Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/znSv9nqP8eMAaw0trtXq-8l7uP0.roa
File: znSv9nqP8eMAaw0trtXq-8l7uP0.roa (raw, json)
Hash identifier: IpWzwCN1acfxD019R3lb756yunapUuWhfzcdhZhAN1U=
Subject key identifier: CE:74:AF:F6:7A:8F:F1:E3:00:6B:0D:2D:AE:D5:EA:FB:C9:7B:B8:FD
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019D965E11966E47E4FFB2249761A66E67A3
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/znSv9nqP8eMAaw0trtXq-8l7uP0.roa
Signing time: Thu 16 Apr 2026 12:57:20 +0000
ROA not before: Thu 16 Apr 2026 12:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201746
IP address blocks: 45.94.100.0/24 maxlen: 24
45.94.101.0/24 maxlen: 24
45.94.102.0/24 maxlen: 24
193.178.45.0/24 maxlen: 24
193.178.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:5e:11:96:6e:47:e4:ff:b2:24:97:61:a6:6e:67:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Apr 16 12:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce74aff67a8ff1e3006b0d2daed5eafbc97bb8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:a5:60:d9:b4:83:83:bf:06:08:7e:df:21:
7e:f3:9c:1e:85:24:62:db:d5:7b:91:42:77:89:b5:
f8:aa:99:e2:ec:69:ca:16:1c:d4:29:cf:05:86:90:
45:e3:8b:7e:2b:0d:2a:8b:ae:b5:c1:c1:4a:f4:58:
cc:e8:ff:04:35:3c:67:c1:26:f2:38:f1:8e:44:24:
c6:bb:17:73:ce:07:6e:72:12:9c:91:50:9e:a9:17:
01:e2:7b:c9:64:08:52:98:85:ca:a6:14:aa:e5:e7:
21:98:bc:b0:bf:d0:00:4d:24:22:43:13:20:de:ef:
09:08:5a:dc:51:fd:a8:e9:c4:26:ca:29:20:9d:16:
d3:c3:11:55:6d:e5:a7:39:3e:55:a3:a5:18:9c:72:
6b:b5:f6:32:99:2f:cc:84:59:bd:ac:87:26:7b:af:
01:51:ec:08:99:6e:d6:b5:a6:45:2f:c3:50:34:06:
a5:d0:e9:75:c0:19:c3:e0:ef:ff:c0:04:7c:3f:67:
76:4f:7a:a3:f6:ef:d9:aa:3f:5d:7c:e9:74:0e:fc:
c2:c2:c8:40:b6:b2:eb:97:50:9c:ee:05:30:d7:55:
cf:a0:89:6c:42:8c:91:d2:d9:4b:6e:51:b4:a3:37:
e4:24:d5:3b:c9:62:cd:d2:56:e0:9e:77:0a:5c:48:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:AF:F6:7A:8F:F1:E3:00:6B:0D:2D:AE:D5:EA:FB:C9:7B:B8:FD
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/znSv9nqP8eMAaw0trtXq-8l7uP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0-45.94.102.255
193.178.45.0-193.178.46.255
Signature Algorithm: sha256WithRSAEncryption
b0:2b:f0:2f:96:77:15:40:8c:88:a2:9b:6f:9f:31:cf:94:ae:
32:d4:95:2c:12:24:a8:c1:a4:8d:78:d2:11:b0:15:42:5a:8f:
98:a7:ee:ad:64:18:20:bc:16:e0:bf:12:23:48:05:a4:45:93:
f5:92:be:6a:c4:18:09:96:5c:01:ae:aa:94:97:ef:ac:cd:89:
c2:e8:17:45:3d:d0:63:93:6c:ee:68:c9:e4:e1:e8:8b:06:35:
8e:e1:fb:ae:40:7c:46:a4:4f:62:f8:02:f6:57:52:88:92:d8:
5c:0c:2d:f7:a9:59:44:60:91:f3:e7:b4:e9:1a:6b:4f:63:31:
7d:f1:15:ea:5f:d7:3a:85:ac:3e:73:fe:70:af:f0:01:89:21:
5b:d9:fe:e5:f7:b3:1e:72:9b:09:71:22:b0:d2:88:e8:ed:d5:
b6:a0:87:b0:d9:56:6d:0a:59:ef:c0:64:e6:3a:64:58:7e:92:
47:10:83:09:4a:cd:ca:11:c1:da:6d:4d:4e:6d:2a:30:e2:2a:
0d:c9:bd:69:3f:b2:64:0d:42:b8:db:fb:65:f6:24:31:03:ac:
51:22:d5:82:32:27:f2:1a:9d:03:dd:be:57:63:9f:aa:9f:85:
44:da:f4:ce:48:44:2c:1f:ad:19:a9:94:cc:ff:c8:40:40:8c:
8f:6f:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:54 2026 by rpki-client