Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/zAekwbe_IC902rvvOjXq_KnIehs.roa
File: zAekwbe_IC902rvvOjXq_KnIehs.roa (raw, json)
Hash identifier: Zv47b1fJBGEQOlR4Mi6cUwHcP5gPGJZYyK/NqTNIRnU=
Subject key identifier: CC:07:A4:C1:B7:BF:20:2F:74:DA:BB:EF:3A:35:EA:FC:A9:C8:7A:1B
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019C55F51D9B728055CFDB1B55C1CF74D38F
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/zAekwbe_IC902rvvOjXq_KnIehs.roa
Signing time: Fri 13 Feb 2026 07:44:13 +0000
ROA not before: Fri 13 Feb 2026 07:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 138.249.133.0/24 maxlen: 24
138.249.138.0/24 maxlen: 24
170.168.61.0/24 maxlen: 24
170.168.62.0/24 maxlen: 24
170.168.89.0/24 maxlen: 24
170.168.90.0/24 maxlen: 24
170.168.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:f5:1d:9b:72:80:55:cf:db:1b:55:c1:cf:74:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Feb 13 07:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc07a4c1b7bf202f74dabbef3a35eafca9c87a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:23:21:0c:d8:c7:fd:e0:85:b2:d7:89:a4:
6e:2c:9f:dc:4f:19:20:79:24:97:d4:3d:62:af:9f:
43:32:7d:65:c7:c6:dc:67:80:8b:99:36:2b:70:ec:
2f:c3:44:f2:93:11:84:ee:4f:9a:b5:14:af:6f:09:
be:6e:b2:1a:09:b0:1a:ab:72:0c:d4:1b:08:1a:8e:
2f:19:a5:2a:3c:aa:5f:fb:56:d0:d8:5e:58:5c:44:
ce:51:95:19:79:e2:74:b0:9c:51:51:93:fd:07:e0:
85:16:b5:2e:8d:c3:d5:41:07:80:14:a0:85:56:54:
f3:39:f2:cb:aa:44:14:d2:11:30:e0:2c:81:c9:67:
e2:bf:8e:98:e5:39:06:a5:da:f6:78:13:47:8c:7e:
2f:d4:7b:6d:65:07:9e:5a:60:52:e3:4b:51:1d:53:
23:a0:05:30:af:d7:1d:c0:1d:f6:fa:55:d3:d0:f4:
aa:ca:a2:48:be:0b:61:96:d2:06:7f:4a:3e:af:1c:
f5:57:39:e6:a3:61:3e:08:c8:ed:dc:41:22:c4:c6:
74:9a:bb:19:8f:5c:a9:d6:62:a8:5a:f4:77:34:b3:
25:87:24:d0:63:92:4a:d9:e4:09:87:87:0b:18:64:
56:e5:7b:28:79:af:38:cb:49:a2:d7:da:8e:ec:0f:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:A4:C1:B7:BF:20:2F:74:DA:BB:EF:3A:35:EA:FC:A9:C8:7A:1B
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/zAekwbe_IC902rvvOjXq_KnIehs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.133.0/24
138.249.138.0/24
170.168.61.0-170.168.62.255
170.168.89.0-170.168.90.255
170.168.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d3:05:0a:d1:90:d9:09:7e:03:90:52:ee:86:35:6c:6f:32:
7a:f1:04:59:49:97:c5:e5:4d:53:b2:9b:3b:87:e8:f3:59:33:
16:57:32:0d:b0:65:27:5d:67:0b:9c:da:80:c9:65:2b:e1:a4:
12:c5:9a:6c:cc:e8:02:a6:d7:d9:6a:6a:66:8a:52:6a:ac:9c:
58:dd:72:d6:1f:8e:f5:d2:a0:86:82:f8:8c:84:14:13:d5:0f:
55:1e:5e:d6:ba:5d:97:d2:49:c0:5d:25:9c:a5:b4:93:3f:e2:
20:04:4a:7d:2b:fa:5c:f1:04:02:d2:80:e9:ca:20:07:b2:6f:
b9:92:ec:12:10:18:92:bf:fb:0c:8f:88:81:5a:56:6c:af:c9:
d5:fc:42:c6:5d:b9:df:a0:be:38:c8:87:1d:e4:12:26:26:99:
5b:37:93:59:b5:01:12:ce:d9:4c:6f:16:f8:f8:2f:68:e6:3a:
90:a5:06:3d:49:ea:78:95:d5:26:f4:30:a7:ce:20:a0:e2:55:
a0:f7:14:d9:8a:dd:04:1c:06:42:19:db:68:93:d0:30:9e:e9:
e2:03:96:3e:83:f4:6d:d9:cb:9a:9f:41:d5:df:66:78:50:15:
ec:f5:5e:5b:a1:d1:f1:08:38:6d:48:df:42:4d:98:5b:4f:75:
41:ee:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:58 2026 by rpki-client