Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/CzW4u1rrcKCYl0G03vqU8cBXz94.roa
File: CzW4u1rrcKCYl0G03vqU8cBXz94.roa (raw, json)
Hash identifier: /yz/XIWJQxzaieHj+TVvT11gZyxGejhib5PYK9y3aXc=
Subject key identifier: 0B:35:B8:BB:5A:EB:70:A0:98:97:41:B4:DE:FA:94:F1:C0:57:CF:DE
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019C24014AD604CF1954B2326813119F3510
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/CzW4u1rrcKCYl0G03vqU8cBXz94.roa
Signing time: Tue 03 Feb 2026 14:56:30 +0000
ROA not before: Tue 03 Feb 2026 14:56:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41981
IP address blocks: 185.105.252.0/24 maxlen: 24
185.105.253.0/24 maxlen: 24
185.105.254.0/24 maxlen: 24
185.105.255.0/24 maxlen: 24
2a06:3a80::/40 maxlen: 40
2a06:3a80:200::/40 maxlen: 40
2a06:3a80:300::/40 maxlen: 40
2a06:3a80:400::/40 maxlen: 40
2a06:3a80:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:01:4a:d6:04:cf:19:54:b2:32:68:13:11:9f:35:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Feb 3 14:56:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b35b8bb5aeb70a0989741b4defa94f1c057cfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:b9:d1:48:84:b9:79:4b:36:c0:83:02:c0:
b0:48:bf:4a:f5:46:13:1f:01:3b:4c:1b:72:ea:98:
e8:76:8a:c6:04:f4:d6:a3:90:c7:64:7d:f1:1c:8b:
02:48:15:db:e4:ad:7a:44:9d:91:21:21:c2:6b:a3:
f0:10:0e:70:f0:3b:3e:98:95:7e:0a:41:8e:82:6f:
40:7c:d2:c1:0d:02:bd:81:76:3f:d9:7d:86:07:02:
bb:e9:fe:24:3d:1f:a7:38:70:24:b3:e3:23:e1:c5:
59:63:eb:c7:44:11:f7:13:8e:f6:a8:6d:64:dc:e6:
ef:a6:e1:3b:ef:45:64:98:82:e1:c6:a8:7e:fd:0b:
6d:24:08:d0:79:84:eb:be:22:2c:ad:9b:b9:05:08:
06:58:00:c2:d1:c9:45:ab:89:3e:73:61:ab:38:d8:
21:f1:d8:37:14:3b:2f:20:72:eb:43:81:77:93:d7:
c1:2b:7b:0d:a4:b9:7f:48:77:f2:10:80:e6:54:e0:
f2:da:96:4e:6f:21:23:1d:9d:88:53:9e:52:eb:52:
c0:0c:8d:30:33:0c:f9:83:f0:c5:d3:0a:6e:e5:59:
23:14:dd:75:cc:2c:d9:d3:bc:92:43:3a:58:7a:92:
e3:01:48:82:25:db:f7:18:94:ea:d5:73:c9:66:4f:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:B8:BB:5A:EB:70:A0:98:97:41:B4:DE:FA:94:F1:C0:57:CF:DE
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/CzW4u1rrcKCYl0G03vqU8cBXz94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.252.0/22
IPv6:
2a06:3a80::/40
2a06:3a80:200::-2a06:3a80:4ff:ffff:ffff:ffff:ffff:ffff
2a06:3a80:600::/40
Signature Algorithm: sha256WithRSAEncryption
6e:4f:bd:db:80:82:5a:36:18:a6:0d:1c:a9:28:c8:3f:78:68:
68:cd:4d:2c:66:aa:b7:27:89:11:72:bf:56:5e:9c:1c:7b:09:
ad:bd:03:dd:35:3a:53:ec:cb:7e:1e:ce:00:44:7c:12:75:33:
47:66:1d:8e:f3:21:b0:b4:b7:85:ff:86:89:0b:49:24:6d:e4:
3f:b6:b0:d7:73:b7:a4:96:08:62:8e:80:c3:79:e7:f2:6f:fb:
2b:4a:02:4f:44:da:a7:c1:d2:08:26:6c:13:34:6d:e0:40:aa:
b5:ac:36:6f:65:9b:c9:90:c5:f4:a3:6d:a8:68:a8:b2:aa:c9:
87:d9:be:f9:09:2c:b0:ab:e9:4c:12:bd:45:74:01:44:76:e6:
b0:27:82:ad:c4:f8:16:66:9c:7d:1b:ae:bb:58:bd:c7:85:2b:
65:87:1b:86:78:45:6b:cd:18:83:cf:e7:95:92:81:3e:b8:d9:
d5:8a:37:12:5d:86:80:fc:ca:e4:11:e6:d0:dc:ec:fb:2b:f4:
2b:39:2d:38:b0:10:4b:ea:a1:99:7c:62:ee:72:8c:cd:8b:c0:
30:a2:4c:cc:6d:ed:17:b0:ae:18:f9:0a:84:cd:a4:3b:e2:0b:
fb:9b:8a:cf:72:e9:b4:f6:f5:95:d8:0d:79:9f:1b:9a:6b:2c:
05:f0:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:27:25 2026 by rpki-client