Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zngLcIvgC9YcAiHWh1ke0MM5mbc.roa
File: zngLcIvgC9YcAiHWh1ke0MM5mbc.roa (raw, json)
Hash identifier: 7E0EDEX7fzdeB/iudhekYerAfUhvgxJP3o/StF1jxt0=
Subject key identifier: CE:78:0B:70:8B:E0:0B:D6:1C:02:21:D6:87:59:1E:D0:C3:39:99:B7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019D7B28BF5B2EBD22203128E9EE8328CC81
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zngLcIvgC9YcAiHWh1ke0MM5mbc.roa
Signing time: Sat 11 Apr 2026 06:09:21 +0000
ROA not before: Sat 11 Apr 2026 06:09:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.114.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.203.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:28:bf:5b:2e:bd:22:20:31:28:e9:ee:83:28:cc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 11 06:09:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce780b708be00bd61c0221d687591ed0c33999b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:97:86:92:9c:9a:0d:59:13:dd:db:44:3c:
04:0c:82:0a:40:14:81:56:ea:84:e2:ce:a1:a5:cc:
14:9a:28:76:36:45:6d:43:a3:a0:90:88:b6:4e:a6:
2c:bb:8c:ad:3c:9c:17:5b:88:2f:5c:11:10:50:d0:
92:90:6a:3e:6d:b7:15:6b:51:84:8c:90:ed:13:7c:
26:ba:4b:e1:f8:38:85:c2:8b:b1:36:ad:38:eb:aa:
09:fb:ff:a3:cd:02:2b:81:f3:52:8d:db:e8:3d:ab:
db:b2:1c:6a:7c:32:03:58:66:c0:6a:ff:52:73:73:
ca:90:33:13:65:63:22:9d:62:11:1b:d6:53:fd:fa:
fd:fe:95:84:92:72:0b:87:eb:d8:c7:cc:7b:df:f4:
c3:c2:15:3d:93:b6:64:56:08:6b:3c:9b:76:80:01:
0f:c5:3e:3e:75:d4:ca:07:57:8f:a0:89:6e:19:fb:
0f:c2:51:b5:de:7d:71:23:5e:2a:1a:61:1d:79:45:
98:4b:66:68:ea:a9:28:ed:d7:0c:d9:05:23:a7:a5:
ce:10:99:61:e8:12:e2:7e:ba:1a:8c:f3:0f:96:15:
b7:16:8e:98:f9:da:d8:d9:e2:25:8c:7e:0a:db:fb:
5f:0a:ae:de:0b:c6:4f:5b:af:23:c0:12:aa:34:a5:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:0B:70:8B:E0:0B:D6:1C:02:21:D6:87:59:1E:D0:C3:39:99:B7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zngLcIvgC9YcAiHWh1ke0MM5mbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
88.151.63.0/24
88.209.203.0/24
88.209.229.0-88.209.230.255
88.209.232.0/22
88.209.255.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
59:02:73:58:15:fb:6c:a7:fd:63:b8:a9:15:73:a4:41:4c:77:
86:80:28:2c:88:27:af:f6:62:ce:eb:da:31:73:76:46:0d:75:
b2:8f:58:4a:2e:bc:5d:8a:64:1c:8b:59:6e:02:79:f9:9d:43:
e6:e0:f9:1c:1b:6b:b3:9d:f0:8d:fe:e2:6f:9d:e4:3f:13:68:
c8:31:a1:32:3d:cd:a4:42:42:7e:2d:c4:14:55:cb:f2:d6:74:
c9:28:e2:96:67:57:60:03:63:3f:f7:f7:a6:92:96:2e:a8:09:
53:95:9a:8d:d3:44:d9:d2:27:89:33:c5:4e:18:ab:d1:04:c9:
b1:f5:90:d0:3b:4f:b2:3a:85:61:aa:18:e2:6c:fe:d0:0e:59:
eb:b4:8c:f1:ea:e1:4b:e0:a6:39:86:70:03:f9:86:3a:35:1d:
20:39:5d:04:f5:45:fc:51:15:19:8f:f6:38:61:31:be:19:55:
a0:f0:c5:f7:b4:e7:f1:86:18:83:77:4f:5c:6f:42:e0:19:ce:
f9:8a:2f:0e:3d:ee:8c:94:5d:ab:ed:df:ea:2b:09:60:50:6d:
93:f2:11:a3:31:8a:be:48:db:1c:79:30:eb:19:0e:36:23:9b:
ef:67:a5:c4:c6:88:9d:e6:2d:27:1d:2e:0b:96:8d:96:b0:e0:
ec:15:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:23 2026 by rpki-client