Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa
File: ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa (raw, json)
Hash identifier: ey3Sif7k3v1Kz3BRtrxCLM84dh6fPOogRHH2kMK+y6M=
Subject key identifier: 66:A5:AC:3C:44:6C:62:7A:EC:A8:24:9A:61:36:10:4B:FB:70:D6:E6
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019C9F1D5AB368781D85C0B246AD6D8CBDF6
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa
Signing time: Fri 27 Feb 2026 12:40:26 +0000
ROA not before: Fri 27 Feb 2026 12:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 145.36.0.0/20 maxlen: 20
145.36.16.0/20 maxlen: 20
145.36.32.0/20 maxlen: 20
145.36.48.0/24 maxlen: 24
145.36.49.0/24 maxlen: 24
145.36.50.0/24 maxlen: 24
145.36.51.0/24 maxlen: 24
145.36.52.0/24 maxlen: 24
145.36.53.0/24 maxlen: 24
145.36.54.0/24 maxlen: 24
145.36.55.0/24 maxlen: 24
145.36.56.0/24 maxlen: 24
145.36.57.0/24 maxlen: 24
145.36.58.0/24 maxlen: 24
145.36.59.0/24 maxlen: 24
145.36.60.0/24 maxlen: 24
145.36.61.0/24 maxlen: 24
145.36.62.0/24 maxlen: 24
145.36.63.0/24 maxlen: 24
145.36.64.0/19 maxlen: 19
145.36.96.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:1d:5a:b3:68:78:1d:85:c0:b2:46:ad:6d:8c:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Feb 27 12:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66a5ac3c446c627aeca8249a6136104bfb70d6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:68:d7:32:34:9a:e7:34:35:14:b7:69:eb:
42:c9:6a:0a:c8:36:03:52:3d:99:03:fb:02:69:40:
a5:a9:95:38:2b:fe:74:51:dc:7b:a7:d4:7a:a8:60:
96:98:c2:2b:87:e7:21:56:42:08:bb:76:d5:f9:2a:
44:00:ee:96:5e:af:80:08:ef:b7:44:29:80:e8:ee:
c7:48:b1:ce:bd:b8:18:c8:87:40:32:06:99:bb:b2:
8f:b4:cb:b1:e6:72:08:45:70:09:a1:7f:27:9f:1e:
7a:af:de:bb:62:79:d0:ab:a2:ec:a6:1b:21:92:5c:
ee:81:f8:8c:db:84:93:1a:9f:2f:21:e5:c4:7b:b8:
b0:8c:96:74:7e:3a:0b:27:fc:95:4a:60:dd:53:b9:
15:a4:aa:c7:8f:51:35:10:21:8b:b4:f9:e0:70:23:
e7:06:04:6b:5b:b1:df:1c:12:d0:7b:15:9e:8a:0e:
38:af:5e:53:36:50:00:20:ad:04:70:53:88:1c:70:
4f:1e:be:f3:3b:9d:8a:5c:20:da:6b:51:e7:d8:45:
69:b8:66:7b:70:1e:75:13:a1:31:f0:e1:a4:1c:25:
e8:88:17:45:ab:83:ce:07:ae:6d:d3:ec:bf:62:c5:
8e:59:ff:9e:ae:f0:e4:cd:42:ee:df:ed:18:53:1d:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:AC:3C:44:6C:62:7A:EC:A8:24:9A:61:36:10:4B:FB:70:D6:E6
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:5f:19:69:3c:a2:60:27:1b:44:88:11:0a:24:41:4c:29:d3:
f1:4d:49:0a:c2:29:44:38:5d:d7:a3:29:77:a4:1b:14:2e:43:
96:16:16:31:67:a4:25:73:ac:d2:a7:2d:cf:be:18:d2:5f:76:
a6:a6:ab:81:8d:c4:73:bc:f6:7c:38:45:6a:89:ff:00:8b:4e:
02:a8:1e:a7:58:e3:c5:62:6f:f9:6b:71:cf:4e:d5:82:35:0c:
b6:a8:bc:10:ce:60:28:65:e5:46:4a:c9:7f:cb:22:a1:9d:dd:
5d:a5:b2:ea:e4:15:1e:09:65:cb:d7:37:d7:15:9a:fb:53:8e:
0d:1e:4e:e8:ee:99:f1:62:b4:32:e9:ae:d2:d6:61:55:ab:91:
c1:59:d2:4b:70:a7:c2:a3:ec:fb:3e:e4:10:a2:43:d2:68:37:
70:bd:c0:eb:79:9e:cc:3f:8f:fa:8a:81:a6:8b:67:f8:37:16:
85:94:f0:e4:bd:ed:5a:56:7e:57:67:50:15:db:7c:84:e8:5b:
ad:20:81:1b:63:00:1f:35:c3:90:da:ca:f2:e6:79:33:42:ea:
b9:60:d0:cd:a6:44:ed:11:7d:b9:d3:f8:f6:88:70:4b:4a:e2:
12:a7:ed:f1:6c:24:56:28:0b:6d:e0:d7:15:0a:25:fc:92:cb:
cd:6c:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:17 2026 by rpki-client