Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zqLpQUclUwGvkQIScjh-XNqNwcs.roa
File: zqLpQUclUwGvkQIScjh-XNqNwcs.roa (raw, json)
Hash identifier: bfzZevmSveJojefI5VI9r+JTzKf7Eukf1UE3FmwvvHk=
Subject key identifier: CE:A2:E9:41:47:25:53:01:AF:91:02:12:72:38:7E:5C:DA:8D:C1:CB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A0B0093271F86DB345C2517AB0DD6E3A18
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zqLpQUclUwGvkQIScjh-XNqNwcs.roa
Signing time: Thu 17 Sep 2026 15:43:07 +0000
ROA not before: Thu 17 Sep 2026 15:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 32
45.154.99.0/24 maxlen: 32
62.3.50.0/24 maxlen: 32
194.28.96.0/24 maxlen: 32
194.28.98.0/23 maxlen: 32
2a0c:b640::/32 maxlen: 128
2a0c:b641::/44 maxlen: 128
2a0c:b641:10::/44 maxlen: 128
2a0c:b641:50::/44 maxlen: 128
2a0c:b641:60::/44 maxlen: 128
2a0c:b641:530::/44 maxlen: 128
2a0c:b641:5e0::/44 maxlen: 48
2a0c:b641:6d0::/44 maxlen: 128
2a0c:b641:70f::/48 maxlen: 128
2a0c:b641:730::/44 maxlen: 128
2a0c:b641:910::/44 maxlen: 128
2a0f:8400::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:09:32:71:f8:6d:b3:45:c2:51:7a:b0:dd:6e:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 17 15:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cea2e94147255301af91021272387e5cda8dc1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:93:8c:2e:97:ec:1a:62:5d:e1:1e:d0:ca:
02:a7:ed:52:f8:be:a6:23:8e:ba:91:17:74:13:6b:
b0:14:28:46:bf:a8:a8:cc:b5:2c:37:c2:b3:a0:e3:
fa:35:52:0f:31:18:02:bb:28:93:a5:28:3a:78:ba:
0f:72:c5:d9:c2:c7:c5:03:b3:51:01:43:62:c8:4d:
9b:b1:12:8c:5a:e9:ea:80:ec:41:8c:ca:a9:01:e8:
66:6c:cd:b5:29:0d:1d:78:f5:49:2d:ae:e0:b1:04:
f0:f6:0d:22:67:30:12:6c:12:6b:9a:a8:5d:4b:0c:
c2:7e:e1:31:68:d3:62:9b:29:92:04:a9:c3:65:e3:
26:e8:5a:1b:9b:25:1a:c3:90:64:6f:fb:0f:3b:c6:
fe:b8:5e:69:55:88:b6:ec:72:9b:c0:af:de:23:8e:
76:36:b6:72:51:eb:f3:bb:6c:4d:1b:d9:f4:0f:b3:
42:6b:99:67:ac:1e:59:97:68:09:cb:77:38:64:c4:
6c:26:f3:34:16:07:4a:48:71:3d:5b:7b:0a:7e:ec:
0a:24:57:08:45:f0:20:11:8c:b1:8b:9e:82:05:be:
b0:4c:17:e8:ff:85:b3:c4:a4:c5:3d:e9:51:58:49:
12:4b:65:d9:46:22:69:7c:56:e5:33:01:92:c5:0f:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:E9:41:47:25:53:01:AF:91:02:12:72:38:7E:5C:DA:8D:C1:CB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zqLpQUclUwGvkQIScjh-XNqNwcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
45.154.99.0/24
62.3.50.0/24
194.28.96.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::/44
2a0c:b641:5e0::/44
2a0c:b641:6d0::/44
2a0c:b641:70f::/48
2a0c:b641:730::/44
2a0c:b641:910::/44
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
6b:e2:d9:2b:ec:a1:95:a9:fe:8e:4b:ca:f9:0c:55:e2:85:49:
84:2c:f8:2e:f6:2f:19:ee:cc:4b:ad:bd:b5:89:83:9e:00:93:
63:ec:3b:7c:a1:16:37:76:2b:f5:81:1b:e7:2e:04:a1:d7:77:
bd:c8:e9:fc:c3:0b:e3:e8:38:38:00:aa:35:39:ad:6c:e8:f8:
ee:0a:f5:49:33:64:1a:79:13:14:56:50:e2:a0:61:03:6c:d5:
52:89:86:b0:24:c9:a7:ea:97:0c:d0:7c:f3:e3:56:be:7c:f3:
8b:62:25:16:c4:ab:f9:9a:bb:5b:5e:97:1d:dd:b1:68:18:f3:
a1:59:ff:f5:af:43:7d:f8:cf:44:db:aa:5a:d8:bb:47:86:35:
d3:c4:8b:a6:3a:38:69:f2:6a:dd:ae:9a:cb:9c:20:96:09:64:
50:7c:f3:44:53:d1:97:6f:43:4c:7a:34:7b:62:64:ee:cd:c6:
48:4d:46:f3:c0:1e:8d:fe:bd:82:6a:03:8a:46:16:16:e6:09:
c9:96:c2:d9:09:7f:cb:c3:fe:0f:7b:f2:a8:d1:cd:f7:09:fe:
35:82:5a:fc:48:aa:94:63:ce:37:7d:e8:78:25:c8:ce:66:79:
20:9c:de:9a:40:ee:1a:1e:6a:9c:18:36:b9:11:7f:da:fe:b4:
85:6d:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:02:29 2026 by rpki-client