Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/zw5ASt6FbS9gaQdMoTSUrxoQDzs.roa
File: zw5ASt6FbS9gaQdMoTSUrxoQDzs.roa (raw, json)
Hash identifier: 05L2f6C89A3oLrnF075R9QF91YUYXPd9ek2Su2pjObk=
Subject key identifier: CF:0E:40:4A:DE:85:6D:2F:60:69:07:4C:A1:34:94:AF:1A:10:0F:3B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0B45FB979343B8E10EC769EF5775BE78A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/zw5ASt6FbS9gaQdMoTSUrxoQDzs.roa
Signing time: Fri 18 Sep 2026 11:56:07 +0000
ROA not before: Fri 18 Sep 2026 11:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:5f:b9:79:34:3b:8e:10:ec:76:9e:f5:77:5b:e7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 18 11:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf0e404ade856d2f6069074ca13494af1a100f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:74:ed:98:30:36:c7:d6:e1:4b:8a:2d:da:
be:c6:24:0a:ad:c3:55:e2:30:58:f1:44:43:0e:e2:
8c:d1:59:ee:b0:db:57:21:fc:4a:d5:51:8b:95:3e:
a5:6e:72:eb:23:a0:41:4f:11:81:e7:08:30:ff:45:
6d:97:eb:8a:83:6a:94:6a:df:8a:ce:14:d0:b3:f6:
2a:6a:b4:c5:0a:ee:ff:35:17:59:10:6c:65:5c:ae:
d2:83:c2:77:c7:c4:a7:dc:ef:0a:c5:68:cc:a0:55:
93:f3:e0:65:4f:5c:4f:ac:f3:b6:ee:6c:f8:64:3c:
7a:40:9e:14:ea:82:4c:99:55:c1:af:0e:6e:a2:01:
b2:23:ba:84:ee:8d:8f:1f:20:24:59:ed:b5:e6:64:
6a:92:17:ee:c5:97:a1:e7:82:c6:20:76:33:72:fb:
01:6a:30:ae:34:77:9f:2f:df:80:24:7e:63:f4:ad:
3a:75:59:b8:8a:7d:22:61:51:54:9a:0f:64:c6:b4:
d6:23:12:db:ef:bf:f5:d7:0d:51:34:29:50:a1:65:
3e:9a:6a:d6:66:8a:c3:e8:55:ac:9d:05:47:0c:fd:
cb:e9:e9:03:0e:40:86:cd:cf:0c:e7:df:32:00:ff:
79:f0:92:e4:ce:ff:54:16:8b:cb:73:e2:47:a3:c1:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:40:4A:DE:85:6D:2F:60:69:07:4C:A1:34:94:AF:1A:10:0F:3B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/zw5ASt6FbS9gaQdMoTSUrxoQDzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
109.236.51.0/24
185.254.28.0/24
185.254.31.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3c:fe:e6:cd:9b:21:4e:e4:01:c5:a2:c5:3f:64:25:7f:54:
0e:2b:3c:cd:32:64:f1:fe:a3:f6:d9:c3:cc:9f:77:1d:81:2e:
32:cd:2f:7e:90:aa:49:73:db:6c:3a:04:ba:fd:f2:36:a8:a4:
fc:6d:f8:8b:2e:7d:e1:84:9a:78:af:83:94:bf:82:33:2f:42:
01:c3:1b:12:89:3a:90:8e:3c:41:99:4c:47:06:1b:7b:42:20:
0f:13:a8:38:6d:af:a8:6a:eb:7d:e2:f3:b9:4b:50:76:16:7a:
11:35:cc:47:e1:b5:2e:f2:35:7f:9b:aa:f2:e7:19:e1:bb:e1:
cf:5c:eb:2e:f2:9f:08:b2:1e:e0:cc:bf:06:22:16:8d:80:d6:
94:e5:e8:0d:86:44:a0:b2:60:71:90:8b:48:f8:12:43:ca:fe:
1d:ae:57:50:db:a8:3f:28:c7:c2:e3:a7:c2:62:13:91:5d:f5:
1e:77:4d:e1:7b:f8:2f:a9:1b:7e:60:34:75:7a:38:63:5e:d1:
0d:ac:c4:27:73:df:b5:f5:06:21:ac:4e:e0:b9:bd:72:d3:3e:
12:8d:c4:fb:fb:50:17:3b:90:4b:d4:45:a5:ed:1b:3e:ec:90:
e0:d2:b4:2e:dd:da:ef:de:19:33:38:72:c6:07:7c:f4:bb:cf:
d3:24:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:27:10 2026 by rpki-client