Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2ZZEQydORw5BNZRb20EUSmcKh7c.roa
File: 2ZZEQydORw5BNZRb20EUSmcKh7c.roa (raw, json)
Hash identifier: UgLgA9H3BNj5vREJB5N3OFlSlWHrQSExZR2QACHLePY=
Subject key identifier: D9:96:44:43:27:4E:47:0E:41:35:94:5B:DB:41:14:4A:67:0A:87:B7
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019C34D2C0D18F2DF1F993C5E1B5847B1368
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2ZZEQydORw5BNZRb20EUSmcKh7c.roa
Signing time: Fri 06 Feb 2026 21:19:12 +0000
ROA not before: Fri 06 Feb 2026 21:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30938
IP address blocks: 5.39.248.0/24 maxlen: 24
5.144.176.0/21 maxlen: 24
5.178.97.0/24 maxlen: 24
31.192.240.0/21 maxlen: 24
45.12.216.0/22 maxlen: 24
45.12.218.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
103.136.68.0/22 maxlen: 24
185.5.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:34:d2:c0:d1:8f:2d:f1:f9:93:c5:e1:b5:84:7b:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Feb 6 21:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9964443274e470e4135945bdb41144a670a87b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:ff:f4:23:8b:35:e9:1d:01:1e:bd:16:88:
6e:ab:77:0c:db:41:92:c2:68:69:58:2b:6a:d3:8b:
58:8f:67:a7:26:0a:8b:0c:fb:7a:06:93:4f:77:61:
c4:d0:4e:b4:97:c4:48:87:4a:80:f7:66:2e:fb:3a:
55:a1:cd:ab:f5:5b:cd:a9:91:ce:14:9d:80:80:9a:
85:35:61:50:b0:4f:67:13:f1:6b:38:ae:26:73:bf:
2c:da:7a:ce:22:2a:98:4d:0e:a4:19:f0:ee:ba:42:
7a:49:8b:0f:3f:91:f1:d2:85:86:e1:ba:33:8c:70:
cc:f3:86:a5:d0:38:c7:8e:d3:1c:d5:62:1e:ce:37:
b7:b2:0a:09:d4:3b:22:14:88:1c:ff:d2:e9:b5:db:
60:83:7d:1e:f3:c6:34:90:42:f8:ad:b5:e7:bb:eb:
48:51:f5:9d:73:9b:46:2f:10:1d:1b:e5:ab:6c:1c:
16:07:47:fd:50:28:16:53:9b:cd:56:ad:38:5e:b7:
44:9d:0c:4c:a2:86:ed:b3:62:b4:6e:0f:f2:2c:38:
c2:cd:50:74:26:79:76:63:b8:71:2b:a1:11:2e:8b:
30:42:19:03:16:16:1e:b9:d4:b0:65:62:c7:94:82:
d7:d2:ec:d0:c1:52:f8:82:e1:31:32:2a:6f:73:f0:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:44:43:27:4E:47:0E:41:35:94:5B:DB:41:14:4A:67:0A:87:B7
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2ZZEQydORw5BNZRb20EUSmcKh7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.144.176.0/21
5.178.97.0/24
31.192.240.0/21
45.12.216.0/22
103.136.68.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
33:0c:cb:91:6b:d1:09:65:89:65:c1:2e:02:5f:7e:9a:96:e9:
5f:7c:ac:09:d5:ef:1c:1a:90:e3:14:ee:49:f9:1c:78:66:ba:
86:df:43:77:61:ee:58:57:b8:64:88:13:4d:5e:0c:b3:64:22:
01:1c:f4:56:02:8e:dc:18:5b:41:b7:a0:fe:6f:3e:2d:56:3d:
86:0b:97:22:33:fc:fb:8a:56:19:6b:95:f1:1f:60:da:88:e4:
ef:8d:a4:e3:e5:80:07:87:d3:a8:83:31:d8:b9:0d:0b:ea:2a:
80:59:99:2e:5f:a6:91:67:0e:a6:65:8e:7c:0a:c2:0a:3b:07:
16:c7:d4:c5:02:5c:b5:d8:90:d3:9c:10:a3:95:f7:7f:e3:e7:
16:a2:53:6b:f1:63:72:7f:95:14:57:6d:ff:75:cf:09:55:c7:
06:47:7a:c5:90:b6:3b:c8:36:c0:a5:c4:a9:a1:4c:76:ba:8f:
a2:48:5e:f4:85:dd:45:65:58:92:1f:fc:8d:e5:75:65:ad:ed:
51:5a:64:f1:0a:09:65:aa:1a:e6:0c:8b:b4:e8:f2:ac:19:09:
1a:9e:1c:8b:f1:7c:1e:6b:9f:43:12:b9:63:e3:a2:c4:8d:35:
56:c1:b2:f0:b3:79:a1:87:db:34:76:42:4e:fa:64:de:ef:ab:
40:3e:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:47 2026 by rpki-client