Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ziz7Es508QEQOHQ-nAGg4w4ziss.roa
File: ziz7Es508QEQOHQ-nAGg4w4ziss.roa (raw, json)
Hash identifier: +8A9qkZlFmz5Lh9x6aOCSyGybzNhzTGZntiRDbCsRh0=
Subject key identifier: CE:2C:FB:12:CE:74:F1:01:10:38:74:3E:9C:01:A0:E3:0E:33:8A:CB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C60708A25DF3048A2C7D9223C66879568
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ziz7Es508QEQOHQ-nAGg4w4ziss.roa
Signing time: Sun 15 Feb 2026 08:35:13 +0000
ROA not before: Sun 15 Feb 2026 08:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 84.245.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:60:70:8a:25:df:30:48:a2:c7:d9:22:3c:66:87:95:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 15 08:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce2cfb12ce74f1011038743e9c01a0e30e338acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:08:cb:e3:32:a3:c7:44:39:7b:fb:ce:69:
66:34:44:01:e9:a7:73:45:3f:f4:5a:e2:8f:38:7b:
7d:f2:8a:6e:32:cb:01:f7:9d:6a:6a:d6:ae:9a:ad:
4d:d9:c8:8a:d7:17:8e:e1:d2:84:1b:62:c7:d3:a5:
ab:dd:3b:1a:9b:03:03:76:d5:7d:71:c2:4b:48:35:
22:d1:ff:58:48:16:a7:69:5c:26:0a:de:60:cf:17:
86:f5:89:0a:e8:8f:bf:e6:82:f7:1a:f2:b3:42:f8:
4e:76:4f:14:16:49:1b:8e:f4:99:cc:f5:f8:ad:f2:
d7:e0:f3:82:d9:4f:39:60:9b:5e:44:80:65:ae:6d:
dd:85:13:12:7d:52:d4:b1:37:b9:25:7f:81:80:5d:
da:c1:85:4c:4e:44:f6:f5:eb:12:3c:54:70:50:4b:
8b:5b:4a:21:40:d9:1b:bb:a4:a6:eb:49:81:f6:bb:
19:2b:b5:eb:ab:ea:90:35:13:9f:4e:d7:3c:86:12:
69:21:ec:38:fe:a6:b8:5c:23:62:4a:f2:69:26:95:
48:48:f6:c6:d2:ef:b4:51:9d:e4:9f:6b:c3:30:c5:
f4:9e:40:59:01:d4:51:01:1d:37:f9:87:24:01:ed:
b8:97:67:ba:f2:6f:9b:b0:58:4d:7a:01:83:6d:d5:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:FB:12:CE:74:F1:01:10:38:74:3E:9C:01:A0:E3:0E:33:8A:CB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ziz7Es508QEQOHQ-nAGg4w4ziss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.28.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ca:a0:ab:4c:a0:51:07:64:88:8c:fa:d3:28:f2:de:99:dd:
7d:3d:81:c6:69:9d:a0:45:cc:0f:63:b1:1e:ba:aa:ea:da:6e:
1e:fa:f6:ce:49:c9:a5:4d:c8:0c:24:1e:16:a1:24:80:bb:2d:
d7:2b:d5:8e:23:24:53:ab:7d:3b:b8:7a:5e:dd:e5:5d:39:a2:
7b:67:2c:79:e5:61:c8:53:a9:49:c1:ea:71:aa:45:46:75:2b:
9d:79:da:a4:36:a8:1f:47:75:8b:47:19:80:0b:30:54:f6:e8:
0f:fa:e2:7a:8e:0d:90:5f:ee:43:df:58:c3:4b:6a:d6:c6:e8:
18:a4:34:e0:f1:45:4a:99:cf:c3:2e:0d:48:7b:c8:cd:78:f4:
d2:1b:d4:a2:15:e7:50:03:41:f8:e5:3e:ae:48:d1:21:fb:72:
22:75:4e:2a:03:f5:2d:18:4a:a6:b8:e1:e3:f3:f7:5a:88:a9:
f8:be:80:84:8a:3a:fe:9c:2b:5b:d8:9a:6e:a2:7f:b0:6a:af:
e0:ec:b9:ef:fa:21:9e:f9:1d:da:93:78:7d:62:dd:ed:6f:8c:
5f:d8:ad:6d:7e:61:f8:ce:c4:5e:a5:14:44:62:21:b1:f8:10:
20:ad:cf:80:f5:b8:3b:1b:aa:2b:43:87:8d:17:d9:8f:a9:41:
86:eb:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:27:47 2026 by rpki-client