Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zpz-NcEP5AB7Wm9SmTKo9UpN7dQ.roa
File: zpz-NcEP5AB7Wm9SmTKo9UpN7dQ.roa (raw, json)
Hash identifier: EiPboO8HiJUUA4zAT30Oipjh4aqd/RZt+rREf8lLVDo=
Subject key identifier: CE:9C:FE:35:C1:0F:E4:00:7B:5A:6F:52:99:32:A8:F5:4A:4D:ED:D4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1864E98E568ACCF564442D433D624E0E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zpz-NcEP5AB7Wm9SmTKo9UpN7dQ.roa
Signing time: Thu 29 Oct 2026 06:17:40 +0000
ROA not before: Thu 29 Oct 2026 06:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 94.183.150.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
94.183.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:4e:98:e5:68:ac:cf:56:44:42:d4:33:d6:24:e0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 06:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce9cfe35c10fe4007b5a6f529932a8f54a4dedd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:7b:32:b7:9e:b3:63:95:f1:c2:85:5a:dd:
59:d4:cf:f3:23:ac:40:cf:30:d6:89:03:2d:3f:75:
96:69:e3:79:fd:00:83:1b:92:c7:9f:6c:35:b2:8c:
9e:56:90:82:55:60:34:95:8f:a0:87:7b:6c:9a:83:
e9:16:9b:db:e1:b3:27:9a:f7:c5:4c:a8:3f:1c:d9:
ac:0e:e1:86:78:63:08:13:ce:e1:0f:0a:25:dd:60:
93:1a:2d:91:c6:59:59:cf:d3:de:41:5d:75:8b:36:
9b:cd:9e:b7:8a:8e:43:2b:8e:e7:c4:29:68:fe:3f:
0d:81:dc:f3:64:98:02:31:7e:4d:01:ae:d9:e5:18:
25:f5:91:55:73:4f:a0:1b:72:81:26:72:c0:3e:ff:
32:1f:65:11:a0:d1:59:a1:3b:a0:fa:05:0d:c2:14:
04:ff:8b:f1:b5:08:5a:a8:c9:ad:00:22:89:70:52:
db:4e:0b:8c:e3:a8:ec:45:5e:82:bb:98:97:2d:15:
2d:85:c5:28:47:4f:c9:a1:f3:ae:9f:70:81:d3:a4:
d0:f3:07:b7:5d:66:72:14:db:0f:8f:91:5f:f7:16:
db:69:70:5c:47:5a:ee:a3:d4:3d:ac:30:10:02:b3:
cf:9c:a1:9a:a5:39:f3:5d:61:27:58:c3:3f:c7:16:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:FE:35:C1:0F:E4:00:7B:5A:6F:52:99:32:A8:F5:4A:4D:ED:D4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zpz-NcEP5AB7Wm9SmTKo9UpN7dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.150.0/24
94.183.162.0/24
94.183.216.0/24
94.183.218.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cd:cc:08:85:6c:65:9f:86:1d:e0:9a:fd:63:06:98:04:89:
67:2f:bc:f4:b6:ad:de:29:ca:c6:46:33:6a:35:c0:32:37:d3:
11:56:1d:0d:94:65:5f:b2:f3:b6:87:96:ee:d0:55:b4:fe:7f:
73:62:13:46:4e:72:4d:96:12:04:f5:56:8b:43:6c:aa:d2:9d:
d0:14:2f:c2:bc:02:fe:20:bc:70:4a:6b:96:2c:43:33:39:a0:
9c:79:98:c0:ec:23:aa:c7:ad:b2:b4:a4:86:55:5d:91:0e:34:
bc:1f:87:38:53:7f:6b:28:6f:18:44:e6:a1:4f:c6:ba:6f:19:
6a:9f:54:a3:04:86:95:76:65:0f:68:17:02:b6:82:40:7f:df:
b5:4a:79:4e:ad:00:e0:bb:14:b3:6c:0f:d0:f2:e4:68:54:10:
51:5e:7e:77:12:71:18:a4:86:58:b3:bb:43:c8:14:13:73:e8:
ce:bc:61:2d:d1:3f:6c:77:0c:b5:96:57:15:aa:19:e5:19:3c:
fe:3d:fa:58:61:cb:f3:92:df:43:d1:c4:25:12:0c:21:a5:ef:
24:48:79:53:46:7a:7a:85:d5:37:f7:6d:2a:7d:78:77:9a:0f:
d1:32:f6:cf:1d:73:ba:8d:95:f3:81:7d:a8:3f:10:72:0f:2e:
91:d4:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:57:04 2026 by rpki-client