Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Zz8GJxbY2tQ10IvtycLrwCwRWKg.roa
File: Zz8GJxbY2tQ10IvtycLrwCwRWKg.roa (raw, json)
Hash identifier: 43K5hUNMqV1Aqotz+s7RgYxP/IccL5wMfkH9gV4GvB8=
Subject key identifier: 67:3F:06:27:16:D8:DA:D4:35:D0:8B:ED:C9:C2:EB:C0:2C:11:58:A8
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 019F8482379A523CFC90967F335A31C95652
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Zz8GJxbY2tQ10IvtycLrwCwRWKg.roa
Signing time: Tue 21 Jul 2026 11:49:14 +0000
ROA not before: Tue 21 Jul 2026 11:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206814
IP address blocks: 89.135.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:82:37:9a:52:3c:fc:90:96:7f:33:5a:31:c9:56:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Jul 21 11:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=673f062716d8dad435d08bedc9c2ebc02c1158a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:84:df:c2:c8:dd:49:28:e6:f7:90:29:d7:
f9:62:00:29:ad:b1:c2:e5:6b:43:f5:29:30:57:fa:
c7:88:85:f5:24:85:8f:ce:3c:5c:45:3f:35:f6:3d:
9a:b8:d3:b2:15:56:3c:95:59:6c:6b:08:98:ba:aa:
60:86:53:3f:40:14:d7:64:07:87:01:e0:ee:f1:6d:
b0:f0:ac:a7:ca:d6:dd:04:ca:1a:26:09:a1:82:05:
00:a2:04:d1:28:a9:68:f8:ea:18:62:81:59:21:21:
14:77:63:f4:3e:a8:f5:90:2b:ea:e4:90:d9:10:89:
69:07:35:02:b2:1f:df:63:ea:66:b5:68:a7:fe:c7:
f9:26:fc:4e:73:95:30:f8:15:54:2b:10:4f:86:e7:
a9:eb:e8:50:9f:d0:b8:fb:ed:5d:3a:2d:21:22:f7:
87:67:c5:71:5f:96:2b:e7:89:23:b8:d0:02:fa:a4:
db:07:33:ff:52:47:cd:df:99:7a:1e:b8:30:7f:f3:
1b:db:06:bb:a6:35:b8:e1:cf:5c:06:46:2a:be:06:
48:f9:c4:97:d2:0d:38:64:98:77:16:0c:97:af:23:
c1:d9:8a:b8:07:ff:01:7b:30:8c:dc:16:c7:7a:7b:
58:0a:9e:f4:8b:c2:16:4e:b2:b6:13:5e:8b:66:36:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3F:06:27:16:D8:DA:D4:35:D0:8B:ED:C9:C2:EB:C0:2C:11:58:A8
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Zz8GJxbY2tQ10IvtycLrwCwRWKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.135.60.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4a:87:58:46:33:c6:18:d8:e6:4d:b3:7b:16:18:40:58:0e:
1f:33:3b:ad:54:6a:ab:5a:99:aa:bf:fc:e7:09:8f:fb:c8:cd:
eb:28:dd:ed:42:9c:e9:64:0b:8e:1b:b2:ad:ba:01:b4:e4:5b:
79:5d:35:09:7d:eb:ea:5f:d2:db:83:8e:59:98:b2:6a:94:61:
a0:f4:63:44:ae:d7:1f:45:61:8c:26:d0:5a:5c:be:b5:8c:b9:
d9:50:9c:64:68:be:d5:42:fa:8e:88:e1:3b:68:5a:64:4a:32:
09:5e:5b:7f:18:04:71:fb:a1:77:07:02:98:a8:8d:6f:fb:f0:
7b:fe:8b:fe:76:7a:0e:a9:fb:b8:cc:37:3a:8d:10:9b:58:fe:
73:06:c4:3d:98:91:62:36:36:be:40:4a:d7:6d:b3:60:c3:78:
66:c1:71:fc:c1:06:7d:94:e6:97:c8:95:36:45:b8:7b:2e:90:
cb:6a:44:b2:41:19:47:0b:e3:80:d7:31:f0:44:f2:80:32:0c:
cf:da:0e:27:de:e7:f1:a1:65:fb:9d:4f:20:f7:06:cd:09:19:
f5:a5:48:57:18:a8:f1:0e:39:e6:56:6e:e2:00:a3:ff:ac:e5:
d1:a1:34:50:04:dc:a3:90:8e:e5:ca:c3:04:e9:6b:6d:37:94:
be:ee:62:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+EgjeaUjz8kJZ/M1oxyVZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzY2OWVhZTg3NmQyZjIzYjlmODUyN2U4OGE4NzAyZGJk
NDIzZTMwHhcNMjYwNzIxMTE0OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzNmMDYyNzE2ZDhkYWQ0MzVkMDhiZWRjOWMyZWJjMDJjMTE1OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoeE38LI3Uko5veQKdf5YgAprbHC
5WtD9SkwV/rHiIX1JIWPzjxcRT819j2auNOyFVY8lVlsawiYuqpghlM/QBTXZAeH
AeDu8W2w8KynytbdBMoaJgmhggUAogTRKKlo+OoYYoFZISEUd2P0Pqj1kCvq5JDZ
EIlpBzUCsh/fY+pmtWin/sf5JvxOc5Uw+BVUKxBPhuep6+hQn9C4++1dOi0hIveH
Z8VxX5Yr54kjuNAC+qTbBzP/UkfN35l6Hrgwf/Mb2wa7pjW44c9cBkYqvgZI+cSX
0g04ZJh3FgyXryPB2Yq4B/8BezCM3BbHentYCp70i8IWTrK2E16LZjYKuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGc/BicW2NrUNdCL7cnC68AsEVioMB8GA1UdIwQY
MBaAFOo2aerodtLyO5+FJ+iKhwLb1CPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjct
M2FjZTFlZmYzYTI0LzEvWno4R0p4YlkydFExMEl2dHljTHJ3Q3dSV0tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjctM2FjZTFlZmYzYTI0
LzEvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWYc8MA0G
CSqGSIb3DQEBCwUAA4IBAQB0SodYRjPGGNjmTbN7FhhAWA4fMzutVGqrWpmqv/zn
CY/7yM3rKN3tQpzpZAuOG7KtugG05Ft5XTUJfevqX9Lbg45ZmLJqlGGg9GNErtcf
RWGMJtBaXL61jLnZUJxkaL7VQvqOiOE7aFpkSjIJXlt/GARx+6F3BwKYqI1v+/B7
/ov+dnoOqfu4zDc6jRCbWP5zBsQ9mJFiNja+QErXbbNgw3hmwXH8wQZ9lOaXyJU2
Rbh7LpDLakSyQRlHC+OA1zHwRPKAMgzP2g4n3ufxoWX7nU8g9wbNCRn1pUhXGKjx
DjnmVm7iAKP/rOXRoTRQBNyjkI7lysME6WttN5S+7mKi
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:47 2026 by rpki-client