Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/zK7MrHgxjsLskIcafxYh3JdxNEE.roa
File: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (raw, json)
Hash identifier: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=
Subject key identifier: CC:AE:CC:AC:78:31:8E:C2:EC:90:87:1A:7F:16:21:DC:97:71:34:41
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019B7A5B7853C773B0A3B80774F4E5E43C7E
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/zK7MrHgxjsLskIcafxYh3JdxNEE.roa
Signing time: Thu 01 Jan 2026 16:19:33 +0000
ROA not before: Thu 01 Jan 2026 16:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31449
IP address blocks: 185.57.128.0/22 maxlen: 22
185.57.128.0/23 maxlen: 23
185.57.130.0/23 maxlen: 23
217.112.176.0/20 maxlen: 20
217.112.176.0/21 maxlen: 21
217.112.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:78:53:c7:73:b0:a3:b8:07:74:f4:e5:e4:3c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Jan 1 16:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccaeccac78318ec2ec90871a7f1621dc97713441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:10:86:c0:b0:88:d7:30:95:63:b1:fe:19:
5f:2d:71:c4:a5:bf:1c:4e:30:02:a4:0c:c9:e2:60:
9e:85:2c:dd:6a:2a:67:ae:cb:a9:94:d8:01:8a:fe:
bf:91:8c:02:d0:81:b1:cc:c8:87:ca:09:21:c1:c3:
72:60:66:ae:b7:59:6f:bc:00:be:f3:0b:ec:5c:33:
83:f3:4d:8e:ce:1c:8e:69:8e:c7:30:27:ef:7e:fd:
95:04:cd:96:62:82:58:81:d6:9d:5f:b7:45:58:fe:
10:7d:a6:75:03:27:4a:a9:8c:9f:c1:3e:a0:0f:6f:
8b:07:46:27:f2:1a:b0:57:d6:39:aa:bb:52:62:e3:
78:35:b2:60:30:8f:c6:77:00:27:d1:7a:dc:c2:db:
f0:7f:83:89:3a:70:5d:ee:f4:fc:30:b9:59:06:89:
18:a9:b4:9c:16:4b:b0:31:e1:27:f5:6b:37:f9:e0:
78:18:4f:6b:59:37:b9:38:d9:1a:78:f1:4e:80:b3:
7f:03:d4:a5:cf:6b:14:9b:75:ad:ce:ff:31:12:90:
98:bb:ea:21:23:d8:ca:07:2c:91:f5:76:e2:69:b9:
49:3b:a1:66:c2:af:b3:11:9b:5a:6c:bf:39:dd:a6:
36:e8:2b:ac:8f:4c:df:dd:92:7e:11:59:03:9f:e6:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:CC:AC:78:31:8E:C2:EC:90:87:1A:7F:16:21:DC:97:71:34:41
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/zK7MrHgxjsLskIcafxYh3JdxNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.128.0/22
217.112.176.0/20
Signature Algorithm: sha256WithRSAEncryption
50:05:da:ea:26:76:6e:56:5e:c9:65:e0:ce:83:01:a2:46:80:
08:f7:cf:a1:3b:a6:c6:1d:11:ed:e0:c4:21:bc:d4:c5:8c:37:
65:8c:ec:fa:73:50:e3:ea:a7:f4:0e:42:62:26:1c:20:76:f3:
7e:7b:e3:7d:33:78:fd:55:7c:73:5b:79:0d:c3:7d:84:67:a7:
d1:62:8a:f7:01:d6:a3:9c:bf:3b:3f:a2:de:08:27:20:1c:d2:
87:ae:bb:18:a6:b7:8f:f2:0c:c6:cb:96:d2:c1:da:d8:7e:5e:
0d:80:51:ad:50:e9:3e:1d:08:a0:7e:c4:99:dd:74:59:30:e6:
f9:23:11:f9:57:a2:a4:be:26:a7:f5:8f:0e:03:70:ba:da:06:
8b:ea:3f:ad:1b:2d:c6:e1:7a:77:ba:77:79:6e:31:8f:f6:23:
d8:af:52:d8:ac:be:f3:8d:08:f7:24:da:a7:d6:33:3b:3f:bc:
89:b0:23:95:73:47:b4:c2:da:cb:06:95:34:30:6d:5b:b4:92:
22:fd:7e:a5:e4:0f:51:9a:d8:9b:bc:c3:d2:8c:f4:87:a8:1f:
1c:3f:c3:ab:1d:96:7b:9a:40:7a:ad:5e:f8:fa:84:d5:eb:6d:
89:78:bf:53:cf:7a:ed:c3:3d:8f:50:59:ba:3d:69:b8:7f:d9:
94:d4:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:28 2026 by rpki-client