Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/zROZAITx683tmZmFr2UpbmhJqPc.roa
File: zROZAITx683tmZmFr2UpbmhJqPc.roa (raw, json)
Hash identifier: OVZ+5wa/5iapXn/Kpu3EqmEH/m0ba3wB+gw9kaARYEg=
Subject key identifier: CD:13:99:00:84:F1:EB:CD:ED:99:99:85:AF:65:29:6E:68:49:A8:F7
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 019D965D28B03B5A443BCEF6E4B3F8948C91
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/zROZAITx683tmZmFr2UpbmhJqPc.roa
Signing time: Thu 16 Apr 2026 12:56:20 +0000
ROA not before: Thu 16 Apr 2026 12:56:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60721
IP address blocks: 45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
185.162.144.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
2a04:3880::/30 maxlen: 30
2a05:100::/29 maxlen: 29
2a06:c380::/29 maxlen: 29
2a0b:6000::/29 maxlen: 29
2a0d:a2c0::/29 maxlen: 29
2a0d:c480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:5d:28:b0:3b:5a:44:3b:ce:f6:e4:b3:f8:94:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Apr 16 12:56:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd13990084f1ebcded999985af65296e6849a8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:59:c8:1d:7a:ea:5f:a6:40:b8:56:6b:74:
d5:b4:71:79:63:cd:b3:60:10:fc:dc:af:85:ba:87:
49:6e:e0:da:b5:ad:a2:0d:b9:2f:2b:40:f3:53:04:
94:bf:bb:f5:f9:6a:ab:9e:8b:5f:18:b1:5e:4f:ac:
17:1b:68:fb:3a:09:ba:c3:61:18:3f:f7:fd:ad:e2:
8b:3c:7e:4e:d7:24:33:6e:82:88:e1:73:f3:4e:21:
ac:cf:29:da:dd:8e:7f:f8:04:6d:be:c6:2f:5f:65:
bc:24:12:86:af:a4:4e:b3:ad:9e:c1:c3:7a:04:5d:
7d:e0:24:71:03:5f:51:fd:54:27:6f:5c:4f:60:77:
14:bf:5a:7e:b5:f6:5a:56:7f:a0:59:8b:2d:ce:9e:
d5:b1:8a:f5:dd:f6:85:88:cd:59:90:a7:97:d8:8e:
34:44:a9:f6:16:2b:03:c1:05:af:34:90:76:9c:84:
c5:c2:aa:61:88:59:5c:6e:63:16:32:ed:21:86:bd:
05:f2:e5:0f:b5:15:92:81:71:89:98:a9:97:6f:94:
64:a8:49:56:a9:e9:ce:07:e4:0a:4b:9d:9c:f1:22:
d6:d0:e7:9a:3f:37:51:56:c8:22:c0:f2:25:40:44:
50:53:d8:dd:31:0c:ec:18:37:5a:29:8b:31:6d:e1:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:99:00:84:F1:EB:CD:ED:99:99:85:AF:65:29:6E:68:49:A8:F7
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/zROZAITx683tmZmFr2UpbmhJqPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/23
45.136.107.0/24
185.26.144.0/22
185.126.176.0/24
185.153.228.0/22
185.162.144.0/24
185.162.147.0/24
185.171.24.0/22
185.247.136.0/24
185.247.138.0/23
IPv6:
2a04:3880::/30
2a05:100::/29
2a06:c380::/29
2a0b:6000::/29
2a0d:a2c0::/29
2a0d:c480::/29
Signature Algorithm: sha256WithRSAEncryption
5e:1f:fe:a7:c4:79:96:fb:ad:c9:03:a0:85:68:fc:56:0e:25:
18:92:34:0d:82:5e:34:3b:2a:5e:50:05:42:5a:ca:b5:80:5a:
4e:3a:1e:1a:94:c0:3f:0d:87:51:ab:90:c4:75:e2:8c:9d:65:
f3:30:01:c1:d4:c0:a8:9e:04:ad:e5:09:d0:34:99:1a:3d:2e:
50:20:ee:89:25:14:02:23:20:ea:15:f0:39:d9:e8:0b:07:8c:
cd:72:d7:66:b7:68:30:bb:ed:a0:47:c2:4a:44:16:5d:f4:fe:
ca:9b:07:92:05:01:31:be:91:7d:5e:58:c2:7c:a4:70:60:59:
00:b6:5d:34:56:e2:80:3d:cc:bd:78:81:6d:0f:42:c1:da:ac:
9b:dc:b5:0f:6e:ad:83:59:53:46:aa:df:3c:69:d1:8f:e8:c1:
86:9c:60:c4:92:b7:88:0f:7e:32:e5:81:28:19:a8:5e:ec:25:
42:25:b3:b2:53:c2:8a:d8:34:8f:e1:44:c8:9b:02:71:76:9e:
3f:6a:08:0c:c3:0b:b4:37:11:ff:0c:f3:b2:cf:72:8d:de:31:
05:02:64:70:6b:9b:da:01:55:d2:e6:a6:d8:41:b6:c4:89:81:
4c:ac:06:f8:6d:03:7b:4e:dd:5e:ff:0f:22:a8:bc:f5:f5:6f:
0e:8e:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:11 2026 by rpki-client