Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ZQhaiJ1oc9r5-C3flapO26NGQ7I.roa
File: ZQhaiJ1oc9r5-C3flapO26NGQ7I.roa (raw, json)
Hash identifier: plgNeQhV8RVh6yAaBxxXzVfBQT4+N5LviNtdc5/+xvc=
Subject key identifier: 65:08:5A:88:9D:68:73:DA:F9:F8:2D:DF:95:AA:4E:DB:A3:46:43:B2
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019D40267E1BC06669A16FD8A98D1951DC83
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ZQhaiJ1oc9r5-C3flapO26NGQ7I.roa
Signing time: Mon 30 Mar 2026 19:09:17 +0000
ROA not before: Mon 30 Mar 2026 19:09:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6898
IP address blocks: 46.21.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:26:7e:1b:c0:66:69:a1:6f:d8:a9:8d:19:51:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Mar 30 19:09:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65085a889d6873daf9f82ddf95aa4edba34643b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:95:bd:72:2d:77:0d:e6:37:cf:1a:8d:cd:
5f:47:68:65:b3:b6:b3:67:25:c3:d4:0a:a2:96:9c:
ce:54:28:2d:76:5d:d7:63:a5:e1:42:2e:c4:76:c2:
6d:6d:9a:b5:2b:0c:ad:2f:0e:42:b9:bc:03:7a:b7:
d7:c0:25:f5:84:9c:0b:86:a1:ea:e8:fe:5f:5d:22:
d3:6a:15:d7:46:ff:95:9b:5e:7f:eb:fb:e5:82:3d:
fb:bb:2d:18:2c:08:57:37:98:43:c1:28:3e:ad:6b:
88:c6:07:d2:fd:b6:e6:60:08:7e:97:6c:35:8d:1a:
c8:b1:12:c9:c9:f5:74:cd:59:05:69:4a:d7:53:b9:
8b:23:a8:21:d2:fd:d8:12:e2:0d:5d:d1:f8:7f:27:
6c:29:6e:5b:1b:6a:1a:13:3f:65:7c:2a:76:05:b7:
ac:01:21:5f:07:86:6b:4b:14:1a:14:64:79:5e:b7:
4c:76:e0:6b:50:10:63:d7:13:13:2d:83:52:3a:1f:
94:04:07:b8:ef:29:d1:21:0b:01:92:94:c4:88:6d:
1a:9c:1b:c4:9b:b1:8a:e5:cc:df:6c:49:31:a9:9c:
9c:d7:18:43:df:14:a7:4e:c3:41:ec:91:15:f2:44:
4f:e5:7f:26:64:fc:ed:99:fd:99:46:79:dd:6c:0a:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:5A:88:9D:68:73:DA:F9:F8:2D:DF:95:AA:4E:DB:A3:46:43:B2
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ZQhaiJ1oc9r5-C3flapO26NGQ7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.20.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c8:3c:09:22:22:4b:bc:02:dc:6c:38:e7:7b:db:3b:cf:5e:
22:03:04:22:d4:ec:63:1f:9e:01:eb:1d:46:37:f4:ba:bb:f0:
50:ba:f7:02:09:a1:4a:94:90:ca:df:da:91:1f:73:4e:72:1b:
6e:09:bc:a8:9e:06:f5:fc:4c:ce:48:7e:9f:ac:45:1e:e7:26:
13:c5:91:c9:40:a5:1e:ce:70:86:3c:48:ff:29:d6:9f:d7:22:
01:0e:2c:1d:e5:bc:ac:68:34:25:2b:6b:09:4e:6b:0e:76:84:
5a:a8:a6:bc:b1:29:f1:35:f0:cf:87:c7:9e:f0:f5:b0:07:f2:
e2:aa:67:70:01:a3:fe:01:60:76:ab:7c:6f:d5:85:69:8b:80:
51:f8:55:78:69:4e:a8:73:94:26:db:1b:f1:8f:a2:bd:b9:38:
f4:26:b5:38:4e:7c:ab:98:09:59:dc:35:00:8b:1d:5d:fc:0d:
3a:41:94:17:6f:5c:d8:0c:62:e0:86:f6:78:ce:ac:84:b7:33:
3a:d8:44:0c:6a:9e:bf:d2:1a:2a:d8:6a:24:80:27:31:51:6d:
6d:de:f4:8a:84:58:e9:27:17:9e:2b:33:00:c2:9c:f6:2e:c6:
e8:c1:34:c2:b7:16:9e:12:97:15:fe:ff:66:1e:92:8f:60:58:
b4:ff:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:00 2026 by rpki-client