Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nZMUSikk0U7a1NF3qcNFsRc0Gl4.roa
File: nZMUSikk0U7a1NF3qcNFsRc0Gl4.roa (raw, json)
Hash identifier: mdKbRWD+1eMs+KldNLkiYqv0gUqOqHEzXpIFWuMbHKo=
Subject key identifier: 9D:93:14:4A:29:24:D1:4E:DA:D4:D1:77:A9:C3:45:B1:17:34:1A:5E
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C45CCC4AC804D0CC1DE9EBC78C81A96AA
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nZMUSikk0U7a1NF3qcNFsRc0Gl4.roa
Signing time: Tue 10 Feb 2026 04:26:13 +0000
ROA not before: Tue 10 Feb 2026 04:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 178.239.144.0/24 maxlen: 24
178.239.149.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
185.26.34.0/24 maxlen: 24
185.26.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:cc:c4:ac:80:4d:0c:c1:de:9e:bc:78:c8:1a:96:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 10 04:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d93144a2924d14edad4d177a9c345b117341a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:7d:af:21:41:72:d6:e8:af:e9:cb:ce:9f:
41:ab:e8:99:8f:d2:75:7e:10:a3:eb:48:83:1e:a5:
4b:cd:c2:ae:0c:5c:84:d0:1a:cc:01:be:0b:41:62:
26:e2:ae:15:82:ca:90:2d:d2:6d:5a:72:a4:45:ba:
6e:84:37:97:d2:b4:fc:bc:fb:35:1b:79:bf:c0:12:
58:e9:a6:a0:88:a9:8d:9c:5a:3c:cc:a5:26:7e:89:
24:68:97:f6:b5:3b:9e:52:58:48:c6:83:fc:be:de:
d1:0b:e7:09:53:58:1f:75:90:45:7b:25:56:06:12:
59:7c:2a:9b:bc:0f:86:44:2d:64:62:0c:47:15:45:
69:9b:6c:a5:67:57:75:6d:d0:fb:2a:a4:7e:45:0b:
ca:a7:72:b2:f2:4d:34:a7:b5:39:ec:f5:be:36:82:
76:36:da:77:f9:f6:c8:12:56:b7:81:e5:84:41:a3:
e1:e9:3c:5f:0f:1f:b4:9f:aa:16:09:df:b9:58:4d:
a8:04:cb:3b:1f:12:ec:05:7b:b0:64:73:ce:bd:80:
7c:14:07:d9:a3:1f:0e:7e:d5:70:a3:e0:47:7d:e6:
11:14:f1:b3:bb:02:70:53:79:bc:bb:3e:65:ba:1b:
5b:2d:c1:d9:27:08:bc:c3:a3:78:22:3c:42:b5:20:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:93:14:4A:29:24:D1:4E:DA:D4:D1:77:A9:C3:45:B1:17:34:1A:5E
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nZMUSikk0U7a1NF3qcNFsRc0Gl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
178.239.149.0/24
178.239.156.0/24
178.239.159.0/24
185.26.33.0-185.26.35.255
Signature Algorithm: sha256WithRSAEncryption
40:07:b9:c0:5b:05:31:ba:c8:11:8c:14:ff:57:cc:43:0c:29:
6e:e3:64:0b:38:26:5b:6b:2f:f9:47:4d:f5:c0:30:2a:f5:08:
04:1c:e6:63:59:e4:81:27:b3:b2:ce:3a:7e:53:d5:61:d2:cc:
25:f2:f6:fd:c0:92:4e:09:71:b1:90:83:88:45:03:1d:58:6d:
7d:91:08:bc:13:62:77:02:44:bf:92:01:84:53:d6:51:b0:e9:
f3:46:a7:ff:2d:cc:62:42:59:45:cc:de:d5:5e:41:22:69:f8:
87:3f:90:e6:f8:ca:5f:d2:6b:fb:a6:f7:23:d4:e8:e8:2c:16:
c9:4b:a3:3f:6a:8f:1c:49:88:6d:36:c6:63:d1:d4:99:d4:63:
95:48:9c:76:8f:3d:53:67:a7:1a:0e:20:24:f4:1c:30:14:51:
d0:30:a8:40:53:0e:8f:d1:ad:fc:64:ad:a1:e4:62:1f:0d:88:
17:0a:89:e6:34:b2:7f:28:82:2c:f8:29:69:ce:ac:72:a2:96:
2c:ea:f9:6e:81:b4:cd:0d:09:a5:7e:61:c0:74:72:03:17:45:
02:ff:75:97:d0:c9:bb:41:64:2d:aa:8b:ab:ab:b5:29:9f:83:
ad:1d:5d:06:8e:f9:33:60:e1:7a:31:a9:68:4a:e4:73:52:70:
61:78:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:26 2026 by rpki-client