Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZNzNbSiYSD-Sg_G2MWVS1mKSQjE.roa
File: ZNzNbSiYSD-Sg_G2MWVS1mKSQjE.roa (raw, json)
Hash identifier: kFJuLPP0BLWeTqGFSrqGqKTJEo7+07Te3sotInHhDOU=
Subject key identifier: 64:DC:CD:6D:28:98:48:3F:92:83:F1:B6:31:65:52:D6:62:92:42:31
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019EA7B6EF1F3FF6592AD9B13CD14D38DE96
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZNzNbSiYSD-Sg_G2MWVS1mKSQjE.roa
Signing time: Mon 08 Jun 2026 14:50:44 +0000
ROA not before: Mon 08 Jun 2026 14:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
143.246.140.0/22 maxlen: 24
193.37.139.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1034::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1059::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1074::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:2000::/40 maxlen: 48
2a0c:9a40:2100::/40 maxlen: 48
2a0c:9a40:2200::/40 maxlen: 48
2a0c:9a40:2300::/40 maxlen: 48
2a0c:9a40:2328::/48 maxlen: 48
2a0c:9a40:2400::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 48
2a0c:9a40:2800::/40 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2b00::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2e00::/40 maxlen: 48
2a0c:9a40:3000::/36 maxlen: 48
2a0c:9a40:8a90::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a46:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:b6:ef:1f:3f:f6:59:2a:d9:b1:3c:d1:4d:38:de:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 8 14:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64dccd6d2898483f9283f1b6316552d662924231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c6:6b:a0:13:87:1e:ef:e5:f8:39:67:30:b6:
13:aa:13:ab:d1:c6:f2:0a:50:03:71:28:a3:9f:8c:
2a:48:bc:aa:bf:69:76:ca:cc:e6:3d:b4:cc:37:0b:
42:0e:41:5a:a4:90:9c:5b:28:f5:4b:ac:24:a0:61:
07:78:9e:25:54:fb:ee:f8:b8:4a:e5:7c:e2:4d:05:
50:af:c7:ae:16:86:17:bc:95:6f:37:78:ab:35:4e:
9f:fa:3c:bc:66:28:bc:f0:1b:e2:56:ef:15:f5:23:
5f:03:8b:95:5d:91:1c:89:9d:9a:d1:43:bd:47:c7:
fa:64:82:5c:7a:38:2d:4f:5b:87:1e:1d:13:ff:b3:
a4:5f:dc:d5:f5:74:2e:1b:34:7b:d3:5a:b5:7c:88:
ef:13:64:52:9b:7c:7c:26:30:45:60:93:86:c4:d3:
5b:80:21:75:a3:0a:b9:4f:2d:db:3b:97:e8:be:fb:
1e:fe:32:4b:c0:fc:1e:d1:be:30:49:bf:0a:88:1c:
b4:9d:12:31:72:c2:7f:b7:32:a6:4f:30:b4:98:fa:
01:e0:d2:af:3d:52:d4:73:3b:68:11:0d:56:13:2d:
02:74:cb:69:ce:fc:7d:64:10:9d:86:fa:32:a6:da:
18:64:d8:ce:7b:cf:87:3c:8a:f2:0f:8c:3d:a5:f2:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:CD:6D:28:98:48:3F:92:83:F1:B6:31:65:52:D6:62:92:42:31
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZNzNbSiYSD-Sg_G2MWVS1mKSQjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
143.246.140.0/22
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1059:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2000::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::-2a0c:9a40:2eff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:3000::/36
2a0c:9a40:8a90::/48
2a0c:9a44::/48
2a0c:9a46:500::/40
Signature Algorithm: sha256WithRSAEncryption
2b:d0:85:22:59:be:03:a3:e5:c4:34:90:0a:1d:5e:61:d4:07:
45:c3:8e:cd:e1:0f:09:71:c3:60:ff:31:33:11:2e:4f:b8:02:
67:9b:c1:eb:83:77:cc:26:ca:74:88:32:b6:b5:17:df:ce:8a:
4c:ca:77:1b:28:2f:bc:75:c9:6a:d4:47:de:d3:e2:79:fc:7b:
05:26:50:0e:4b:a2:8e:b6:99:a1:d7:12:da:6d:f8:2e:54:c8:
ea:b6:06:8c:54:af:c2:c0:6d:5b:1d:72:a4:a7:10:98:d2:d0:
d8:02:a1:61:28:95:2b:f0:17:71:94:bf:94:26:1b:b8:34:ee:
a1:28:c1:c4:26:ea:d3:61:9c:c7:37:b8:9e:5c:39:b0:84:d5:
88:24:76:e5:42:f1:2b:11:d9:b0:75:29:63:52:57:7f:b8:f0:
1d:06:b4:40:0e:9e:23:75:2a:80:6d:a8:86:e3:0e:a6:1b:84:
93:6a:ce:58:42:cc:73:a7:ad:35:06:b1:95:47:e0:a1:a5:37:
e6:34:ca:94:12:92:20:3d:85:44:51:11:a0:78:bb:92:45:e5:
f0:04:83:34:29:d8:1e:59:a2:76:7c:12:2c:02:94:8d:47:ca:
28:49:be:68:ff:d7:36:aa:bb:8f:61:06:ba:db:73:f0:c8:c4:
55:65:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:49 2026 by rpki-client