Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ztCHjxNB_11zADqmmGC5RKTjuMo.roa
File: ztCHjxNB_11zADqmmGC5RKTjuMo.roa (raw, json)
Hash identifier: ZTNp5fyxxXjxpIAPEbNhRV2Y2j40wqmFpe5edHkmZJ4=
Subject key identifier: CE:D0:87:8F:13:41:FF:5D:73:00:3A:A6:98:60:B9:44:A4:E3:B8:CA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D6BD873762980A48440E57B22D2ABDB62
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ztCHjxNB_11zADqmmGC5RKTjuMo.roa
Signing time: Wed 08 Apr 2026 06:47:20 +0000
ROA not before: Wed 08 Apr 2026 06:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.204.104.0/21 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:d8:73:76:29:80:a4:84:40:e5:7b:22:d2:ab:db:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 8 06:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ced0878f1341ff5d73003aa69860b944a4e3b8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:72:fd:d6:9e:4a:5c:c2:44:08:2d:b8:eb:
4d:9b:0b:ba:a4:93:a2:c7:d5:c6:7a:4d:69:9a:2f:
c9:20:b7:e8:d4:40:7b:3e:fc:5e:89:9c:36:8c:b9:
f4:77:f0:72:4a:d4:07:dc:09:e3:c3:b4:18:2c:bb:
55:cd:ac:b6:2d:c1:00:77:5a:e7:54:30:c5:50:d5:
72:16:8b:d1:02:4c:e4:c7:ab:7c:db:28:d7:41:d8:
7d:c1:eb:a1:b1:ef:bf:63:01:af:88:ff:cc:9a:17:
c3:73:d4:97:5d:e4:36:09:fb:ba:44:2c:24:c5:33:
4a:d7:b0:56:76:54:d5:78:20:0f:be:d1:f3:fd:a3:
90:d1:3c:9a:d7:7e:a7:44:d0:0a:7e:a7:64:0d:19:
01:24:f4:9d:90:2d:fe:e1:5c:90:dd:af:b7:ba:4f:
cd:b9:14:9d:ee:26:0e:35:74:d6:56:6d:81:1d:4d:
94:9e:4b:bf:55:9a:35:18:cf:34:41:52:17:b0:85:
0b:b8:ed:33:3d:ec:d0:02:ed:98:5d:5a:83:18:b3:
fc:9b:90:37:36:88:50:5b:b8:e3:77:96:82:8f:41:
86:58:eb:5d:3e:58:00:83:79:9a:5e:03:e7:4c:44:
e1:65:3b:1d:bf:3f:c3:32:cd:7a:38:3b:0c:d4:ed:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D0:87:8F:13:41:FF:5D:73:00:3A:A6:98:60:B9:44:A4:E3:B8:CA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ztCHjxNB_11zADqmmGC5RKTjuMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.104.0/21
212.134.38.0/24
212.134.45.0/24
212.134.59.0/24
212.134.116.0/22
212.134.158.0/24
212.135.159.0/24
Signature Algorithm: sha256WithRSAEncryption
05:38:06:fe:9b:08:68:a7:0a:56:fe:c4:b8:92:10:00:83:23:
3e:bb:81:72:96:81:5a:a5:c9:90:73:a9:21:42:4a:63:cc:58:
06:7f:de:28:7b:6c:64:33:23:91:36:1e:00:6f:bb:0b:07:fd:
5d:3d:50:6a:3a:28:0e:26:73:09:6d:d7:2e:35:56:3e:7c:14:
8e:20:a8:be:c8:78:8e:74:da:45:8f:3a:27:5e:1c:62:c8:fc:
23:c9:af:0a:5a:7c:34:81:50:37:91:eb:b8:85:dd:ab:6a:97:
0b:64:33:a4:76:25:be:08:2d:80:a2:45:4f:d2:61:fe:4a:b3:
52:d3:a6:f9:eb:d7:7d:86:1c:d7:e8:7c:f4:38:e1:3a:44:b0:
18:ef:78:83:89:21:c8:cf:ab:be:ca:ca:fd:df:6a:4c:16:47:
60:55:12:99:68:b6:71:02:2c:f8:ac:be:2f:81:c4:ff:c0:d2:
a3:86:f9:d5:8f:4b:0a:a1:39:8d:a1:b0:ac:c2:4d:b4:30:75:
40:22:e0:b0:36:b1:0c:cc:00:86:7f:66:88:45:b9:ba:b8:91:
cf:21:25:f4:50:67:66:08:ec:ac:c9:d2:ac:9a:47:ff:f2:19:
e6:6d:b4:d9:94:05:41:07:03:76:8e:7b:20:78:cc:97:d3:f1:
e8:78:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:54 2026 by rpki-client