Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/zylsHs-A8mo8m6OVEpYDC84xQz0.roa
File: zylsHs-A8mo8m6OVEpYDC84xQz0.roa (raw, json)
Hash identifier: lWQW2AgRh5Cqx7s+4tK3efq3goGJLW2l6ir7p4aaZvA=
Subject key identifier: CF:29:6C:1E:CF:80:F2:6A:3C:9B:A3:95:12:96:03:0B:CE:31:43:3D
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019C93CF5F19AA972D59AE5D280EEE62AE60
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/zylsHs-A8mo8m6OVEpYDC84xQz0.roa
Signing time: Wed 25 Feb 2026 07:59:26 +0000
ROA not before: Wed 25 Feb 2026 07:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44707
IP address blocks: 195.57.15.0/24 maxlen: 24
195.76.110.0/24 maxlen: 24
195.235.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:cf:5f:19:aa:97:2d:59:ae:5d:28:0e:ee:62:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Feb 25 07:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf296c1ecf80f26a3c9ba3951296030bce31433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:3f:37:20:04:e5:cb:cb:92:39:a9:55:65:
51:eb:fb:a8:49:b0:c8:cf:14:c1:c6:10:24:19:1c:
96:c7:f3:dd:8e:a8:75:63:95:3c:d4:77:7e:cb:cd:
3d:d3:ad:c5:1b:f9:c8:67:55:36:fd:1e:73:09:1d:
95:89:38:b2:e4:8c:ae:92:f5:c1:0e:ce:7c:78:90:
37:41:9d:d8:1a:0c:37:e5:33:19:d0:a8:7c:d1:64:
3f:69:ec:e9:5d:bb:27:62:d8:5a:7d:8a:98:db:e7:
41:b6:34:9f:44:6e:d9:ba:a4:d5:99:41:1c:e3:9d:
a5:f4:d7:37:46:1a:8e:ad:dd:2e:dd:a7:48:f5:33:
d9:50:f1:ec:60:00:9c:0b:bd:1f:fa:c4:a4:8a:8a:
5b:59:74:05:a2:eb:c7:ee:e5:e7:91:e9:83:ee:04:
b4:35:56:fb:3f:d6:06:84:80:a0:0d:90:dc:a9:3e:
8d:6b:13:60:91:f2:3c:96:eb:62:33:a9:c7:6d:e6:
75:b6:c3:3f:cb:32:c5:45:90:c6:c3:c1:60:c4:11:
46:1e:17:15:53:d1:09:ff:7b:69:a5:57:07:45:32:
0e:9a:63:93:2c:4e:ba:8b:17:a4:83:aa:42:13:d3:
24:45:c0:65:dc:f5:74:89:2e:c7:9d:60:37:2b:46:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:6C:1E:CF:80:F2:6A:3C:9B:A3:95:12:96:03:0B:CE:31:43:3D
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/zylsHs-A8mo8m6OVEpYDC84xQz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.57.15.0/24
195.76.110.0/24
195.235.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:07:ce:6d:a0:9a:57:16:06:6e:6a:c7:6c:2f:de:c1:6f:f3:
0c:d0:ee:47:67:67:74:92:9e:69:0d:37:cb:83:7d:85:7d:bc:
aa:28:02:7e:d3:db:1c:1a:99:4d:5f:c9:21:8e:2d:18:e0:33:
1a:4b:6a:4c:cd:93:dc:f2:25:2d:29:29:54:7e:e1:fb:b6:f8:
9f:eb:64:22:da:5e:69:47:69:bb:27:98:c2:17:f5:1c:0b:d8:
5e:29:66:59:72:7a:cd:d6:2b:33:8c:46:38:32:e8:fd:4d:5e:
c9:99:56:72:68:8e:12:73:ad:30:fe:2b:49:aa:76:e2:55:91:
c7:d0:61:91:ec:ba:77:ef:b9:b4:76:c3:73:52:6e:8b:6c:53:
cd:5f:21:b9:6f:59:8d:c1:93:7e:98:f0:aa:be:65:54:20:b4:
8b:67:ac:e7:74:77:b4:bb:64:4b:ae:33:a8:82:37:66:ed:98:
48:6b:57:27:b9:97:f2:72:68:8e:c6:fe:d3:b1:3c:3b:98:cb:
06:e1:28:1b:21:b2:a7:93:7a:a1:26:34:99:0f:99:48:4c:b6:
aa:92:14:b8:68:11:55:2e:41:dd:91:8e:bc:11:fd:77:cc:0a:
84:0a:0b:7f:a1:6e:a8:2a:63:fb:d1:16:b2:de:c2:e3:85:fd:
8e:a0:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:40 2026 by rpki-client