Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa
File: ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa (raw, json)
Hash identifier: F0+H6qDixU/03vN/UlEJN6xAxFU7ewgK1yqAztFgQS4=
Subject key identifier: 64:A0:0F:06:50:D8:AC:47:76:CA:39:AC:7C:C4:8C:71:E0:98:F5:30
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 019D7CF1950C459FB24354A94C9421CFB14B
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa
Signing time: Sat 11 Apr 2026 14:28:20 +0000
ROA not before: Sat 11 Apr 2026 14:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60354
IP address blocks: 185.251.112.0/24 maxlen: 24
185.251.113.0/24 maxlen: 32
185.251.114.0/24 maxlen: 24
185.251.115.0/24 maxlen: 24
2a0c:1940::/44 maxlen: 44
2a0c:1940:10::/44 maxlen: 128
2a0c:1947::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7c:f1:95:0c:45:9f:b2:43:54:a9:4c:94:21:cf:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Apr 11 14:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64a00f0650d8ac4776ca39ac7cc48c71e098f530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:99:7e:9b:02:d9:68:71:0c:90:48:5e:79:
43:d6:17:ed:f9:d2:4c:60:f5:5f:05:82:ce:62:3e:
e2:ba:44:a0:65:7d:96:17:97:60:ad:d9:aa:3f:b6:
9c:34:f6:9b:cc:2b:bb:a4:32:9c:58:7b:c9:37:f5:
04:3f:69:5a:a3:a9:7e:9c:ae:9a:54:85:48:fc:a5:
fa:86:89:fa:54:f2:f3:ba:be:19:7a:3e:2b:94:4a:
2b:48:1e:d6:93:c6:8a:6d:09:30:b5:d3:8d:db:64:
ce:af:6f:c8:14:d2:08:3b:38:9d:ff:cc:b1:8f:af:
46:c4:35:cb:39:9b:c5:d1:88:1c:85:5c:a6:24:51:
c5:df:b7:1f:9c:f9:69:6d:58:97:20:b6:07:27:47:
32:32:46:46:bc:31:fa:9e:28:e5:51:e3:2b:c2:fe:
6e:55:96:a9:77:a5:d6:45:5f:14:02:76:94:96:d8:
d8:f2:e8:2c:0f:69:46:c9:7f:ca:f6:ee:a1:6a:1f:
62:63:01:4e:16:59:5b:19:73:22:5f:2a:c3:0b:45:
e6:f6:c3:ad:e6:2a:1f:18:46:b2:bb:3b:47:06:98:
06:09:40:54:40:b1:bf:39:e1:20:5d:20:1d:b1:7e:
17:ff:56:97:09:a9:42:ee:f0:2e:9e:6d:4a:b9:91:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:0F:06:50:D8:AC:47:76:CA:39:AC:7C:C4:8C:71:E0:98:F5:30
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.112.0/22
IPv6:
2a0c:1940::/43
2a0c:1947::/32
Signature Algorithm: sha256WithRSAEncryption
af:aa:22:8c:a7:01:d5:26:bb:ca:86:9e:f4:02:ec:a2:b4:97:
a1:c4:bb:0f:be:fa:7b:db:f1:8c:70:44:2b:81:f4:8b:e4:ea:
a1:98:d7:c8:a7:5d:e8:d0:33:84:40:df:c2:43:15:55:28:d3:
d5:ed:6e:b6:c2:8a:1d:da:0e:d3:6d:25:d2:c9:5e:d8:e2:53:
69:65:f4:a1:f3:25:06:52:43:e6:cb:9c:22:fe:b0:1d:eb:8b:
c6:f4:49:1f:26:41:5f:a6:b5:8a:64:4b:47:15:ce:8d:a8:f1:
0f:91:00:27:36:6a:c7:ae:1a:13:fa:bb:dc:56:39:28:39:78:
04:47:a9:4e:a8:49:17:7d:f5:28:0b:11:47:86:b7:06:43:0c:
e0:c2:7f:17:a0:81:ae:ad:e0:38:64:89:1d:3f:03:a0:7b:98:
6d:b4:0d:79:5c:2e:c1:de:84:28:d8:ed:60:2c:8e:2e:50:9a:
fb:5d:c4:2b:7b:a6:7e:b7:25:d8:d3:c1:42:9d:99:c0:7f:a2:
9b:4d:c2:fd:f9:36:bb:f6:fe:c1:3d:d1:22:dd:62:1c:15:39:
ab:84:d3:16:86:0d:7b:23:c4:74:a2:92:0e:8b:36:6c:ef:b0:
51:63:01:04:f0:44:6d:42:c7:c1:81:a2:f3:a4:d5:d8:bd:a5:
b3:ae:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:38 2026 by rpki-client