Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mzEA_ycGWGcYrFeOEn2wdhD1uts.roa
File: mzEA_ycGWGcYrFeOEn2wdhD1uts.roa (raw, json)
Hash identifier: SHrhOpCdmGpV8AbFBkZJG42fH8XKuzf+LcfBrfyPU8g=
Subject key identifier: 9B:31:00:FF:27:06:58:67:18:AC:57:8E:12:7D:B0:76:10:F5:BA:DB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019C8A9FAE6332C71BC7855DD21571E8B73F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mzEA_ycGWGcYrFeOEn2wdhD1uts.roa
Signing time: Mon 23 Feb 2026 13:10:46 +0000
ROA not before: Mon 23 Feb 2026 13:10:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 46.249.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:9f:ae:63:32:c7:1b:c7:85:5d:d2:15:71:e8:b7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 23 13:10:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b3100ff2706586718ac578e127db07610f5badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:96:06:cd:9a:a5:8e:26:a2:58:58:29:c7:
88:02:0c:c0:a2:b8:2f:8a:4d:b9:23:28:5b:62:ed:
57:14:4a:db:6c:f6:54:81:c2:51:45:1b:29:d8:08:
9a:2e:d1:99:96:3e:4b:8b:60:51:af:17:e8:93:ca:
f7:b6:ba:5e:8f:8d:6e:be:cb:9d:75:ef:6e:fa:23:
56:d5:e7:5f:31:2a:18:d6:60:75:9f:30:f6:7b:8f:
d0:43:90:a5:ef:d6:33:c9:e7:7e:1c:f3:99:74:20:
f0:51:d5:46:cd:7f:bd:ea:ca:e3:cd:86:ce:cb:d5:
21:a3:38:9b:82:5e:42:d9:4e:e2:e7:e3:cc:7d:f9:
00:5c:d6:f8:fb:f0:4b:ee:29:c9:27:3d:9b:af:0f:
d1:4c:0c:2c:01:9a:5e:4a:36:6b:48:91:2c:7e:d7:
74:2f:e7:bc:6d:cf:63:71:f8:4c:75:fe:f2:dd:57:
05:d3:f8:e1:cd:fd:e2:08:50:62:50:79:64:5a:58:
2d:0b:82:47:c2:c5:46:82:b6:2e:a5:f6:a2:39:a0:
c2:f4:e8:12:a1:d3:05:20:ff:5c:b3:51:40:fd:d5:
0a:b8:f9:d1:4e:18:b6:dc:e4:08:9e:fe:29:bb:3d:
4f:59:36:d1:0f:5a:20:a3:0b:a6:4f:ff:05:5c:29:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:00:FF:27:06:58:67:18:AC:57:8E:12:7D:B0:76:10:F5:BA:DB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mzEA_ycGWGcYrFeOEn2wdhD1uts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9d:51:cf:d6:2b:6c:00:fa:b7:5d:33:19:c0:71:7c:4d:5d:
c3:68:d1:1e:2d:56:f6:fa:35:86:7b:8c:ac:02:c2:9b:61:00:
19:95:e9:84:9e:4c:65:60:29:a1:0b:a5:55:33:75:4c:69:fb:
74:87:52:f8:d1:f4:75:f5:80:31:8e:5e:41:27:87:0e:53:4d:
4f:9b:11:88:90:5c:05:8c:6a:81:85:21:f5:df:81:d7:a6:a4:
fb:d0:cc:d2:44:28:32:d8:2b:e1:93:d1:d4:fd:c5:89:cd:e0:
8e:1b:ff:90:66:3a:d3:bc:5e:86:2e:38:fd:32:60:d5:3b:5c:
59:16:92:c5:45:97:28:ec:d5:d5:cf:51:c3:b0:be:e2:54:4e:
e9:86:5c:8f:ae:ec:fb:81:5a:42:31:cc:2d:14:94:bc:67:f9:
9f:91:15:6b:90:4c:a6:01:09:79:70:28:e8:ee:aa:4e:a4:7f:
35:b9:ab:69:8e:f8:ee:0b:5a:9f:3c:54:68:9e:a4:77:17:15:
a1:97:cb:d6:fd:3d:45:10:bd:f5:f5:8d:e5:c7:31:e6:bf:36:
33:3c:50:8f:24:d3:9c:fb:6d:38:8d:0c:8f:d4:ed:5e:01:ff:
92:2f:da:27:7e:13:15:6f:de:7b:2a:ed:4b:2e:5a:bd:8a:37:
a5:81:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:49:37 2026 by rpki-client