Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZMw3cABI3jeCzMfqSI0aApS6QDU.roa
File: ZMw3cABI3jeCzMfqSI0aApS6QDU.roa (raw, json)
Hash identifier: 0yaPTYckWtuZprVw19TlXaMtQC9ymP6ykZcR1615rtk=
Subject key identifier: 64:CC:37:70:00:48:DE:37:82:CC:C7:EA:48:8D:1A:02:94:BA:40:35
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019C76A7C8558D30305B624980A36F2140BF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZMw3cABI3jeCzMfqSI0aApS6QDU.roa
Signing time: Thu 19 Feb 2026 16:07:13 +0000
ROA not before: Thu 19 Feb 2026 16:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 45.74.244.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:a7:c8:55:8d:30:30:5b:62:49:80:a3:6f:21:40:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 19 16:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64cc37700048de3782ccc7ea488d1a0294ba4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:5c:f3:fc:2b:19:7d:7a:71:7f:a7:bb:d3:
2f:c0:a3:43:8d:ca:fd:50:13:ad:b8:65:33:0d:56:
48:94:30:6d:46:ae:c6:6a:a9:65:d5:06:af:e0:b9:
78:4d:37:06:5a:e5:1d:88:f4:3b:7e:d0:95:b3:ea:
ad:8f:1f:0b:d9:a1:4e:81:f2:52:02:4b:5f:57:79:
3a:5f:ce:b8:31:b7:70:ac:09:45:31:89:26:0c:92:
ec:58:3b:63:d5:d4:b6:67:08:ca:f7:74:51:43:60:
2d:6d:65:68:fe:22:a3:c5:c6:6d:f7:82:3b:30:4a:
e9:ec:d3:08:90:51:a1:56:03:33:10:16:b0:d5:94:
9e:48:d8:c2:ef:72:4f:93:c8:3a:2d:6d:56:d5:e0:
c5:5f:bb:77:16:75:99:18:69:6e:77:90:c1:cb:3c:
7f:3d:1a:4c:0d:0e:da:c8:fa:c5:17:18:31:23:0c:
f8:08:fa:b8:f1:87:5c:f1:58:18:10:92:c3:1e:df:
a0:38:9b:b5:c5:1e:4c:9c:45:31:9a:86:21:77:f3:
aa:fa:00:17:96:ed:1a:a1:f2:b2:dd:fc:63:a5:a4:
74:2d:e9:ea:b4:99:a3:68:e9:f8:5e:56:d4:7f:fe:
66:22:ed:83:e2:d5:8d:be:1f:87:fa:ac:dc:c4:87:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:37:70:00:48:DE:37:82:CC:C7:EA:48:8D:1A:02:94:BA:40:35
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZMw3cABI3jeCzMfqSI0aApS6QDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.244.0/24
45.136.6.0/24
45.141.151.0/24
45.147.46.0/23
194.146.36.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b1:cb:9f:0a:8b:b8:8a:28:49:d2:c8:df:e5:61:0c:62:04:
7e:4d:46:1c:b0:87:11:26:8b:72:34:3b:8d:86:8c:ed:0b:f5:
07:e7:25:f5:a2:e1:d2:80:2e:94:ea:bc:de:7e:56:18:27:d1:
f4:20:28:d1:3f:b4:6f:88:a0:6a:31:aa:f6:a4:24:08:ca:88:
46:c2:d7:17:55:1a:44:ce:2e:13:5b:f7:18:5a:a5:03:73:56:
a0:05:56:36:c1:a6:47:72:be:0e:20:af:55:91:c0:d9:ef:81:
8d:99:a3:58:79:48:1a:1b:fb:fe:0a:9b:d7:13:3e:fa:d8:a7:
28:9a:29:5b:34:79:3e:f9:2a:c2:ab:39:95:31:ec:98:9a:b8:
bc:a5:38:cf:51:ef:a7:cf:75:9c:bd:56:74:d3:e2:7e:88:b3:
da:49:6d:03:94:98:70:4a:28:b3:e7:35:ef:e1:41:dd:3c:9d:
63:50:59:60:d0:ce:8b:15:67:df:58:96:88:31:99:6d:e6:a9:
20:fd:14:f2:9f:6c:33:93:af:89:a3:39:e7:d2:36:a7:2d:a2:
00:7c:af:d5:e9:e2:bc:1d:4f:6c:27:19:44:c8:24:66:0d:e0:
96:19:89:24:10:a2:4e:43:b4:1c:81:48:aa:1f:28:62:06:ef:
10:a1:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:09:52 2026 by rpki-client