e:
94:b8:9e:f1:98:f1:6a:92:ed:20:df:0f:be:d7:8f:b0:3e:f1:
a7:e1:ae:fd:d4:2b:89:e4:18:22:93:7e:29:2e:52:9d:f6:ad:
94:fe:2d:66:38:fb:c8:f9:c9:d9:81:d2:6a:b4:91:cc:73:bf:
2a:3e:fc:3f:d0:2d:66:7e:a1:bb:dc:8e:7c:b8:05:90:ac:91:
c1:da:89:22:75:ce:79:d8:40:58:ea:2e:48:3b:51:eb:3d:e4:
80:ae:9b:c4:37:50:9e:bf:de:0a:b6:61:91:ef:0a:10:d9:06:
2b:d8:36:52:20:41:28:17:72:41:35:fb:d8:d9:25:d4:76:74:
eb:4c:c2:be:2e:ba:aa:b6:43:50:ec:01:e7:3d:00:96:2f:d3:
0b:d2:c1:e1:99:6f:eb:e3:12:57:e2:f8:f2:a5:79:56:8a:f1:
b1:c5:46:27:17:41:10:14:95:fb:a6:79:d3:ad:1d:bb:f1:bc:
12:f1:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:42:45 2026 by rpki-client