Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/ZMwrHLXEvW9IVEBYTpgEdbAzqRM.roa
File: ZMwrHLXEvW9IVEBYTpgEdbAzqRM.roa (raw, json)
Hash identifier: ssROtn3PhEX3Fvo7Ls9B232pPdRZHs98sbsDoVIIAZE=
Subject key identifier: 64:CC:2B:1C:B5:C4:BD:6F:48:54:40:58:4E:98:04:75:B0:33:A9:13
Certificate issuer: /CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Certificate serial: 019F2368656B4FCE5C0E866EAE9D17348889
Authority key identifier: 89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/ZMwrHLXEvW9IVEBYTpgEdbAzqRM.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5390
IP address blocks: 83.118.224.0/22 maxlen: 24
83.119.0.0/19 maxlen: 24
83.119.0.0/21 maxlen: 24
83.119.8.0/21 maxlen: 24
83.119.14.0/24 maxlen: 24
83.119.16.0/20 maxlen: 24
85.148.0.0/16 maxlen: 17
85.149.0.0/17 maxlen: 18
2a02:2500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:6b:4f:ce:5c:0e:86:6e:ae:9d:17:34:88:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64cc2b1cb5c4bd6f485440584e980475b033a913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:9e:00:e2:67:a8:9e:9c:13:3b:4a:76:ca:
60:02:72:d0:53:3e:20:b4:ec:d2:45:4a:62:48:db:
21:aa:ca:82:21:44:93:04:75:4e:64:6e:24:ea:a5:
fc:37:52:86:ea:07:f4:27:d1:bb:f5:eb:5b:82:47:
01:1e:58:2e:49:25:6b:b9:b6:1e:56:7a:31:dc:77:
b7:66:da:f2:f0:57:c7:a4:65:64:83:c1:07:03:1e:
42:7b:93:28:31:11:61:d5:5e:ed:f5:3a:4c:7c:db:
f4:d8:ab:25:a9:2c:c8:c8:53:8b:2a:34:9b:1a:c5:
1d:ce:12:06:72:fb:96:5e:44:ca:62:43:1d:ce:1d:
6b:72:d9:f6:84:8b:bb:6a:eb:d6:36:ca:95:5f:6c:
5f:90:f5:f3:f0:a9:49:28:59:8c:08:f1:7e:ee:ea:
6f:61:37:77:43:2a:a7:0d:6f:4b:0b:55:80:66:9b:
02:f4:66:3f:f1:76:45:14:69:a1:da:71:7b:71:ba:
3a:72:88:62:1b:68:4f:11:d7:46:46:b5:76:8a:42:
3a:ba:24:86:fd:99:b1:4f:53:5a:97:99:fa:6f:05:
35:43:a1:2d:5e:c9:4e:bb:10:d1:ea:59:a7:69:43:
8d:cc:73:68:c8:18:8b:ed:5b:eb:b4:5f:2f:33:0c:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:2B:1C:B5:C4:BD:6F:48:54:40:58:4E:98:04:75:B0:33:A9:13
X509v3 Authority Key Identifier:
keyid:89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/ZMwrHLXEvW9IVEBYTpgEdbAzqRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
83.119.0.0/19
85.148.0.0-85.149.127.255
IPv6:
2a02:2500::/32
Signature Algorithm: sha256WithRSAEncryption
96:32:7f:16:8b:7b:b1:f1:45:61:e3:05:7a:35:53:8c:0b:a8:
5e:51:59:04:ca:97:8e:04:8c:22:59:cd:89:2c:1b:cc:57:50:
