Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/zcNaM7Plu3xF6-dvi0ReFa0-aV8.roa
File: zcNaM7Plu3xF6-dvi0ReFa0-aV8.roa (raw, json)
Hash identifier: cASfX2g2hoBO9zunCC4qSdWKYm2AXNtfPSF57+QkbuE=
Subject key identifier: CD:C3:5A:33:B3:E5:BB:7C:45:EB:E7:6F:8B:44:5E:15:AD:3E:69:5F
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019FD66114999152D5BF446C849A32A88B3D
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/zcNaM7Plu3xF6-dvi0ReFa0-aV8.roa
Signing time: Thu 06 Aug 2026 09:21:54 +0000
ROA not before: Thu 06 Aug 2026 09:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215013
IP address blocks: 89.223.9.0/24 maxlen: 32
188.72.103.0/24 maxlen: 32
188.72.104.0/24 maxlen: 32
188.72.105.0/24 maxlen: 32
188.72.110.0/24 maxlen: 32
188.72.111.0/24 maxlen: 32
188.72.112.0/24 maxlen: 32
188.72.113.0/24 maxlen: 32
2a0d:d6c7:10::/48 maxlen: 48
2a0d:d6c7:11::/48 maxlen: 48
2a0d:d6c7:12::/48 maxlen: 48
2a0d:d6c7:13::/48 maxlen: 48
2a0d:d6c7:14::/48 maxlen: 48
2a0d:d6c7:15::/48 maxlen: 48
2a0d:d6c7:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:61:14:99:91:52:d5:bf:44:6c:84:9a:32:a8:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Aug 6 09:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdc35a33b3e5bb7c45ebe76f8b445e15ad3e695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:fe:a2:c5:b0:e0:5c:64:c3:5a:5b:46:03:
fa:f1:10:66:1b:51:be:ca:21:4a:e6:cc:64:d5:91:
e7:e8:6c:51:c7:36:4e:bb:22:dd:18:bb:3e:cf:f0:
0a:1d:01:fd:d9:17:95:73:de:4a:cb:27:bb:f2:72:
dd:80:8d:77:d9:71:9e:38:6a:a8:67:a2:14:87:1b:
45:d6:73:f8:17:46:38:1e:88:da:19:1a:cb:b4:67:
4b:5a:fb:ec:c8:57:2b:79:bc:05:12:f2:76:dd:1a:
df:3e:9a:b5:f4:3d:c7:4a:d8:5a:70:be:96:9b:fe:
89:ee:61:ae:da:b1:57:8a:ff:09:7e:7b:59:3f:61:
37:24:78:a5:bd:27:6b:29:fe:68:c2:e9:ee:c7:e1:
88:05:58:ce:f4:2a:ba:f2:af:d8:42:07:ba:a7:90:
ca:7a:1f:b5:56:eb:34:1d:d7:50:a4:e2:07:42:a3:
47:1a:d4:fb:5e:a1:65:63:45:0f:77:7f:6d:00:fd:
f2:6c:bd:fa:03:a7:2b:ad:b9:2b:13:5e:25:b6:d7:
49:c3:fc:dc:75:14:45:a0:eb:44:59:22:f2:4f:a0:
4e:80:42:f6:3f:8e:1a:a4:b6:29:ff:dd:67:a1:80:
95:2a:49:88:ce:60:b1:f6:99:ca:08:c6:ce:05:5f:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C3:5A:33:B3:E5:BB:7C:45:EB:E7:6F:8B:44:5E:15:AD:3E:69:5F
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/zcNaM7Plu3xF6-dvi0ReFa0-aV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.9.0/24
188.72.103.0-188.72.105.255
188.72.110.0-188.72.113.255
IPv6:
2a0d:d6c7:10::-2a0d:d6c7:16:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:d5:a6:11:b9:a5:aa:3c:4f:ab:a1:b4:60:d3:5f:54:05:b1:
a2:ca:9a:d5:3d:67:c6:74:7e:89:03:e1:ac:63:46:75:5c:7d:
94:3a:3a:46:63:00:a2:88:da:32:d7:2a:1e:2b:2e:36:5e:df:
dd:67:d9:4e:29:04:69:51:86:d8:7c:50:3c:fc:b6:1e:1e:04:
53:1b:8f:c0:b8:28:9a:cb:4c:15:c5:83:f5:2d:8b:4b:d6:e3:
6f:f5:1c:8d:7f:8d:db:39:f4:35:9d:6c:c8:bf:8f:74:b0:e6:
34:de:bf:6e:a5:8a:29:f3:bc:d9:1f:5b:b3:a4:ee:6d:f7:d8:
82:a0:c5:1b:3d:40:43:28:a8:2d:5d:58:cb:d4:1c:5e:e9:74:
88:e7:7d:4d:ac:fc:9b:3c:c1:db:15:1e:f1:36:4b:a0:6f:93:
ac:b4:6f:52:36:5f:15:53:dd:7a:e9:27:af:ed:e8:04:ee:9a:
8b:f7:9b:0f:c2:b0:33:8f:78:6e:75:53:63:6c:49:f2:4c:08:
88:92:ce:ba:a2:44:9d:24:d6:9a:52:75:cf:41:f5:e8:6a:0a:
91:e2:44:fa:e1:e5:bb:55:f7:d5:23:66:d5:51:3a:cb:79:45:
fa:64:3c:1f:10:37:cc:a5:d8:60:4c:6b:d0:fb:63:bf:e7:e4:
ea:39:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:50 2026 by rpki-client