Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/zgZHSMsyHtY73_v_FBr0Pr71LZs.roa
File: zgZHSMsyHtY73_v_FBr0Pr71LZs.roa (raw, json)
Hash identifier: j0pWXsbudMoLAPQKtP3pWE8UBPeMCQBek4SG6sjP7H0=
Subject key identifier: CE:06:47:48:CB:32:1E:D6:3B:DF:FB:FF:14:1A:F4:3E:BE:F5:2D:9B
Certificate issuer: /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial: 019F23693B89FDACB6BDEAFB5BF960538FEE
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/zgZHSMsyHtY73_v_FBr0Pr71LZs.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24812
IP address blocks: 91.225.4.0/22 maxlen: 22
178.159.208.0/20 maxlen: 24
178.159.208.0/24 maxlen: 24
178.159.209.0/24 maxlen: 24
178.159.210.0/24 maxlen: 24
178.159.211.0/24 maxlen: 24
178.159.212.0/24 maxlen: 24
178.159.213.0/24 maxlen: 24
178.159.214.0/24 maxlen: 24
178.159.215.0/24 maxlen: 24
178.159.216.0/24 maxlen: 24
178.159.217.0/24 maxlen: 24
178.159.218.0/24 maxlen: 24
178.159.219.0/24 maxlen: 24
178.159.220.0/24 maxlen: 24
178.159.221.0/24 maxlen: 24
178.159.222.0/24 maxlen: 24
178.159.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3b:89:fd:ac:b6:bd:ea:fb:5b:f9:60:53:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce064748cb321ed63bdffbff141af43ebef52d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:95:ba:74:b5:4e:82:f4:50:5e:08:6b:29:89:
3f:f0:56:ee:e2:22:57:7a:86:ce:ce:34:50:bb:54:
36:8f:18:86:62:46:32:f9:e0:d5:a9:f6:3f:cd:d5:
e4:3c:09:29:1d:6e:b5:03:37:6d:18:87:27:90:c3:
8f:60:e6:53:29:83:92:c7:89:5c:9d:50:83:4b:cb:
b9:e1:98:aa:24:f9:a7:1b:cb:cc:ae:c3:53:3c:33:
15:e2:12:3e:49:c1:2c:a1:31:e3:6b:b9:8b:b4:a3:
6c:40:97:18:18:d5:34:f2:99:3f:7f:30:7a:db:2c:
42:e9:4f:3d:9d:21:a4:4e:49:01:8c:be:e9:19:05:
56:80:4b:59:d1:89:1a:7c:1b:58:49:4d:61:5e:f2:
31:a6:b4:b9:23:03:fa:51:ab:4d:e6:a3:28:40:83:
6b:06:70:59:e9:27:97:92:6f:66:6c:5c:1c:1c:00:
a6:e0:7c:04:31:ec:0b:d6:ed:68:c7:cc:ad:f3:dd:
20:bb:98:65:28:93:91:27:b8:c1:6a:54:08:02:cb:
3d:dc:4f:d0:dd:bc:90:4b:4e:a4:c8:be:4e:11:f9:
22:e6:68:d8:be:f1:98:74:69:0d:9f:68:1c:8a:82:
4b:99:13:56:98:c1:66:c5:a5:b6:78:61:a3:f6:c1:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:47:48:CB:32:1E:D6:3B:DF:FB:FF:14:1A:F4:3E:BE:F5:2D:9B
X509v3 Authority Key Identifier:
keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/zgZHSMsyHtY73_v_FBr0Pr71LZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.4.0/22
178.159.208.0/20
Signature Algorithm: sha256WithRSAEncryption
91:9a:b0:06:0a:f7:60:46:83:5f:f3:b1:f7:d0:bc:69:44:b8:
dc:ed:46:f5:56:08:8a:11:32:73:dd:e4:94:5e:dd:93:e0:73:
46:85:9d:f8:30:e3:bf:76:89:11:c9:d2:df:be:94:d3:ee:01:
91:ea:ae:ea:5b:a8:d9:51:cb:1f:02:2e:61:5f:ef:39:52:15:
2a:b6:10:36:70:d5:a0:ab:11:d1:5e:d9:ef:d9:6d:55:19:80:
35:28:49:a6:e6:1a:5d:39:28:03:93:f7:3b:d2:4a:5b:19:5b:
6e:99:47:1e:e7:39:55:61:8d:f3:11:47:2d:09:57:33:25:66:
66:a2:3a:a0:d4:3c:bd:70:43:36:ff:bd:36:50:5c:8b:60:eb:
61:d1:d9:ab:fa:5a:4f:5a:2d:b6:55:25:18:bc:58:df:19:8b:
41:2b:af:8c:4a:d0:6e:3e:03:bb:f0:cf:be:a4:e6:6c:2d:09:
ed:1c:6f:27:e4:a0:52:55:50:af:62:e1:4b:9d:91:d3:6d:8a:
c6:f1:9d:78:b9:4a:e8:c5:57:3f:b1:04:86:f5:da:85:86:87:
f9:a4:22:e0:5a:69:d7:a2:a6:d7:2d:77:f0:d6:7d:b7:1c:f4:
e0:b9:ff:b9:1f:fd:3a:f3:8d:77:92:0d:6a:ae:52:d1:58:78:
b4:c7:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:52:34 2026 by rpki-client