Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa
File: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (raw, json)
Hash identifier: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=
Subject key identifier: CF:D0:11:A3:EA:78:45:35:61:62:76:02:C1:47:8B:42:81:CD:23:47
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019C2A3F89760140BD34EA77056DAB37E5B7
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa
Signing time: Wed 04 Feb 2026 20:02:12 +0000
ROA not before: Wed 04 Feb 2026 20:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46805
IP address blocks: 23.92.112.0/24 maxlen: 24
23.92.113.0/24 maxlen: 24
23.92.114.0/24 maxlen: 24
104.160.0.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
104.160.8.0/24 maxlen: 24
104.160.22.0/24 maxlen: 24
104.160.23.0/24 maxlen: 24
104.160.24.0/24 maxlen: 24
104.160.25.0/24 maxlen: 24
104.160.26.0/24 maxlen: 24
104.160.27.0/24 maxlen: 24
107.150.80.0/24 maxlen: 24
107.150.92.0/24 maxlen: 24
192.40.95.0/24 maxlen: 24
2a02:5740:102::/48 maxlen: 48
2a02:5740:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2a:3f:89:76:01:40:bd:34:ea:77:05:6d:ab:37:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Feb 4 20:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfd011a3ea78453561627602c1478b4281cd2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:ed:0f:a5:1e:a3:6e:00:d8:99:a8:47:53:
39:a1:02:80:98:a5:24:ba:3e:99:d1:da:4b:22:27:
bb:82:fc:a9:b2:11:30:9d:0d:19:1d:85:84:c6:d1:
aa:b2:95:7b:88:ad:8d:1f:07:b5:63:2c:7f:90:73:
f9:71:a6:08:98:1c:31:be:dd:2e:86:71:66:f5:16:
65:07:51:69:45:a9:0c:d7:e2:0e:76:c7:1a:c0:2b:
f4:43:07:e5:38:8f:90:cb:41:09:f7:b4:7c:33:34:
2e:78:bf:25:3b:c8:df:68:b8:e4:7f:8a:b4:9d:eb:
2d:0a:a1:ad:25:da:39:2d:5f:fa:58:a5:5c:76:40:
7b:53:8c:21:c9:1c:2a:6e:4e:5f:6c:14:5a:9a:c6:
e1:e7:ba:19:60:c2:fd:e5:ca:4d:a9:12:48:2f:d9:
5f:b9:3e:c8:85:2e:63:31:81:1b:70:94:2a:23:4f:
fc:3e:1f:34:ea:1d:c9:e9:52:95:b4:ef:93:bc:39:
f8:7e:d5:b3:3f:e7:aa:12:0d:35:2f:17:6b:34:23:
05:47:c2:f5:60:33:00:3c:54:46:64:a6:c1:c9:93:
97:c6:6f:76:63:99:f1:39:19:05:3d:82:5a:84:63:
52:0b:73:ca:11:e7:db:57:f9:2a:bf:a6:26:8e:ca:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:11:A3:EA:78:45:35:61:62:76:02:C1:47:8B:42:81:CD:23:47
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.92.112.0-23.92.114.255
104.160.0.0/24
104.160.5.0/24
104.160.8.0/24
104.160.22.0-104.160.27.255
107.150.80.0/24
107.150.92.0/24
192.40.95.0/24
IPv6:
2a02:5740:102::/48
2a02:5740:200::/48
Signature Algorithm: sha256WithRSAEncryption
33:a0:7c:59:17:cc:30:e4:2a:c6:8c:d0:e8:1e:24:a8:d6:4b:
39:3a:4e:7f:72:3b:7f:fe:7d:d2:4a:74:a0:f7:a6:ba:a1:ff:
e3:fe:bd:ab:d6:cd:12:88:f5:8f:63:e1:d5:e4:0f:e7:c6:d6:
29:bc:0a:c7:aa:e9:a9:9f:08:1f:f6:48:83:a2:9c:13:e7:8c:
89:c1:fd:2c:26:61:c0:0e:5b:b1:9b:e1:d8:cc:51:b6:db:32:
f4:c8:77:7e:3b:8e:f2:bb:cc:c0:43:80:b2:83:5c:59:2d:70:
f6:0a:09:38:73:77:3a:5d:61:86:6d:20:6d:d4:45:23:05:fd:
7e:41:4c:de:8b:3f:96:70:71:18:32:4e:94:cb:bb:d6:4b:de:
8d:0d:8c:71:6e:71:9a:87:5e:87:7c:72:16:18:3f:cd:5f:db:
76:36:91:76:69:c3:7a:0c:bc:ba:b0:a3:5f:e8:e4:0a:e5:7c:
29:b3:65:6b:4b:7e:d1:cb:e6:a1:9f:1d:28:be:72:04:07:c5:
b8:cf:1d:f3:36:0a:e2:62:13:16:28:b6:2b:ce:d9:3a:d2:9e:
a5:05:73:56:2f:cc:bd:5d:3d:85:e1:d1:22:10:25:9f:02:b8:
f0:8a:95:1a:18:e7:fa:cf:3f:dc:cf:1c:1b:14:cc:47:59:f2:
c8:1a:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:46:12 2026 by rpki-client