Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/ZFjhRKTc_fnA_elueyMFvSF4ti4.roa
File: ZFjhRKTc_fnA_elueyMFvSF4ti4.roa (raw, json)
Hash identifier: Lr1LH8WlImW1FyLPaQdB6U9jkpj964a1iqduTqMC4rA=
Subject key identifier: 64:58:E1:44:A4:DC:FD:F9:C0:FD:E9:6E:7B:23:05:BD:21:78:B6:2E
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 019C4CC9EF23ACE4DE9B7709A81541242FA9
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/ZFjhRKTc_fnA_elueyMFvSF4ti4.roa
Signing time: Wed 11 Feb 2026 13:00:28 +0000
ROA not before: Wed 11 Feb 2026 13:00:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39180
IP address blocks: 37.148.240.0/21 maxlen: 21
81.18.176.0/20 maxlen: 20
93.191.40.0/21 maxlen: 21
178.18.48.0/20 maxlen: 20
185.29.64.0/23 maxlen: 23
185.153.244.0/22 maxlen: 22
188.93.40.0/21 maxlen: 21
195.13.32.0/24 maxlen: 24
195.13.33.0/24 maxlen: 24
195.13.34.0/24 maxlen: 24
2a01:378::/32 maxlen: 32
2a01:379::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:c9:ef:23:ac:e4:de:9b:77:09:a8:15:41:24:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Feb 11 13:00:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6458e144a4dcfdf9c0fde96e7b2305bd2178b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:b6:79:c5:07:62:b4:a0:86:62:35:47:2e:
40:ce:16:ef:75:79:e6:6a:8c:33:b5:d2:8b:a4:88:
58:30:26:bd:3c:10:2a:8a:8c:6c:e2:e7:8d:6c:b1:
7a:71:55:94:63:9e:4f:ab:73:08:a8:02:6b:04:5d:
05:9d:2b:e6:02:f7:91:b3:13:6b:06:cf:56:19:c2:
a9:56:92:1c:83:64:f6:3c:19:2a:19:9a:f5:0d:bf:
32:7c:54:97:1c:8e:3f:22:5e:31:00:86:7e:75:ad:
13:0d:1f:eb:2b:1d:7f:d9:d0:6a:1e:16:75:65:2c:
79:00:08:04:7c:a3:ee:cf:13:4a:08:0c:29:31:c1:
c1:8b:78:ca:0c:1d:52:b1:a0:e4:cb:a1:51:c2:01:
d0:ae:72:7f:af:62:ba:76:64:a9:3c:e8:00:c0:7d:
57:72:6e:21:44:43:96:0c:a0:3a:2b:82:da:3c:47:
e5:62:88:61:a3:ff:25:c3:6a:ef:62:c2:49:5f:dd:
be:62:26:c7:f1:26:27:8e:75:f3:5f:89:e0:b0:8b:
b3:2a:fb:14:5e:bb:5a:c3:13:9c:0a:ad:75:c6:1e:
fa:c3:2b:3f:49:c3:c3:7d:11:3c:ce:60:d4:d4:e5:
d2:71:01:f0:9a:44:ac:29:e6:2b:ef:4b:2a:2b:c2:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:E1:44:A4:DC:FD:F9:C0:FD:E9:6E:7B:23:05:BD:21:78:B6:2E
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/ZFjhRKTc_fnA_elueyMFvSF4ti4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.240.0/21
81.18.176.0/20
93.191.40.0/21
178.18.48.0/20
185.29.64.0/23
185.153.244.0/22
188.93.40.0/21
195.13.32.0-195.13.34.255
IPv6:
2a01:378::/31
Signature Algorithm: sha256WithRSAEncryption
4a:d6:7f:c3:96:7a:46:f0:67:2c:7a:fa:1c:2e:43:2a:69:81:
09:84:91:7e:64:86:95:84:af:ef:33:33:db:39:f7:9f:ea:86:
df:f9:c5:ba:63:d2:1d:9c:82:52:8a:b5:7e:fd:48:af:2c:0f:
9d:05:e3:83:94:51:6f:bc:fb:de:cc:93:7f:af:11:53:01:cd:
11:79:43:8d:7b:a7:f1:6f:22:c3:28:54:ba:3f:c6:19:2c:e2:
81:25:82:6a:c9:92:25:21:b7:02:b4:3e:1b:57:ff:88:6c:a0:
9f:ea:9e:3a:16:55:c8:6e:01:c2:8d:ca:6a:72:cf:d0:b2:a4:
83:42:7d:64:c8:e9:2b:ad:91:66:d3:e2:17:b5:a2:a6:27:09:
b1:37:a6:b9:fa:17:4b:4c:b6:cc:61:19:26:34:7d:42:4c:f2:
87:91:9e:b2:7e:d0:e8:7a:07:52:a0:35:5f:62:e7:f3:ef:a4:
25:b5:84:da:f6:7d:6d:b2:0c:a1:20:29:43:b0:64:e5:c2:af:
84:77:8c:d8:11:b1:6d:0c:58:4a:c2:f5:94:71:73:53:1a:8b:
1a:e4:6e:53:2d:84:b8:01:c2:5a:52:23:fd:15:d5:7d:5f:f8:
51:cf:03:9b:0a:7d:1e:f3:e6:91:3b:80:6c:b0:bb:06:b4:46:
72:2c:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:05:51 2026 by rpki-client