Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/zVaH9e-aQXNh4pUEmxm-wVo6Lcc.roa
File: zVaH9e-aQXNh4pUEmxm-wVo6Lcc.roa (raw, json)
Hash identifier: dSataa9WG0ojypmOAJynjrX6BA5HtgMN2jjH77mSfCc=
Subject key identifier: CD:56:87:F5:EF:9A:41:73:61:E2:95:04:9B:19:BE:C1:5A:3A:2D:C7
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 01A15F1C2A0EF5581669BAB3E198D6B13EB7
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/zVaH9e-aQXNh4pUEmxm-wVo6Lcc.roa
Signing time: Wed 21 Oct 2026 15:37:23 +0000
ROA not before: Wed 21 Oct 2026 15:37:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214673
IP address blocks: 62.129.138.0/24 maxlen: 24
62.129.140.0/24 maxlen: 24
62.129.142.0/24 maxlen: 24
62.129.143.0/24 maxlen: 24
92.62.118.0/24 maxlen: 24
149.245.246.0/24 maxlen: 24
149.245.247.0/24 maxlen: 24
178.251.232.0/24 maxlen: 24
193.143.69.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
2a11:4880::/32 maxlen: 32
2a11:4881::/32 maxlen: 32
2a11:4882::/48 maxlen: 48
2a11:4882:100::/48 maxlen: 48
2a11:4882:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:1c:2a:0e:f5:58:16:69:ba:b3:e1:98:d6:b1:3e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Oct 21 15:37:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd5687f5ef9a417361e295049b19bec15a3a2dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:75:92:80:8b:f7:2b:05:6c:8b:3d:24:d8:
e4:8a:a9:b7:2b:bf:25:26:93:ea:94:77:ff:f1:f9:
69:ee:8c:77:09:f2:5b:52:95:97:2a:8c:97:63:b7:
db:95:2e:8e:bd:c0:36:c2:22:33:0a:06:e4:a8:20:
fd:61:a5:6d:b0:65:51:1a:a6:a3:79:eb:c3:b8:0b:
5b:95:2a:4a:b3:02:14:a1:b2:74:1d:37:dd:3b:3e:
51:55:26:c7:5a:8c:fa:35:b6:7b:28:10:da:fe:d3:
2a:c5:c3:6e:a9:85:26:78:bd:a1:a9:27:a2:20:41:
c4:e7:3c:6f:15:58:cd:26:05:c9:97:f3:c2:24:ab:
ed:e7:52:36:44:a6:a4:e2:c9:55:f1:97:41:78:b0:
1d:5d:dd:d2:88:47:77:70:2e:cb:47:db:dd:6d:45:
ea:3a:d8:56:d0:a9:f7:78:88:f8:26:c6:12:ff:b2:
46:e3:5e:32:c9:6f:e8:fb:de:8d:d0:c8:57:64:eb:
85:5c:6d:47:c7:e0:a6:2e:38:55:e8:97:fe:11:ed:
bb:ca:43:d9:c7:19:e9:66:0e:14:78:4b:e1:c8:d5:
f4:dc:8a:81:f1:4e:c6:46:cd:da:0f:1d:e5:ed:ae:
b8:84:2d:6e:20:cd:ce:4b:0d:eb:c2:2c:df:6c:ed:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:87:F5:EF:9A:41:73:61:E2:95:04:9B:19:BE:C1:5A:3A:2D:C7
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/zVaH9e-aQXNh4pUEmxm-wVo6Lcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.138.0/24
62.129.140.0/24
62.129.142.0/23
92.62.118.0/24
149.245.246.0/23
178.251.232.0/24
193.143.69.0/24
217.180.14.0/24
IPv6:
2a11:4880::-2a11:4882:0:ffff:ffff:ffff:ffff:ffff
2a11:4882:100::/48
2a11:4882:200::/48
Signature Algorithm: sha256WithRSAEncryption
ba:f0:80:a6:63:61:69:b4:66:86:ec:a0:14:61:3a:9b:a3:61:
2a:09:b1:fa:3f:6a:27:7b:5c:2d:2f:68:61:27:6a:f2:24:08:
05:d1:39:ce:fc:70:4e:52:f2:ec:1d:fb:d2:eb:27:2e:93:7a:
c7:ea:13:54:8b:4b:36:74:b8:47:a0:27:b8:95:64:77:66:8e:
6b:f6:ce:8a:24:45:5e:ce:c7:c0:e8:2f:4b:e0:f1:08:ef:7d:
bb:12:09:18:c4:3b:f7:4e:a1:c1:77:90:21:b4:21:7e:86:4d:
78:17:58:23:77:dd:5c:7c:e6:32:37:8f:7d:e5:af:16:b5:d6:
02:9d:ba:07:93:f9:cd:43:b3:8f:a9:9f:2d:9d:e4:02:c7:f0:
a2:ce:b7:f1:69:c3:68:43:9d:2a:a2:d4:55:c8:35:16:0c:54:
12:d0:3a:b7:0f:ad:3d:99:71:a2:c8:6d:8b:34:82:ad:93:07:
90:43:d0:39:db:bb:b6:0e:b7:91:f7:98:72:a8:6b:e3:2c:03:
cf:8f:e8:14:37:b9:95:8a:19:1c:9d:c1:68:fc:be:f7:6e:2d:
c4:4d:35:05:00:b9:0f:0a:e4:7a:e7:b9:73:8e:85:91:83:65:
51:b8:d7:59:df:ac:8f:b9:e7:a6:89:26:b4:52:f8:86:ba:26:
36:77:6e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:02 2026 by rpki-client