Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/zo181zmI2YXllkZVHp7aBQi7csw.roa
File: zo181zmI2YXllkZVHp7aBQi7csw.roa (raw, json)
Hash identifier: mZN8IszRJCk6phNjvnHBtgYiiAUQq/ooPoQtir/r9fE=
Subject key identifier: CE:8D:7C:D7:39:88:D9:85:E5:96:46:55:1E:9E:DA:05:08:BB:72:CC
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019D4E49B38200556D4241E7E75FEE0FC219
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/zo181zmI2YXllkZVHp7aBQi7csw.roa
Signing time: Thu 02 Apr 2026 13:02:25 +0000
ROA not before: Thu 02 Apr 2026 13:02:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51878
IP address blocks: 45.151.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:49:b3:82:00:55:6d:42:41:e7:e7:5f:ee:0f:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Apr 2 13:02:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce8d7cd73988d985e59646551e9eda0508bb72cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:d6:2f:1f:75:0e:b7:f8:72:71:fe:cb:7f:
da:c9:96:52:66:44:ca:bd:b0:2d:7f:e1:62:43:81:
d0:41:88:ea:aa:1b:45:58:1e:84:3a:9e:86:35:f7:
4a:62:b5:83:59:fa:f1:5c:14:80:c6:8b:fa:e1:0e:
48:5e:70:69:6b:68:04:65:83:c6:b0:81:31:9b:05:
22:fe:61:60:7d:a1:07:bb:ef:90:4f:7c:41:c5:0c:
b8:25:33:de:e6:37:04:62:79:1e:e0:dc:8e:4e:18:
bf:99:3d:30:2d:01:8a:e8:46:ad:35:d4:c8:66:8e:
af:9e:da:a9:2f:f0:af:17:c8:9b:6c:9a:3e:03:66:
e7:c4:bf:07:59:36:26:e7:90:0a:9c:bf:f9:d4:37:
0c:51:ec:9e:2d:91:1d:bb:15:5f:25:c0:86:bd:e4:
6e:14:bb:1f:ec:fc:bc:b9:10:47:4f:40:4c:1f:95:
ec:07:41:21:60:df:30:4e:e3:b6:f1:5d:aa:c5:6f:
7f:5c:1f:1b:54:5c:5a:ea:93:1c:08:05:39:79:4d:
c6:01:ea:a9:8a:4c:09:d7:95:84:2e:a0:55:1f:37:
7a:bb:2c:29:76:4e:01:3f:9b:5f:87:2d:13:96:0d:
bb:be:24:cc:b5:85:15:2d:85:95:4e:3c:17:3c:42:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:7C:D7:39:88:D9:85:E5:96:46:55:1E:9E:DA:05:08:BB:72:CC
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/zo181zmI2YXllkZVHp7aBQi7csw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.52.0/23
Signature Algorithm: sha256WithRSAEncryption
26:1f:93:98:3c:5b:dd:0c:d2:9d:74:dc:40:20:0e:d3:61:29:
3e:9d:64:2f:53:31:61:f6:5a:0a:eb:db:32:d2:fb:61:bd:2b:
e0:53:64:85:a5:d8:56:96:d3:7a:7f:3d:88:72:de:fe:18:fd:
cb:74:fa:b1:da:84:a5:59:9c:e5:92:07:57:bf:0d:90:a9:d7:
22:99:8b:6d:b6:d0:ee:f1:6b:d3:3a:b0:48:09:42:cf:f8:00:
87:83:4f:bf:71:86:38:6d:ec:7a:1f:ef:63:f9:a7:26:25:a4:
d6:a1:10:ed:29:03:88:7b:7e:24:ee:1f:1f:15:a4:7a:f2:91:
d3:b9:03:2b:23:3a:7f:a6:f8:d1:d4:a3:f5:41:38:8e:a9:83:
cc:f2:fb:b0:12:19:dd:58:da:aa:25:90:04:15:21:ee:2a:fd:
51:4d:84:47:47:3f:b0:34:02:6b:c8:d8:31:53:10:6d:1e:42:
42:26:be:a8:66:69:69:a5:5f:49:86:14:b5:34:82:31:f8:fb:
a0:66:3c:20:c1:4f:37:64:4a:1c:e9:c9:9d:2f:7d:14:ca:82:
a0:ef:8a:22:29:4c:2d:e9:50:7e:a3:7d:92:36:29:4f:62:02:
12:5f:7d:11:cf:76:91:9a:5e:c5:8b:1c:9c:6b:6e:e0:53:90:
14:0c:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:48 2026 by rpki-client