Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa
File: Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa (raw, json)
Hash identifier: OByLdhjOZ0YIarl8arWqnOnJBvbgrJT1GS2f+GSHfp4=
Subject key identifier: 67:92:82:49:95:57:18:2A:E9:F5:D3:5D:C7:AE:DD:B2:B2:2A:31:0B
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368CA01C807F345C193C96C979B29E3
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50607
IP address blocks: 91.198.97.0/24 maxlen: 24
109.207.105.0/24 maxlen: 24
176.126.56.0/22 maxlen: 24
176.126.56.0/24 maxlen: 24
176.126.57.0/24 maxlen: 24
176.126.59.0/24 maxlen: 24
2001:67c:778::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:01:c8:07:f3:45:c1:93:c9:6c:97:9b:29:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=679282499557182ae9f5d35dc7aeddb2b22a310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:e3:a5:b8:35:0b:59:99:7b:f8:d4:68:14:
9f:21:fa:c7:a2:bc:e2:ba:fa:8b:fc:7b:39:32:31:
5c:66:99:18:4c:9d:97:e6:54:a4:b7:ce:be:42:2c:
d5:07:bd:49:2c:3f:86:4a:a9:e4:84:80:6d:47:33:
e1:f5:00:ff:fa:65:05:61:59:8a:19:30:97:41:cf:
4e:95:20:9c:b1:83:a8:34:b9:65:0e:d1:c8:9a:80:
4e:1a:70:8f:77:36:08:23:f8:cc:6a:6d:91:73:2b:
7f:c6:73:f6:cd:52:7d:11:51:ed:92:71:f2:d0:5f:
b5:d5:a4:d4:fc:cf:a2:a4:75:28:c3:0d:86:a1:e1:
91:f8:42:4b:29:c2:a3:8c:1c:2f:4d:e6:fc:a0:1d:
0d:9a:01:03:3c:dc:c1:37:8f:c8:9c:dc:42:fa:c4:
b2:71:91:5a:ad:a0:d6:5e:c5:86:c2:da:fd:d4:81:
32:e6:be:9e:80:65:e6:ea:0c:08:c6:d9:a1:1e:8b:
8f:35:34:a2:85:33:6b:32:08:b7:2e:cb:02:6c:02:
87:ee:3d:df:12:15:af:f7:d9:43:85:cd:f2:d1:bc:
4d:7c:40:47:f2:84:32:bb:27:60:2a:af:4e:fe:7a:
e5:11:ee:00:63:a9:e2:ed:50:a5:5b:80:62:5c:a2:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:82:49:95:57:18:2A:E9:F5:D3:5D:C7:AE:DD:B2:B2:2A:31:0B
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.97.0/24
109.207.105.0/24
176.126.56.0/22
IPv6:
2001:67c:778::/48
Signature Algorithm: sha256WithRSAEncryption
12:96:76:b1:8e:2a:e5:25:c9:a4:07:5b:f1:1a:93:b7:e0:7e:
7c:be:55:af:82:ba:90:67:91:b7:4a:19:a7:2d:85:3d:a8:ae:
a5:2d:e1:f1:41:c3:04:b7:71:ba:d1:f7:84:70:a4:f7:f2:67:
df:57:05:ed:82:7f:cd:56:c2:68:10:8f:b9:5f:87:1b:49:34:
d9:4a:6a:ba:62:44:b6:20:8f:bc:15:32:50:00:7f:69:c8:a9:
70:b9:d8:36:20:11:1f:5e:75:01:38:18:7a:08:4d:4c:e8:96:
2c:4d:a3:52:68:1f:99:b9:fc:db:54:78:e7:13:5b:3e:77:ba:
31:5f:43:25:d8:d2:3b:29:4e:53:d7:22:69:39:30:a6:e5:9f:
02:63:01:46:41:33:d7:47:0f:4e:50:bf:28:b7:47:ec:9b:c0:
d7:ea:e1:ff:b0:e4:60:19:9b:2c:3b:2d:79:03:a7:c8:e5:51:
de:b3:e4:72:da:8b:11:6c:d2:65:0f:96:ce:30:ff:4c:0e:9a:
2a:46:26:63:a3:17:97:44:f5:d2:51:e1:0e:f2:d6:5b:88:0e:
19:d5:d6:d2:0c:00:17:0f:8d:61:97:43:aa:d9:21:05:e6:ce:
fa:51:b7:b5:cc:bf:38:41:6e:8f:7c:38:1f:3d:e4:f8:15:76:
e5:65:e7:50
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ8jaMoByAfzRcGTyWyXmynjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm
NmExOTAwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzkyODI0OTk1NTcxODJhZTlmNWQzNWRjN2FlZGRiMmIyMmEzMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDvjpbg1C1mZe/jUaBSfIfrHorzi
uvqL/Hs5MjFcZpkYTJ2X5lSkt86+QizVB71JLD+GSqnkhIBtRzPh9QD/+mUFYVmK
GTCXQc9OlSCcsYOoNLllDtHImoBOGnCPdzYII/jMam2Rcyt/xnP2zVJ9EVHtknHy
0F+11aTU/M+ipHUoww2GoeGR+EJLKcKjjBwvTeb8oB0NmgEDPNzBN4/InNxC+sSy
cZFaraDWXsWGwtr91IEy5r6egGXm6gwIxtmhHouPNTSihTNrMgi3LssCbAKH7j3f
EhWv99lDhc3y0bxNfEBH8oQyuydgKq9O/nrlEe4AY6ni7VClW4BiXKLW3wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFGeSgkmVVxgq6fXTXceu3bKyKjELMB8GA1UdIwQY
MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvWjVLQ1NaVlhHQ3JwOWROZHg2N2RzcklxTVFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAW8ZhAwQA
bc9pAwQCsH44MA8EAgACMAkDBwAgAQZ8B3gwDQYJKoZIhvcNAQELBQADggEBABKW
drGOKuUlyaQHW/Eak7fgfny+Va+CupBnkbdKGacthT2orqUt4fFBwwS3cbrR94Rw
pPfyZ99XBe2Cf81WwmgQj7lfhxtJNNlKarpiRLYgj7wVMlAAf2nIqXC52DYgER9e
dQE4GHoITUzolixNo1JoH5m5/NtUeOcTWz53ujFfQyXY0jspTlPXImk5MKblnwJj
AUZBM9dHD05Qvyi3R+ybwNfq4f+w5GAZmyw7LXkDp8jlUd6z5HLaixFs0mUPls4w
/0wOmipGJmOjF5dE9dJR4Q7y1luIDhnV1tIMABcPjWGXQ6rZIQXmzvpRt7XMvzhB
bo98OB895PgVduVl51A=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:14 2026 by rpki-client