Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/zdTKCzMNYrD_vxLGScehqegrrJk.roa
File: zdTKCzMNYrD_vxLGScehqegrrJk.roa (raw, json)
Hash identifier: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=
Subject key identifier: CD:D4:CA:0B:33:0D:62:B0:FF:BF:12:C6:49:C7:A1:A9:E8:2B:AC:99
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019E92BF9720636BBC2A418201E8C452B97D
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/zdTKCzMNYrD_vxLGScehqegrrJk.roa
Signing time: Thu 04 Jun 2026 13:08:09 +0000
ROA not before: Thu 04 Jun 2026 13:08:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39700
IP address blocks: 193.30.170.0/24 maxlen: 24
193.30.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:bf:97:20:63:6b:bc:2a:41:82:01:e8:c4:52:b9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jun 4 13:08:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdd4ca0b330d62b0ffbf12c649c7a1a9e82bac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:cc:29:fa:51:06:de:71:a5:e1:25:6f:32:
98:2a:08:c1:39:eb:23:63:a4:52:03:69:5f:86:d2:
83:4b:31:c5:51:4b:46:0a:35:40:84:be:24:1a:a9:
4b:d6:c0:76:d4:1a:7a:d9:a4:20:4e:77:bc:7c:be:
23:58:18:7d:89:4c:18:b4:3e:05:d9:66:32:4f:db:
2b:97:20:62:15:4c:8d:5f:1b:b0:c3:92:d6:28:9e:
f9:84:df:b4:e1:c7:dc:d5:4a:65:80:32:06:79:a7:
2a:cc:f4:7e:4a:c4:ad:c8:ae:76:c2:12:71:59:21:
df:93:8c:7d:a2:5c:14:31:d9:42:61:97:8e:c9:ae:
bc:43:eb:22:d7:ff:f0:14:e4:d2:04:83:71:8d:37:
b1:30:00:20:a2:62:4b:16:e4:b8:79:67:86:99:76:
02:8f:18:68:66:49:4b:d8:22:07:7b:c8:04:17:f1:
3a:14:7a:a5:db:3d:f2:f3:2d:50:5d:ff:3a:68:2a:
3f:64:ed:2b:cd:07:e9:fb:ee:04:0e:27:77:27:76:
94:e5:fd:05:bf:8d:3a:5b:45:b3:76:21:16:b0:59:
75:89:7f:a8:60:d2:55:76:33:b8:5e:99:29:2a:50:
3a:67:cb:05:61:bd:8d:fb:61:1f:38:75:a7:d9:8a:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D4:CA:0B:33:0D:62:B0:FF:BF:12:C6:49:C7:A1:A9:E8:2B:AC:99
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/zdTKCzMNYrD_vxLGScehqegrrJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.170.0/24
193.30.191.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5d:05:22:d8:a8:91:bf:9e:b5:2e:aa:4b:3c:c3:73:a2:2a:
7a:b9:8a:b5:99:37:54:36:ea:5b:5c:e5:67:f3:76:01:34:9e:
53:c7:60:9b:70:e3:c5:57:4c:48:09:c7:fc:a5:a3:e6:74:eb:
b9:f5:b5:51:9e:a2:50:6b:fe:65:bd:26:a4:55:80:bd:fa:41:
0d:35:e4:07:77:9d:ad:15:3a:14:2c:7c:1b:96:b3:c7:6e:0e:
9d:4f:10:e5:12:59:6e:22:aa:c1:40:16:bf:5c:a0:9a:f3:09:
26:74:26:31:a6:41:36:55:8f:2f:ef:bc:12:ca:c3:c7:a8:eb:
1f:e7:9f:6e:35:38:d7:ac:d3:b8:e4:8b:47:1a:f7:43:b0:4d:
9e:22:d5:b6:aa:01:1c:f1:6b:10:89:a6:f8:0b:74:64:49:9c:
ec:81:34:03:42:e0:9d:c0:b8:be:31:9c:8a:b1:3c:33:d2:fb:
25:e0:c1:b9:6e:7c:76:d3:a1:ed:14:61:6d:70:f6:7d:4c:a2:
07:45:6c:27:e9:6e:2f:47:bd:c0:70:56:54:80:ec:82:c0:62:
c3:17:db:86:ae:2d:d9:3c:09:36:56:d4:8a:9d:2d:72:48:93:
e0:53:fd:76:92:1c:f3:21:15:37:c7:5d:cb:49:2c:a5:5d:df:
7b:e2:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:50 2026 by rpki-client