Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa
File: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (raw, json)
Hash identifier: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=
Subject key identifier: D1:92:A1:75:10:B5:21:23:72:2C:9A:AC:EE:AC:98:8D:DD:3D:31:A1
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 019F236845C2E6EE2F0D65CFB813831D0FAF
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33930
IP address blocks: 45.15.212.0/22 maxlen: 22
80.75.152.0/21 maxlen: 21
91.223.207.0/24 maxlen: 24
93.187.40.0/21 maxlen: 21
185.56.204.0/22 maxlen: 22
194.6.240.0/24 maxlen: 24
2a02:668::/36 maxlen: 36
2a02:668:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:c2:e6:ee:2f:0d:65:cf:b8:13:83:1d:0f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d192a17510b52123722c9aaceeac988ddd3d31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:a0:e6:89:72:8f:66:59:af:27:71:3e:8e:
aa:6b:97:2d:35:94:c7:c5:9b:7d:13:84:af:92:d6:
a3:da:89:b7:02:58:cc:68:70:e2:63:9c:a7:62:81:
89:43:60:c3:20:79:63:76:f9:4f:cf:82:b0:63:d1:
91:dd:64:4b:5a:51:c5:e3:33:26:0b:48:46:ab:13:
41:3e:9c:35:6a:4f:83:88:c4:e1:81:42:e5:06:85:
69:b5:e1:b1:e4:94:5b:f5:d5:3f:a3:33:60:cd:79:
07:92:1e:32:04:74:5e:e1:3f:ce:6f:1f:78:37:12:
60:d3:97:ab:84:6d:e6:65:e2:7a:c1:ac:ce:34:ca:
7a:9d:31:ed:f0:de:78:19:f9:ae:44:f6:7e:90:f3:
c5:8c:fe:b6:77:bd:f8:d4:e7:a6:b3:b9:e9:f7:21:
c9:4e:40:de:0d:9f:7b:3b:b7:b4:58:9b:1c:29:66:
bf:b9:2f:e3:6b:78:27:02:39:f6:f6:c6:e7:a8:a5:
e4:50:0a:44:65:da:6b:9e:fa:16:cc:53:bd:b8:44:
7b:d4:81:2a:da:34:c9:2a:be:ab:09:5f:6f:71:b3:
88:71:fc:90:97:c4:ea:b7:f8:42:89:62:36:91:9d:
8a:a8:1a:52:f9:42:2c:95:71:9f:87:8a:bf:41:c8:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:A1:75:10:B5:21:23:72:2C:9A:AC:EE:AC:98:8D:DD:3D:31:A1
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.212.0/22
80.75.152.0/21
91.223.207.0/24
93.187.40.0/21
185.56.204.0/22
194.6.240.0/24
IPv6:
2a02:668::/36
2a02:668:9000::/36
Signature Algorithm: sha256WithRSAEncryption
5d:02:38:c7:bb:f4:78:7d:43:0e:d6:e8:77:51:cc:db:e0:19:
97:7e:f2:38:9e:cc:27:49:6e:f6:f1:d5:3d:a4:66:1f:a5:1d:
04:48:17:ea:42:b8:53:8f:e1:22:ce:d6:af:9c:92:29:b5:4b:
96:9e:f2:d7:bd:71:dd:8d:d7:f0:16:42:ee:5f:91:78:c2:8e:
77:4a:15:49:8f:82:5a:22:a8:b6:83:67:3a:16:1d:b3:5a:7b:
4a:66:6d:19:15:58:c7:2b:d5:91:c3:ac:d4:30:d0:6e:41:8f:
b5:57:64:7d:32:65:7f:12:a4:33:54:ea:2b:27:2d:88:44:6d:
22:3f:f9:9d:b1:07:93:b2:d8:45:31:91:7f:e2:07:60:4c:0a:
dc:6f:b0:3d:46:b4:29:29:95:f8:e5:0f:ef:de:02:02:4e:e8:
64:33:cc:d5:d7:7a:b0:ba:ef:f9:14:fe:79:f7:9a:5e:85:06:
37:c8:62:86:30:76:2f:ac:ff:38:e0:63:24:a5:b6:08:17:ba:
5f:bc:53:1d:3e:af:25:60:b8:5d:56:0d:a2:2d:7b:d2:b0:34:
25:c2:4b:c0:39:fc:c2:41:2a:bf:55:67:e7:ed:78:64:a5:f0:
16:21:2a:61:4a:11:92:ea:05:de:06:a1:4a:6b:a8:aa:3e:cf:
c8:57:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:49 2026 by rpki-client