Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZDHz-WdFo7MkpQWOnkU9IF5gNjY.roa
File: ZDHz-WdFo7MkpQWOnkU9IF5gNjY.roa (raw, json)
Hash identifier: Zm43uhNCeuRjpFjkXeMRQUfCrpX1PfIaWpOeqsr3+7E=
Subject key identifier: 64:31:F3:F9:67:45:A3:B3:24:A5:05:8E:9E:45:3D:20:5E:60:36:36
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E923BC43BA5E8B3B29E85FF2D61C6A463
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZDHz-WdFo7MkpQWOnkU9IF5gNjY.roa
Signing time: Thu 04 Jun 2026 10:44:10 +0000
ROA not before: Thu 04 Jun 2026 10:44:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 81.168.20.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.3.0/24 maxlen: 24
82.152.233.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:3b:c4:3b:a5:e8:b3:b2:9e:85:ff:2d:61:c6:a4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 4 10:44:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6431f3f96745a3b324a5058e9e453d205e603636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:5b:c2:84:7f:19:25:5e:2a:4b:3a:13:f8:
b5:4c:d8:07:5e:bd:24:55:8b:33:1e:4a:e1:1a:00:
4f:2e:ba:aa:61:b9:5d:12:b2:17:68:17:39:01:fa:
c6:bb:23:85:29:a0:c9:4a:a6:cd:c8:00:74:cb:8a:
f4:65:a4:c3:78:96:3a:2f:d0:1e:42:71:94:20:ef:
28:97:cd:67:38:26:d7:9d:ba:f1:22:65:2a:85:21:
37:31:da:85:8d:1c:e4:88:fd:c5:0a:ae:36:01:a6:
33:47:87:2f:fb:4e:99:cc:aa:0b:f1:ef:3f:9f:27:
93:c0:97:1f:db:a3:35:ad:bd:1d:54:85:5f:86:9a:
e8:6b:0f:3b:c1:95:66:63:89:fb:8c:76:ae:5a:8e:
6d:d2:3c:1e:69:9f:f9:65:d6:bb:e5:55:a2:77:91:
b1:a0:1e:38:e6:93:9c:76:54:72:eb:34:e7:98:35:
6b:f3:2e:79:a1:e6:bc:52:f1:31:08:42:b7:8b:d6:
39:74:3a:8b:b3:61:4f:37:48:63:6c:e1:9a:78:9e:
e6:66:af:df:53:8e:f4:b9:59:99:b0:34:65:f9:6a:
31:3d:85:1c:a9:d8:34:8c:2c:bd:15:53:a6:15:be:
34:93:0b:76:54:e5:8b:2e:d8:f2:28:1c:7c:23:5c:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:F3:F9:67:45:A3:B3:24:A5:05:8E:9E:45:3D:20:5E:60:36:36
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZDHz-WdFo7MkpQWOnkU9IF5gNjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.20.0/24
81.168.120.0/24
82.152.3.0/24
82.152.233.0/24
82.153.72.0/24
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
Signature Algorithm: sha256WithRSAEncryption
13:29:cc:bf:b5:fe:f4:e7:4b:da:9f:2d:58:36:12:ed:ea:4d:
ff:44:2c:31:c9:0f:e5:0f:87:9b:a3:d5:7b:02:56:61:15:be:
6b:32:cd:d3:fc:f4:d2:ff:08:3a:f4:e8:19:65:e4:e8:66:79:
c6:32:a0:b0:5a:8d:d5:6e:ac:85:e6:0c:52:e2:8c:9f:da:9f:
13:ea:15:5d:8d:5d:a8:57:17:54:20:7d:d2:ec:15:c8:62:39:
60:ea:8b:e2:bd:69:93:15:20:b2:ec:56:2a:d0:af:ae:18:ac:
20:57:f7:34:22:42:f9:a5:a9:bc:22:df:98:46:a0:b0:9d:ce:
2b:e1:ef:9f:63:5c:54:48:3d:4c:c9:f9:55:70:60:aa:bb:4c:
fa:df:46:68:d2:e9:0a:14:e3:62:58:7e:ae:86:b0:ba:dc:6e:
36:9d:17:f5:41:1a:7f:00:64:3c:58:f0:12:95:18:1b:af:f9:
45:5e:21:36:de:a4:54:11:45:0d:cb:cc:d5:9a:5e:d6:a2:24:
b8:af:43:a7:34:e4:e7:ed:5f:a7:ad:66:47:fa:f8:e1:c6:db:
28:69:65:0f:c0:75:fd:29:5c:4f:a4:7c:5c:b1:ec:a8:30:44:
04:8b:6c:9e:72:1a:5d:88:2c:c3:ed:43:a7:47:e0:06:91:c6:
bd:3c:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:08 2026 by rpki-client