Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/zyXINCcnojqkQKE3guahN5uv38Y.roa
File: zyXINCcnojqkQKE3guahN5uv38Y.roa (raw, json)
Hash identifier: DPlxLsCN1p1iaWTJ2LBLl11mIB17PTIscCM/Yrq2G9s=
Subject key identifier: CF:25:C8:34:27:27:A2:3A:A4:40:A1:37:82:E6:A1:37:9B:AF:DF:C6
Certificate issuer: /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial: 019B7A5B72D55FD6A293E126DC0D7D19C48D
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/zyXINCcnojqkQKE3guahN5uv38Y.roa
Signing time: Thu 01 Jan 2026 16:19:32 +0000
ROA not before: Thu 01 Jan 2026 16:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43619
IP address blocks: 45.66.108.0/22 maxlen: 24
2a09:6840::/32 maxlen: 48
2a09:6841::/32 maxlen: 48
2a09:6842::/32 maxlen: 48
2a09:6843::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:72:d5:5f:d6:a2:93:e1:26:dc:0d:7d:19:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
Validity
Not Before: Jan 1 16:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf25c8342727a23aa440a13782e6a1379bafdfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:4d:5d:1e:aa:11:bf:f6:07:31:e2:ba:98:
55:d8:a7:bd:38:55:47:30:5e:49:f5:a3:38:a2:05:
e1:4e:91:93:c9:13:c4:c3:bc:fa:1f:77:5b:f0:50:
e2:aa:76:fe:bf:6e:82:60:a1:3d:96:00:9c:5f:c0:
ab:5c:2c:bb:0e:b6:df:eb:fb:0a:67:da:b2:19:70:
42:ee:31:e4:71:01:d9:10:e2:16:29:3e:ce:06:87:
dd:78:56:22:4d:1e:93:e3:1a:47:ac:cc:50:79:85:
7e:23:74:12:ac:04:2c:67:ca:0f:d8:91:68:6a:cf:
e9:8f:01:9a:96:7d:7b:55:7c:6b:e6:7a:ba:28:3c:
ed:79:ec:15:67:b8:ce:31:39:30:c7:1f:c4:97:87:
b1:0a:c3:e4:90:e6:7b:f7:d7:27:ea:45:3b:d9:7b:
29:77:16:13:f5:51:15:72:16:66:ca:6c:01:50:54:
e5:eb:b7:bc:a5:b3:0b:3d:5a:4c:02:84:4c:ca:57:
83:b7:c3:f1:c0:52:41:d1:a2:da:54:aa:84:71:f2:
0e:b1:aa:e1:00:09:97:41:0b:a2:89:a8:0e:62:91:
ff:33:43:ae:c6:58:f7:38:f1:58:36:d2:6d:96:a2:
5a:31:9c:b9:86:cf:f2:3c:40:38:23:03:44:a9:4c:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:25:C8:34:27:27:A2:3A:A4:40:A1:37:82:E6:A1:37:9B:AF:DF:C6
X509v3 Authority Key Identifier:
keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/zyXINCcnojqkQKE3guahN5uv38Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.108.0/22
IPv6:
2a09:6840::/30
Signature Algorithm: sha256WithRSAEncryption
35:a5:e7:be:f2:86:9d:25:94:b1:b3:10:d8:86:0e:df:eb:e7:
f8:c0:e7:54:43:d4:9e:f6:98:ba:59:41:c6:e5:d2:18:9a:14:
7b:dc:c7:f9:e2:ef:25:eb:e4:e8:e9:d3:ca:05:93:64:ab:a7:
ac:dc:44:79:63:9e:bd:f1:80:65:c8:a8:3d:83:4c:74:bf:84:
b4:d1:7b:ab:86:0b:92:34:e6:aa:c2:17:d2:15:f9:4d:91:0c:
94:cf:57:9b:ee:1e:51:8e:9a:b6:a2:2b:b3:16:ba:93:7d:3d:
d1:06:d7:1d:37:3a:d9:93:86:45:3f:d2:8b:5c:cb:f8:46:e9:
28:35:48:5c:91:09:9e:5c:78:38:b6:28:44:3c:66:de:8b:2e:
02:da:8a:3d:ee:9b:e6:f2:be:fd:f8:ec:26:33:d5:4f:86:da:
1d:a9:ca:ae:c7:f5:b9:3d:fc:5a:37:22:da:84:f8:3f:e4:bb:
4c:08:1c:6c:2c:fa:12:cb:00:40:fb:b1:6d:5d:6a:66:92:40:
3c:6b:43:f6:54:5a:36:4d:8b:c8:20:8a:82:2c:3b:a5:52:33:
c6:39:47:f0:fa:bf:ed:96:64:29:be:8b:bd:d8:2a:2d:25:af:
1e:e6:1d:ee:ec:96:cd:13:8a:e6:d4:e5:a7:b1:2f:c8:ef:fb:
e5:43:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:50:51 2026 by rpki-client