Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZYOk-8jSfRGFtdQ1WZm4ud4ggbw.roa
File: ZYOk-8jSfRGFtdQ1WZm4ud4ggbw.roa (raw, json)
Hash identifier: vBnpPOoyA7SRknNmgCBSXQErqVIQWQFUc5CR8u4l1NU=
Subject key identifier: 65:83:A4:FB:C8:D2:7D:11:85:B5:D4:35:59:99:B8:B9:DE:20:81:BC
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019EABA005C7BE10439C926F973B21C05910
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZYOk-8jSfRGFtdQ1WZm4ud4ggbw.roa
Signing time: Tue 09 Jun 2026 09:04:11 +0000
ROA not before: Tue 09 Jun 2026 09:04:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 5.178.108.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 09:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:a0:05:c7:be:10:43:9c:92:6f:97:3b:21:c0:59:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jun 9 09:04:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6583a4fbc8d27d1185b5d4355999b8b9de2081bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:bb:0f:1e:4d:88:13:ff:30:19:39:67:92:
68:13:8d:8c:16:8c:31:10:ae:3d:a4:ad:2d:2d:08:
00:bc:b0:be:0e:79:6e:be:67:6e:6a:b1:a2:56:03:
b4:2b:47:47:ef:71:b3:66:01:c2:8f:2b:32:cd:81:
06:65:7b:a9:ce:d4:ec:f8:59:0d:15:cf:3e:72:03:
55:be:cf:0d:59:87:f1:56:64:2f:da:ba:6c:80:f5:
35:bc:7b:be:bc:ee:0b:39:0a:d8:0d:29:a3:a6:f1:
65:b5:28:5a:55:b5:01:a3:e7:a2:c6:ba:dd:f9:64:
1b:99:72:23:36:bb:48:70:92:dc:14:f1:4c:97:ac:
47:54:ed:70:ea:6b:2b:fd:ee:ea:02:b1:b0:32:89:
f5:37:9a:cc:98:45:89:48:e1:fb:dd:ad:c4:dd:6b:
b2:f1:5f:da:11:d2:69:c2:ea:6d:05:ba:d2:38:31:
61:80:da:7f:8a:c6:8c:42:1e:d0:48:f2:a7:42:d7:
ba:75:a6:b3:6a:27:93:69:35:d8:b6:f4:f8:04:d8:
93:b6:dc:25:b1:c7:f9:a4:16:f1:19:d3:cb:d2:0a:
1f:b4:2b:14:4d:ca:67:ed:ba:31:b6:18:2e:db:d9:
96:21:37:24:3f:5d:36:b3:a4:a6:a0:6d:e0:2b:21:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:A4:FB:C8:D2:7D:11:85:B5:D4:35:59:99:B8:B9:DE:20:81:BC
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZYOk-8jSfRGFtdQ1WZm4ud4ggbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.108.0/24
45.12.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b7:5b:2c:79:63:51:fb:52:8a:49:9a:6b:c6:3f:16:b5:b2:
b3:08:6b:9b:a3:c8:e3:d3:89:87:3b:e4:c5:d9:a2:57:f8:5d:
a7:84:da:df:07:42:8d:ad:b9:42:88:3d:77:41:aa:61:f2:dd:
aa:04:d3:ff:3a:0c:de:11:40:43:8e:72:41:95:e1:74:f2:2c:
fa:32:41:54:89:42:33:d7:11:d6:0e:c8:be:45:6f:77:f8:45:
ed:bc:37:b8:ed:dd:1d:c4:01:a9:59:62:de:6c:be:db:1f:de:
49:ad:70:20:52:0a:b4:53:54:b5:76:12:81:2b:d0:24:6e:d0:
c2:50:2b:dc:ee:18:d8:5c:24:72:2e:5c:44:7c:49:c4:4b:42:
11:7d:26:94:85:14:01:f1:19:76:0d:20:d0:cb:59:b8:a2:1f:
ad:7d:74:60:9c:62:fe:14:8a:e9:b8:a2:52:3a:9a:0b:c9:49:
ba:21:0f:85:ef:0b:33:8c:83:e4:cc:cb:9c:18:35:ba:30:9e:
5c:95:a3:a1:58:9d:01:41:65:a4:fd:94:10:e3:c3:67:c6:92:
1c:e3:89:30:34:30:31:df:e5:b0:2f:c9:7c:08:2b:1d:d3:8a:
1e:af:7b:a6:f1:cb:5e:87:47:71:da:28:d3:58:12:a1:a0:4d:
f8:79:ad:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6roAXHvhBDnJJvlzshwFkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjYwNjA5MDkwNDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTgzYTRmYmM4ZDI3ZDExODViNWQ0MzU1OTk5YjhiOWRlMjA4MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G27Dx5NiBP/MBk5Z5JoE42MFowx
EK49pK0tLQgAvLC+DnluvmduarGiVgO0K0dH73GzZgHCjysyzYEGZXupztTs+FkN
Fc8+cgNVvs8NWYfxVmQv2rpsgPU1vHu+vO4LOQrYDSmjpvFltShaVbUBo+eixrrd
+WQbmXIjNrtIcJLcFPFMl6xHVO1w6msr/e7qArGwMon1N5rMmEWJSOH73a3E3Wuy
8V/aEdJpwuptBbrSODFhgNp/isaMQh7QSPKnQte6daazaieTaTXYtvT4BNiTttwl
scf5pBbxGdPL0goftCsUTcpn7boxthgu29mWITckP102s6SmoG3gKyHtzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGWDpPvI0n0RhbXUNVmZuLneIIG8MB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvWllPay04alNmUkdGdGRRMVdabTR1ZDRnZ2J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbJsAwQA
LQzZMA0GCSqGSIb3DQEBCwUAA4IBAQCat1sseWNR+1KKSZprxj8WtbKzCGubo8jj
04mHO+TF2aJX+F2nhNrfB0KNrblCiD13Qaph8t2qBNP/OgzeEUBDjnJBleF08iz6
MkFUiUIz1xHWDsi+RW93+EXtvDe47d0dxAGpWWLebL7bH95JrXAgUgq0U1S1dhKB
K9AkbtDCUCvc7hjYXCRyLlxEfEnES0IRfSaUhRQB8Rl2DSDQy1m4oh+tfXRgnGL+
FIrpuKJSOpoLyUm6IQ+F7wszjIPkzMucGDW6MJ5claOhWJ0BQWWk/ZQQ48NnxpIc
44kwNDAx3+WwL8l8CCsd04oer3um8cteh0dx2ijTWBKhoE34ea1h
-----END CERTIFICATE-----
Generated at Tue Jun 9 17:32:21 2026 by rpki-client