Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zJMUobqMpSJ_q7v5bRPTDbz88nw.roa
File: zJMUobqMpSJ_q7v5bRPTDbz88nw.roa (raw, json)
Hash identifier: RvaqyS8Pob0bSJCKUn0HQmzPh78EKmSQJvZ48926/A8=
Subject key identifier: CC:93:14:A1:BA:8C:A5:22:7F:AB:BB:F9:6D:13:D3:0D:BC:FC:F2:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EA7031E8B55E0277C231791070A99DEC9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zJMUobqMpSJ_q7v5bRPTDbz88nw.roa
Signing time: Mon 08 Jun 2026 11:34:19 +0000
ROA not before: Mon 08 Jun 2026 11:34:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 84.54.51.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 11:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:03:1e:8b:55:e0:27:7c:23:17:91:07:0a:99:de:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 8 11:34:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc9314a1ba8ca5227fabbbf96d13d30dbcfcf27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:67:63:c1:d7:b2:da:ee:1d:28:85:59:63:
ed:68:ea:37:1a:af:fc:e4:a0:bc:a8:3f:b1:bb:f3:
16:e5:f3:f2:13:6d:64:63:01:36:67:d5:f1:c5:46:
a0:14:84:17:a1:d3:70:33:c7:74:5c:75:ba:93:65:
62:eb:b2:14:db:1d:71:a5:3f:fc:ca:76:88:8e:13:
69:d4:af:5b:f3:80:21:47:e4:a2:05:bc:85:a4:63:
30:a9:07:b4:4a:bd:ce:16:a1:6c:93:f5:56:d0:4f:
cc:cd:20:21:24:6b:38:fe:0d:79:43:06:79:0e:b6:
c0:06:94:8c:dc:7a:8b:3e:4c:2e:dd:7d:ba:3f:07:
fd:c7:e8:a3:cc:5b:4d:2e:1d:83:e0:bb:d7:00:ba:
ed:0e:ef:c3:61:83:c2:7b:34:49:df:e5:c3:8f:85:
12:4a:35:12:75:b6:58:fb:bb:b6:0b:7e:40:f6:b3:
fc:0e:bf:06:2c:e4:0b:08:e5:10:01:4b:e9:03:ca:
c5:dd:b9:72:40:95:be:1d:d6:e9:26:52:93:c1:b6:
32:cc:9d:33:09:fd:f6:f7:f0:e6:a4:c7:50:0a:70:
2d:f1:35:67:18:c8:02:08:64:6e:a4:ab:16:27:7d:
7f:4f:02:bd:c2:78:82:e1:e9:d5:d3:99:b4:54:70:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:93:14:A1:BA:8C:A5:22:7F:AB:BB:F9:6D:13:D3:0D:BC:FC:F2:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zJMUobqMpSJ_q7v5bRPTDbz88nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
92.119.199.0/24
94.103.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:01:1e:7f:bd:f4:fe:d9:38:b2:8e:c2:9c:e5:74:2f:e5:89:
dc:fe:86:4b:2e:72:59:2f:70:1e:5b:97:a9:7c:11:9f:65:c7:
f4:94:66:49:a6:1f:6e:e6:b5:1f:19:21:48:8e:ab:2a:da:a6:
06:56:f6:a1:13:e2:ee:0d:dd:87:c2:9b:12:f2:cc:b4:ca:8a:
a7:da:7f:45:3a:92:ec:53:53:52:a7:b5:fe:f1:2b:d9:e8:e7:
fd:9b:5a:d7:cc:cb:fa:fa:9b:1e:a4:9c:54:71:f6:23:d8:d2:
16:7a:65:5a:84:f0:af:09:fd:a2:32:a1:e6:55:26:7f:79:71:
a6:cc:44:92:c5:0c:ec:93:aa:d0:8f:e5:f7:c9:c1:d4:2e:49:
ee:a8:00:94:1c:a5:f5:e5:2a:02:3d:9a:04:32:f8:a3:01:2e:
80:ab:d8:66:fa:d5:83:cc:9e:29:35:a2:a7:90:dc:da:db:c9:
10:05:8b:80:e2:a7:0c:86:2e:cd:40:54:98:24:5e:b3:66:55:
8b:48:1a:57:bf:8a:22:dd:f4:7f:8b:f8:c0:28:7c:d1:c3:06:
9f:c2:52:91:1b:32:3e:85:70:29:17:77:c9:c9:81:e1:23:ad:
03:52:62:58:45:cc:d3:70:3b:a8:c6:37:fb:51:45:20:e4:09:
3f:a2:7b:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6nAx6LVeAnfCMXkQcKmd7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNjA4MTEzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzkzMTRhMWJhOGNhNTIyN2ZhYmJiZjk2ZDEzZDMwZGJjZmNmMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAlnY8HXstruHSiFWWPtaOo3Gq/8
5KC8qD+xu/MW5fPyE21kYwE2Z9XxxUagFIQXodNwM8d0XHW6k2Vi67IU2x1xpT/8
ynaIjhNp1K9b84AhR+SiBbyFpGMwqQe0Sr3OFqFsk/VW0E/MzSAhJGs4/g15QwZ5
DrbABpSM3HqLPkwu3X26Pwf9x+ijzFtNLh2D4LvXALrtDu/DYYPCezRJ3+XDj4US
SjUSdbZY+7u2C35A9rP8Dr8GLOQLCOUQAUvpA8rF3blyQJW+HdbpJlKTwbYyzJ0z
Cf329/DmpMdQCnAt8TVnGMgCCGRupKsWJ31/TwK9wniC4enV05m0VHBrAQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMyTFKG6jKUif6u7+W0T0w28/PJ8MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvekpNVW9icU1wU0pfcTd2NWJSUFREYno4OG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVDYzAwQA
XHfHAwQAXmd/MA0GCSqGSIb3DQEBCwUAA4IBAQCuAR5/vfT+2TiyjsKc5XQv5Ync
/oZLLnJZL3AeW5epfBGfZcf0lGZJph9u5rUfGSFIjqsq2qYGVvahE+LuDd2HwpsS
8sy0yoqn2n9FOpLsU1NSp7X+8SvZ6Of9m1rXzMv6+psepJxUcfYj2NIWemVahPCv
Cf2iMqHmVSZ/eXGmzESSxQzsk6rQj+X3ycHULknuqACUHKX15SoCPZoEMvijAS6A
q9hm+tWDzJ4pNaKnkNza28kQBYuA4qcMhi7NQFSYJF6zZlWLSBpXv4oi3fR/i/jA
KHzRwwafwlKRGzI+hXApF3fJyYHhI60DUmJYRczTcDuoxjf7UUUg5Ak/onvn
-----END CERTIFICATE-----
Generated at Mon Jun 8 20:45:41 2026 by rpki-client