Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/ZX6lsgmqWqfBbvdIZVAv-LkHXjw.roa
File: ZX6lsgmqWqfBbvdIZVAv-LkHXjw.roa (raw, json)
Hash identifier: paG7reljn12FATwxcI7xrDVRAlmHueXZGfRZ/kgqoKU=
Subject key identifier: 65:7E:A5:B2:09:AA:5A:A7:C1:6E:F7:48:65:50:2F:F8:B9:07:5E:3C
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BDD6974C3024A627F396BA3A9AF1E
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/ZX6lsgmqWqfBbvdIZVAv-LkHXjw.roa
Signing time: Tue 15 Sep 2026 21:49:27 +0000
ROA not before: Tue 15 Sep 2026 21:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 142.228.14.0/23 maxlen: 23
142.228.56.0/23 maxlen: 23
142.228.68.0/22 maxlen: 22
142.228.76.0/22 maxlen: 22
142.228.90.0/23 maxlen: 23
142.228.92.0/22 maxlen: 22
142.228.120.0/22 maxlen: 22
142.228.144.0/22 maxlen: 22
142.228.148.0/23 maxlen: 23
142.228.236.0/24 maxlen: 24
142.228.237.0/24 maxlen: 24
198.33.132.0/22 maxlen: 22
198.33.136.0/24 maxlen: 24
198.33.143.0/24 maxlen: 24
198.33.144.0/24 maxlen: 24
198.33.145.0/24 maxlen: 24
198.33.148.0/24 maxlen: 24
198.33.149.0/24 maxlen: 24
198.33.152.0/22 maxlen: 22
198.34.68.0/24 maxlen: 24
198.34.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:dd:69:74:c3:02:4a:62:7f:39:6b:a3:a9:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=657ea5b209aa5aa7c16ef74865502ff8b9075e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:06:10:dc:02:2e:3a:0c:4f:78:f8:be:d1:
31:4b:09:cf:52:35:bb:2d:c1:41:34:57:69:fa:69:
19:fd:8f:ed:9d:a8:ff:00:6f:a3:07:fc:76:25:19:
e1:ea:ee:e8:3f:85:b0:6f:07:46:3c:c0:5c:74:48:
45:9c:15:36:cc:42:5d:04:98:71:72:60:10:5a:dc:
7b:e2:11:a9:97:cb:fe:42:31:f4:1a:ff:3a:8d:5e:
5d:5a:8e:ff:5e:ca:c4:1b:cd:20:0f:30:9d:02:1a:
61:0b:1c:db:64:21:41:99:85:d3:6c:72:b8:4e:20:
93:4c:fa:b1:67:55:9e:e9:24:72:e8:dd:bd:c2:33:
b4:18:0f:be:30:db:53:c7:04:e5:fc:21:ea:84:20:
2a:8f:49:3e:33:04:a7:9d:33:17:28:56:3f:87:8a:
91:03:24:be:df:74:1a:aa:f1:0b:85:19:fb:88:00:
62:7e:e2:7d:d5:a6:79:07:f7:d4:7a:a1:2f:a9:fc:
40:3a:0b:ae:70:cc:53:17:ca:46:25:64:b9:2d:4a:
dd:da:ee:9b:12:e4:ef:dd:9d:fa:8b:a3:0e:37:83:
1e:e1:a4:89:12:b1:30:fa:73:a8:79:14:87:65:75:
60:88:63:22:65:62:29:7f:e8:f8:f4:82:91:27:8a:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7E:A5:B2:09:AA:5A:A7:C1:6E:F7:48:65:50:2F:F8:B9:07:5E:3C
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/ZX6lsgmqWqfBbvdIZVAv-LkHXjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.14.0/23
142.228.56.0/23
142.228.68.0/22
142.228.76.0/22
142.228.90.0-142.228.95.255
142.228.120.0/22
142.228.144.0-142.228.149.255
142.228.236.0/23
198.33.132.0-198.33.136.255
198.33.143.0-198.33.145.255
198.33.148.0/23
198.33.152.0/22
198.34.68.0/24
198.34.77.0/24
Signature Algorithm: sha256WithRSAEncryption
17:81:57:29:40:4e:45:15:f9:cd:05:2f:87:ad:a7:94:f8:4a:
07:b3:73:de:d3:95:a0:d4:24:b1:e8:23:9b:ab:2c:b6:77:89:
4d:a8:68:e9:83:34:8a:4c:87:60:b3:9e:52:54:b0:c6:a9:93:
d1:cb:4f:28:04:6c:df:c5:7d:50:11:1b:d9:89:37:c1:dc:6d:
ed:ab:cb:85:e0:8b:f5:c6:e0:a8:cf:7c:aa:e4:fa:88:85:12:
f6:5e:80:c0:c9:51:8b:7d:9f:01:a3:13:b4:a4:37:a3:62:14:
c0:ba:ca:06:0d:c5:fa:c7:23:b8:08:6d:73:f9:7b:39:94:b3:
bb:f7:6e:fb:a4:20:fd:e5:a3:d6:2c:cd:21:ec:b4:03:fd:2a:
f1:3e:3f:1f:43:4f:d0:c1:2b:88:c6:12:59:68:4f:96:94:7d:
bc:17:5c:71:14:b8:e3:00:3a:58:25:b2:27:2f:0f:d8:17:d5:
7a:c0:34:b0:c6:8b:c9:b9:ca:e7:20:40:b9:5a:89:55:0b:90:
b2:94:48:a6:6b:43:af:49:28:8e:43:61:08:ec:e0:89:db:fb:
6c:05:e0:b2:c3:d5:40:6b:63:f1:33:5d:a2:bb:4e:44:6a:bc:
7e:f6:c9:4d:bb:a5:cf:d7:46:5a:ac:97:f7:86:90:be:36:09:
c8:6b:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:46 2026 by rpki-client