Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZmxAzTdpyOHGn1oGXDJkCvMWh_A.roa
File: ZmxAzTdpyOHGn1oGXDJkCvMWh_A.roa (raw, json)
Hash identifier: RJ1urSQtZ0MaFoKerRAcxgAUxsoMUSf8Kqmy+pHBJcs=
Subject key identifier: 66:6C:40:CD:37:69:C8:E1:C6:9F:5A:06:5C:32:64:0A:F3:16:87:F0
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01A126021DF41B616E999E30A2538F0AD2AA
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZmxAzTdpyOHGn1oGXDJkCvMWh_A.roa
Signing time: Sat 10 Oct 2026 13:30:35 +0000
ROA not before: Sat 10 Oct 2026 13:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202492
IP address blocks: 5.10.240.0/22 maxlen: 22
37.128.200.0/22 maxlen: 22
46.23.104.0/24 maxlen: 24
46.23.105.0/24 maxlen: 24
46.23.106.0/24 maxlen: 24
46.23.107.0/24 maxlen: 24
85.158.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:02:1d:f4:1b:61:6e:99:9e:30:a2:53:8f:0a:d2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 10 13:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=666c40cd3769c8e1c69f5a065c32640af31687f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:81:06:78:e5:01:c5:16:08:3c:e6:91:3b:
7d:0a:79:b3:55:50:dc:fb:18:e8:21:3b:e6:bc:65:
0a:82:96:f8:4b:37:aa:1d:85:a6:e0:dd:0f:90:72:
34:6b:39:7d:40:c5:df:dd:38:78:a5:fc:f4:b6:ab:
87:29:83:6e:b7:1c:f0:ab:c7:4e:bb:63:d6:ac:d7:
b8:69:2a:38:74:a9:02:21:5d:05:e7:76:20:73:84:
b2:2b:65:11:e7:ce:ea:1f:f5:df:08:9c:be:10:4f:
a9:6d:08:9e:75:57:25:99:0a:aa:f1:2a:db:93:90:
3e:3b:fc:94:4c:44:b1:97:ea:b2:47:84:6f:f9:85:
24:e1:52:1b:d7:6e:a9:76:8f:97:4b:ff:68:c6:3b:
2a:8d:43:be:89:bb:a3:fa:3c:15:84:59:a5:d8:10:
9e:98:3e:48:e6:62:08:55:53:a0:dc:8f:4d:01:56:
17:9c:6c:4f:3f:ff:72:6c:53:ce:6c:fa:91:04:fb:
e6:df:e6:bc:20:49:04:ce:fc:81:93:01:d8:b7:61:
30:91:99:cd:aa:68:7c:5f:20:ec:4b:80:44:2a:43:
71:65:8c:0b:ba:b7:ef:47:92:df:ec:10:70:dd:e1:
da:9c:b8:ed:48:6f:0c:58:46:9a:a7:4a:60:a1:5d:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:40:CD:37:69:C8:E1:C6:9F:5A:06:5C:32:64:0A:F3:16:87:F0
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZmxAzTdpyOHGn1oGXDJkCvMWh_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
37.128.200.0/22
46.23.104.0/22
85.158.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:95:e8:17:0d:2a:90:45:3e:92:c6:d0:2c:c0:29:79:94:1b:
4e:b7:e1:50:48:0c:df:5d:57:6d:16:c6:6f:b1:2c:37:cc:a5:
3d:c3:0d:9f:db:75:ed:e3:e7:65:25:23:b1:47:42:67:a4:ae:
bf:9c:29:a9:74:55:6c:62:bf:4f:98:5c:08:cf:f7:c2:ce:ba:
b0:56:3d:d3:cd:bd:62:ab:86:cb:de:47:2d:54:25:b0:2b:bf:
42:54:cb:64:eb:3a:35:3f:c8:94:cd:61:75:98:6e:27:9f:7e:
bd:c0:af:58:77:ad:8c:8e:3e:e1:21:fb:d9:e2:97:59:7e:a4:
2b:98:7a:28:55:0a:26:bf:f6:2c:a4:e1:e0:0f:85:fc:43:d7:
8c:14:1c:98:7d:b5:56:00:a3:cb:2c:85:4b:a2:32:44:a5:b4:
98:e0:e6:70:38:4b:8c:37:6a:43:04:c4:5c:9f:de:7d:74:d6:
b8:4e:95:6f:c2:d3:f3:24:9e:b3:94:db:48:1e:df:2d:77:a4:
8b:72:0c:9f:3e:5e:68:aa:5a:84:ff:65:45:ad:a8:af:8a:f4:
4c:67:bf:82:e5:2c:76:b2:6c:e1:56:88:91:99:70:1a:09:26:
5a:07:8b:d9:e2:f9:3c:ea:93:cb:e0:43:76:f5:e1:8d:06:6a:
c0:53:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:00 2026 by rpki-client