f5:f1:56:b0:f8:83:d5:71:4a:84:c6:89:f4:19:fc:f1:00:b8:
00:a9:a5:b9:16:df:4c:17:6a:3a:78:06:06:f8:7c:69:6e:3f:
32:3f:a0:d2:5e:6e:03:93:37:e4:23:9f:ee:69:ab:af:36:8e:
a0:63:49:6e:d8:cf:11:cb:22:5c:0f:5a:6b:19:4e:51:39:f0:
cd:a9:25:ab:d6:e3:5a:75:d4:30:b1:df:91:27:f5:4a:31:21:
d0:f0:b0:dd:6f:e2:10:82:05:c1:45:d1:9b:b1:9c:75:ac:be:
1e:dc:eb:da:09:08:0c:f0:2a:82:92:7f:86:f4:7c:27:6a:be:
31:7b:2a:cb:48:fe:eb:e2:a8:e7:ac:2e:a7:4c:f7:68:b4:f7:
ee:0e:cf:df:9f:ef:2a:52:ae:f3:f7:b6:07:21:62:18:71:24:
d7:af:c3:82:b1:d3:a6:40:da:cb:e5:c8:e0:94:44:fa:ae:ba:
8f:5a:e5:51:f2:96:cb:24:1f:28:8c:fb:95:ca:18:f8:5f:05:
a3:75:d6:0f:93:5e:0f:81:85:db:45:36:7d:df:ea:a0:44:0f:
9a:eb:82:99
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZ8jaGVrT85cDoZurp0XNIiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTY1ZWFiNGE2MzJhYWRmODJmZDlhZmJjODY3ZDE2MWMx
YWM0Y2UwHhcNMjYwNzAyMTUxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGNjMmIxY2I1YzRiZDZmNDg1NDQwNTg0ZTk4MDQ3NWIwMzNhOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTieAOJnqJ6cEztKdspgAnLQUz4g
tOzSRUpiSNshqsqCIUSTBHVOZG4k6qX8N1KG6gf0J9G79etbgkcBHlguSSVrubYe
Vnox3He3Ztry8FfHpGVkg8EHAx5Ce5MoMRFh1V7t9TpMfNv02KslqSzIyFOLKjSb
GsUdzhIGcvuWXkTKYkMdzh1rctn2hIu7auvWNsqVX2xfkPXz8KlJKFmMCPF+7upv
YTd3QyqnDW9LC1WAZpsC9GY/8XZFFGmh2nF7cbo6cohiG2hPEddGRrV2ikI6uiSG
/ZmxT1Nal5n6bwU1Q6EtXslOuxDR6lmnaUONzHNoyBiL7VvrtF8vMwzPWQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFGTMKxy1xL1vSFRAWE6YBHWwM6kTMB8GA1UdIwQY
MBaAFIlWXqtKYyqt+C/Zr7yGfRYcGsTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZaZXEwcGpLcTM0TDltdnZJWjlGaHdheE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt
ODk3ZDAwOTc3ZmYyLzEvWk13ckhMWEV2VzlJVkVCWVRwZ0VkYkF6cVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy
LzEvaVZaZXEwcGpLcTM0TDltdnZJWjlGaHdheE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAfBAIAATAZAwQCU3bgAwQF
U3cAMAsDAwJVlAMEB1WVADANBAIAAjAHAwUAKgIlADANBgkqhkiG9w0BAQsFAAOC
AQEAljJ/Fot7sfFFYeMFejVTjAuoXlFZBMqXjgSMIlnNiSwbzFdQ9fFWsPiD1XFK
hMaJ9Bn88QC4AKmluRbfTBdqOngGBvh8aW4/Mj+g0l5uA5M35COf7mmrrzaOoGNJ
btjPEcsiXA9aaxlOUTnwzaklq9bjWnXUMLHfkSf1SjEh0PCw3W/iEIIFwUXRm7Gc
day+Htzr2gkIDPAqgpJ/hvR8J2q+MXsqy0j+6+Ko56wup0z3aLT37g7P35/vKlKu
8/e2ByFiGHEk16/DgrHTpkDay+XI4JRE+q66j1rlUfKWyyQfKIz7lcoY+F8Fo3XW
D5NeD4GF20U2fd/qoEQPmuuCmQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:28 2026 by rpki-client