Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Zmztz67Fua5JR3MrCScpXkXdqiE.roa
File: Zmztz67Fua5JR3MrCScpXkXdqiE.roa (raw, json)
Hash identifier: 172gdQDQ+Sr2r1K4puZdPY1rLHUTG5+Y3cHTBCwN1vs=
Subject key identifier: 66:6C:ED:CF:AE:C5:B9:AE:49:47:73:2B:09:27:29:5E:45:DD:AA:21
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C62471B7E89E6362D1C3A70087DCE960E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Zmztz67Fua5JR3MrCScpXkXdqiE.roa
Signing time: Sun 15 Feb 2026 17:09:13 +0000
ROA not before: Sun 15 Feb 2026 17:09:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.62.0/23 maxlen: 24
144.31.84.0/23 maxlen: 24
144.31.116.0/23 maxlen: 24
144.31.118.0/23 maxlen: 24
144.31.122.0/23 maxlen: 24
144.31.134.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
144.31.232.0/24 maxlen: 24
144.31.233.0/24 maxlen: 24
150.241.78.0/23 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:62:47:1b:7e:89:e6:36:2d:1c:3a:70:08:7d:ce:96:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 15 17:09:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=666cedcfaec5b9ae4947732b0927295e45ddaa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:c2:3e:9c:66:ce:e9:03:69:dc:04:62:38:
6a:9f:ab:0b:23:d3:ee:c8:f2:92:f8:f6:5e:a6:8d:
ef:76:39:57:55:8e:62:83:bc:b6:2d:2d:a1:80:4b:
46:79:c7:9f:1b:3f:0b:70:6c:26:c1:82:3b:09:90:
a3:ab:cd:c2:19:a8:81:aa:28:6e:0a:b5:c6:73:11:
96:84:9b:d9:e9:9d:06:6f:dd:34:02:fc:12:fb:88:
fe:04:0a:32:1d:26:f1:d6:81:c6:19:62:02:ab:ff:
f1:2e:cf:d0:e8:8d:0a:01:6e:c2:18:21:c3:a8:ff:
bb:20:01:1e:82:df:99:73:60:57:80:71:4c:5b:38:
b7:16:97:07:9c:ca:82:fc:04:71:88:52:b3:04:98:
ed:23:59:67:b5:17:03:ec:84:43:ff:93:28:79:9f:
fc:2a:27:31:50:92:b6:69:e9:de:5f:7d:a3:d8:93:
ec:1c:04:07:41:3b:49:a2:ac:4d:d4:a5:41:66:aa:
c7:8c:de:7c:2a:8e:19:f1:86:41:a5:44:8e:00:09:
71:05:b6:3c:43:fc:a9:7e:ae:c0:e1:5d:64:68:d7:
01:a8:fa:28:45:17:3f:da:07:db:dd:3b:d2:23:cb:
57:85:b6:01:e1:5e:f7:ea:e1:e3:5d:ea:6d:f6:e0:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:ED:CF:AE:C5:B9:AE:49:47:73:2B:09:27:29:5E:45:DD:AA:21
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Zmztz67Fua5JR3MrCScpXkXdqiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.62.0/23
144.31.84.0/23
144.31.116.0/22
144.31.122.0/23
144.31.134.0/23
144.31.138.0/23
144.31.196.0/23
144.31.232.0/23
150.241.78.0/23
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:c7:4a:8d:0a:f4:a4:91:80:e6:eb:3b:f5:72:d0:e6:e0:d4:
e4:b9:ff:ea:07:94:ab:51:49:24:52:e8:70:81:48:31:96:41:
be:0d:48:0a:ad:6e:05:77:92:89:8e:78:ac:14:af:e4:8e:65:
30:fc:6d:1b:6e:02:29:bd:a3:eb:fb:7a:da:ce:58:2e:ba:58:
c9:fe:5e:3a:f2:50:50:70:50:4a:aa:37:75:71:25:3a:33:29:
16:54:27:47:b4:a8:93:73:b1:4d:aa:eb:35:64:3a:df:1f:b3:
01:a6:2d:89:2d:8a:58:57:7d:29:c0:2a:be:c3:ea:5c:41:b0:
f4:eb:8c:46:f1:63:f1:fe:4d:dc:a5:1f:db:68:b8:2a:7d:bf:
9d:58:5a:d0:00:a1:17:c5:67:96:a0:6f:7c:50:44:bc:d6:61:
3c:09:a6:fa:45:2e:08:6f:e0:f2:ff:1f:3f:18:07:8b:a3:c1:
91:51:61:63:de:37:d6:1d:67:9b:3f:3e:46:9a:29:c7:fd:bd:
fb:ec:37:46:fa:df:e7:4b:59:29:a3:28:d4:24:a2:70:53:58:
fc:53:5c:d5:61:1d:4a:f5:d9:bd:ab:63:e8:06:f5:04:15:16:
b6:34:d4:89:03:ad:a1:f1:e1:97:f8:3e:23:48:ab:a4:e5:11:
c2:b1:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:03 2026 by rpki-client