Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ZkZ_TMjq2LEv_EtdzOBgHb85uNo.roa
File: ZkZ_TMjq2LEv_EtdzOBgHb85uNo.roa (raw, json)
Hash identifier: LHji4BrYmuToJWm0pqABmXQ/ZjVEVbsEo6Cn3dsKlIg=
Subject key identifier: 66:46:7F:4C:C8:EA:D8:B1:2F:FC:4B:5D:CC:E0:60:1D:BF:39:B8:DA
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A17D8AB949F07951CAA13AD763F2DAC1AE
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ZkZ_TMjq2LEv_EtdzOBgHb85uNo.roa
Signing time: Tue 27 Oct 2026 13:26:45 +0000
ROA not before: Tue 27 Oct 2026 13:26:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42093
IP address blocks: 185.249.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:8a:b9:49:f0:79:51:ca:a1:3a:d7:63:f2:da:c1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 27 13:26:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66467f4cc8ead8b12ffc4b5dcce0601dbf39b8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:da:73:1e:a5:5a:69:18:13:27:dc:24:41:
64:5c:40:86:45:53:c1:23:9f:ab:25:c9:73:9f:b0:
d9:4e:55:70:b7:dd:c5:cb:96:56:42:b2:d1:6d:38:
9c:8e:ee:e6:16:50:de:68:0f:10:b7:4c:0e:ad:6c:
d9:90:a9:05:8f:3a:97:97:64:14:4b:65:24:2a:72:
21:03:ba:d0:3c:2d:35:94:af:0d:fe:55:90:f6:a3:
3f:1a:ba:4a:c5:3b:f6:40:a6:cb:c3:66:b0:20:13:
03:61:ba:75:ef:76:2a:00:08:0a:df:da:58:84:b2:
50:cf:15:80:65:bd:e1:23:76:f2:5d:03:ed:db:cf:
68:de:18:cc:3b:6d:4d:12:11:3d:05:68:99:e6:3c:
7f:4d:4c:d7:ca:06:77:0d:4b:fc:34:ae:4e:d5:81:
54:b3:7a:a0:ff:6f:5a:e7:09:aa:76:2e:92:07:8d:
2e:cf:53:7a:15:5d:35:c8:85:b3:05:16:83:5c:73:
13:39:6b:c7:db:dd:f8:76:30:f4:61:33:7e:1c:d8:
d8:6a:18:ac:0a:d9:c8:07:24:ad:ef:38:98:49:d3:
ac:a1:5c:e3:0c:55:d2:fe:fb:a7:5e:1f:1f:ac:cf:
66:15:58:8d:3e:61:77:61:c9:52:ca:fe:7c:2a:b2:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:7F:4C:C8:EA:D8:B1:2F:FC:4B:5D:CC:E0:60:1D:BF:39:B8:DA
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ZkZ_TMjq2LEv_EtdzOBgHb85uNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5f:02:80:12:61:b4:1a:6b:ff:f3:8f:34:e1:94:54:e3:1f:
d1:ba:d2:5d:50:0e:e7:38:b7:06:6a:10:ff:d0:c1:af:53:6f:
f3:2b:91:4a:11:05:c8:c0:ed:9a:be:bb:6c:cc:e0:34:f2:0e:
36:1c:b5:7a:ef:8d:aa:4b:40:0d:46:94:00:7c:53:ec:e7:cd:
5c:a9:47:13:e0:6e:11:97:9a:63:1b:2c:ee:81:a7:8b:72:ae:
07:5b:42:a1:8a:b3:1d:47:af:c1:6b:ae:db:59:eb:55:7a:92:
84:b3:af:75:81:a8:6e:37:18:64:65:92:9f:4d:de:50:bc:1e:
61:ef:fa:b1:6c:33:ae:33:91:44:e2:d6:50:96:da:f7:27:83:
6c:0d:5b:33:70:d1:a7:a7:07:94:cf:76:b4:a1:82:6e:79:ce:
76:73:34:ed:12:fc:38:8d:1d:44:a5:ff:f4:21:a4:9a:52:8a:
6e:28:ea:56:c1:fa:49:9b:33:ed:de:7f:ec:df:5a:c7:5a:17:
6b:03:a5:66:8e:f2:71:09:63:ce:7e:08:be:ca:dd:d9:c7:4c:
33:b6:5e:2e:f1:09:f3:14:8f:76:cc:a4:fb:60:33:1b:6b:15:
e7:d7:d6:45:f8:42:dd:a0:2b:ab:8a:28:8e:a9:ae:71:98:3f:
ba:b9:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:42 2026 by rpki-client