Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/Z-wGqJ-biofcF-Vp1NpHNNfxruM.roa
File: Z-wGqJ-biofcF-Vp1NpHNNfxruM.roa (raw, json)
Hash identifier: ytiGi9sMZ7eWVpKKgVpL56C1f1ratIXBHa487lrjtIA=
Subject key identifier: 67:EC:06:A8:9F:9B:8A:87:DC:17:E5:69:D4:DA:47:34:D7:F1:AE:E3
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019E9D6A37940E5FC27E9C29D47B437DD33D
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/Z-wGqJ-biofcF-Vp1NpHNNfxruM.roa
Signing time: Sat 06 Jun 2026 14:50:44 +0000
ROA not before: Sat 06 Jun 2026 14:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216154
IP address blocks: 45.10.172.0/23 maxlen: 23
45.10.172.0/24 maxlen: 24
45.10.173.0/24 maxlen: 24
45.88.172.0/22 maxlen: 22
45.114.60.0/22 maxlen: 22
80.74.24.0/21 maxlen: 21
84.252.102.0/23 maxlen: 23
85.137.88.0/21 maxlen: 21
88.218.120.0/22 maxlen: 22
89.46.131.0/24 maxlen: 24
89.150.34.0/23 maxlen: 23
89.150.41.0/24 maxlen: 24
89.150.59.0/24 maxlen: 24
91.132.56.0/22 maxlen: 22
91.132.224.0/24 maxlen: 24
103.54.16.0/22 maxlen: 22
103.90.72.0/23 maxlen: 23
103.90.74.0/23 maxlen: 23
103.90.74.0/24 maxlen: 24
103.90.75.0/24 maxlen: 24
103.137.248.0/22 maxlen: 22
132.243.112.0/20 maxlen: 20
185.200.176.0/22 maxlen: 22
188.241.196.0/23 maxlen: 23
2a0c:db40::/32 maxlen: 32
2a0c:db40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:6a:37:94:0e:5f:c2:7e:9c:29:d4:7b:43:7d:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jun 6 14:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67ec06a89f9b8a87dc17e569d4da4734d7f1aee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:6b:78:33:d8:f4:11:2c:4c:4a:32:4f:bd:
03:f7:bc:eb:93:a7:8e:3e:0f:de:f1:60:f9:c3:ba:
61:56:75:0f:78:ec:cb:54:cb:b7:61:0e:40:d6:f4:
45:35:28:45:5d:65:fe:12:ed:5a:8f:b3:91:89:18:
98:7c:e8:3d:17:67:3d:eb:68:76:af:a3:e6:f6:e2:
f8:47:44:a1:0d:4d:9b:f0:60:ec:d0:17:83:1f:ff:
a3:65:68:96:47:12:f3:d4:a1:00:90:0a:60:1a:c4:
7a:46:86:86:c9:9f:0a:15:99:ab:2b:b0:b3:18:b8:
fe:5e:71:b7:8a:4d:49:c0:c7:2b:b9:6f:af:13:83:
f8:f3:38:08:8d:b2:28:98:8f:73:c7:06:ea:57:d1:
34:54:f0:86:ec:19:65:1f:ee:4f:d9:b9:f7:12:f2:
5b:96:18:a8:84:6f:c4:58:1a:e6:a6:fc:84:ff:01:
09:6b:c0:b6:cb:9d:0d:c9:55:28:10:d3:37:b1:05:
54:3b:cc:87:33:61:43:fd:d5:71:22:a6:0f:89:13:
ed:44:7a:ed:43:8b:2a:80:78:e9:2c:b2:75:16:fb:
1b:02:d5:fe:79:df:d2:14:92:f0:79:50:5e:19:c9:
7d:31:8f:72:84:ec:71:61:97:de:b1:ce:7f:52:e7:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:06:A8:9F:9B:8A:87:DC:17:E5:69:D4:DA:47:34:D7:F1:AE:E3
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/Z-wGqJ-biofcF-Vp1NpHNNfxruM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/23
45.88.172.0/22
45.114.60.0/22
80.74.24.0/21
84.252.102.0/23
85.137.88.0/21
88.218.120.0/22
89.46.131.0/24
89.150.34.0/23
89.150.41.0/24
89.150.59.0/24
91.132.56.0/22
91.132.224.0/24
103.54.16.0/22
103.90.72.0/22
103.137.248.0/22
132.243.112.0/20
185.200.176.0/22
188.241.196.0/23
IPv6:
2a0c:db40::/32
Signature Algorithm: sha256WithRSAEncryption
0f:8a:62:f2:44:9f:1b:81:64:be:6d:46:09:f4:e5:21:d7:78:
2b:c7:53:22:dd:e7:f5:5b:6a:14:ef:f9:7e:b2:73:ad:2f:a0:
be:c5:9a:0c:02:b7:a2:b3:bb:36:28:a1:98:a9:02:51:dc:02:
1a:ed:25:6e:a8:a5:ae:db:2b:16:d8:ef:eb:40:14:5a:d8:b3:
aa:14:9e:b8:4f:a1:50:3d:57:fa:d7:7d:9c:67:17:08:eb:d9:
c1:33:91:54:28:ac:9f:65:5b:8b:9a:37:2d:05:06:d4:e2:f4:
0d:27:df:37:f1:41:41:6b:39:2a:75:08:65:67:6d:d1:38:5d:
a5:00:29:79:ec:56:09:a2:8a:95:39:74:64:d8:da:6d:8c:4e:
54:91:e1:ee:5a:e9:02:89:ed:fa:f3:f5:8d:91:94:f0:56:c3:
69:2c:b9:8e:cd:f6:8b:ef:12:e9:bb:ac:d6:9b:f3:14:69:e3:
c1:30:2c:7c:c8:d4:66:bc:57:3b:a5:95:f5:f5:26:3e:c0:49:
ef:9e:e3:db:5c:82:b8:3a:db:9f:3e:08:7a:55:5b:78:41:46:
fb:6d:51:11:fd:84:97:7c:b6:e1:0d:ea:b1:fb:5b:d3:22:a3:
67:dd:9b:25:d3:f7:56:f5:8b:16:28:62:ea:d5:c5:73:e9:a8:
65:35:f3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:45 2026 by rpki-client