Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa
File: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (raw, json)
Hash identifier: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=
Subject key identifier: 65:73:01:7C:4C:D1:42:06:7A:5D:0A:98:12:95:33:B4:FF:E8:1E:E9
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F23684B01CE1A0840B9359FA8AF5B2AED
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 86.110.36.0/24 maxlen: 24
86.110.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4b:01:ce:1a:08:40:b9:35:9f:a8:af:5b:2a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6573017c4cd142067a5d0a98129533b4ffe81ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:30:b3:12:2a:81:44:6f:f2:70:22:a7:55:9e:
7f:92:37:19:76:b3:94:1d:1e:db:70:88:67:bb:c7:
e8:9a:ed:4e:0f:a3:fe:01:bf:b1:2a:8d:e3:ab:7d:
85:a3:27:04:19:ef:a7:11:17:f2:c8:f2:92:f1:a4:
8d:60:7e:2c:ba:9b:19:f3:7a:a0:ac:2b:0a:e6:99:
24:bf:34:0c:99:47:fb:f7:f4:73:a0:25:b1:2d:44:
42:77:43:c2:21:26:ad:93:14:41:e3:e2:0a:2f:cc:
de:44:46:ac:db:a4:60:fc:9b:06:cd:fa:8e:0e:f4:
f1:23:22:ab:83:bb:ce:06:77:22:f7:67:63:10:b8:
12:cd:eb:e3:0c:99:36:2c:72:79:34:a4:b2:0e:92:
c9:2a:58:81:0a:f1:6c:30:ec:9a:74:90:c8:d3:86:
97:f6:e9:be:df:7f:c6:2d:1a:2c:fa:70:1a:7f:9f:
a5:c9:2e:ff:63:51:35:3b:da:53:72:dd:4a:34:98:
3d:ef:b7:f1:de:0b:a2:41:87:b4:62:b8:75:a8:85:
2e:dc:ba:fd:6b:06:2a:6f:f1:ce:5a:ae:30:c1:ef:
b1:0a:25:6d:e4:c5:ed:c2:3d:eb:a5:4c:72:70:3c:
46:1d:f6:06:0a:36:78:e9:e6:86:51:76:0e:48:91:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:73:01:7C:4C:D1:42:06:7A:5D:0A:98:12:95:33:B4:FF:E8:1E:E9
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.36.0/24
86.110.56.0/24
Signature Algorithm: sha256WithRSAEncryption
97:72:02:22:bf:fd:f7:94:19:5b:d1:87:4b:ac:9d:d8:fa:1d:
6e:a6:29:1c:1f:d0:e4:0e:ba:aa:70:7f:6c:d4:cf:c1:bd:03:
10:6c:14:91:7e:09:2a:d4:b3:ca:bc:48:7d:7a:fa:c6:d7:6b:
81:93:f7:0c:e7:b9:29:82:83:8d:88:d7:64:02:50:60:51:ea:
a7:d4:bc:9b:51:8d:34:58:24:1a:e5:9e:13:7a:38:ff:34:ae:
f9:9c:a1:5b:1c:73:55:e6:8b:33:b8:97:e2:10:35:1a:c4:8b:
ab:7b:94:15:dd:f0:5d:68:11:33:b3:f0:bb:f1:62:a2:c5:09:
a4:cb:07:09:3a:30:c5:11:83:ba:2f:8d:5f:d4:cc:36:80:8a:
15:81:88:b0:cc:86:0a:86:ef:ed:7b:3a:31:60:78:2c:aa:15:
d9:86:62:95:71:0b:c4:7e:c0:69:61:dc:93:ab:b7:4f:60:b1:
fe:62:61:7a:66:9f:50:2a:4b:32:79:f7:95:af:e1:d5:e7:ed:
28:6c:9f:42:20:60:0c:73:63:b0:17:76:b2:38:0e:a8:0b:f2:
88:1f:59:23:ca:bc:aa:6e:c1:f9:a1:b6:35:bb:cd:f1:4e:25:
c4:fd:d3:ed:21:1c:31:af:d0:5c:d2:3f:07:68:0d:92:ae:54:
ad:13:cc:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaEsBzhoIQLk1n6ivWyrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3
NTgyYjAwHhcNMjYwNzAyMTUxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTczMDE3YzRjZDE0MjA2N2E1ZDBhOTgxMjk1MzNiNGZmZTgxZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jCzEiqBRG/ycCKnVZ5/kjcZdrOU
HR7bcIhnu8fomu1OD6P+Ab+xKo3jq32FoycEGe+nERfyyPKS8aSNYH4supsZ83qg
rCsK5pkkvzQMmUf79/RzoCWxLURCd0PCISatkxRB4+IKL8zeREas26Rg/JsGzfqO
DvTxIyKrg7vOBnci92djELgSzevjDJk2LHJ5NKSyDpLJKliBCvFsMOyadJDI04aX
9um+33/GLRos+nAaf5+lyS7/Y1E1O9pTct1KNJg977fx3guiQYe0Yrh1qIUu3Lr9
awYqb/HOWq4wwe+xCiVt5MXtwj3rpUxycDxGHfYGCjZ46eaGUXYOSJEVUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGVzAXxM0UIGel0KmBKVM7T/6B7pMB8GA1UdIwQY
MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvWlhNQmZFelJRZ1o2WFFxWUVwVXp0UF9vSHVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4kAwQA
Vm44MA0GCSqGSIb3DQEBCwUAA4IBAQCXcgIiv/33lBlb0YdLrJ3Y+h1upikcH9Dk
DrqqcH9s1M/BvQMQbBSRfgkq1LPKvEh9evrG12uBk/cM57kpgoONiNdkAlBgUeqn
1LybUY00WCQa5Z4Tejj/NK75nKFbHHNV5oszuJfiEDUaxIure5QV3fBdaBEzs/C7
8WKixQmkywcJOjDFEYO6L41f1Mw2gIoVgYiwzIYKhu/tezoxYHgsqhXZhmKVcQvE
fsBpYdyTq7dPYLH+YmF6Zp9QKksyefeVr+HV5+0obJ9CIGAMc2OwF3ayOA6oC/KI
H1kjyryqbsH5obY1u83xTiXE/dPtIRwxr9Bc0j8HaA2SrlStE8y8
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:20:03 2026 by rpki-client