Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zpyncnPHwXoocQt0M8wdNhjDTRA.roa
File: zpyncnPHwXoocQt0M8wdNhjDTRA.roa (raw, json)
Hash identifier: WNJNbh2prOe3MX/sHe0jC2SPxRntnjKzi6Qc2s+9SN0=
Subject key identifier: CE:9C:A7:72:73:C7:C1:7A:28:71:0B:74:33:CC:1D:36:18:C3:4D:10
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F2369465718A3E7626FD08D852A3C6F6E
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zpyncnPHwXoocQt0M8wdNhjDTRA.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58065
IP address blocks: 176.103.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:46:57:18:a3:e7:62:6f:d0:8d:85:2a:3c:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce9ca77273c7c17a28710b7433cc1d3618c34d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:57:80:36:c6:34:7c:73:47:7f:18:a1:47:
3f:6b:d4:d0:54:34:5a:13:be:88:7f:29:e8:c8:f1:
72:ec:ad:fc:5e:7d:98:23:07:88:15:2b:c7:a4:06:
f0:38:40:41:99:b0:04:a8:4a:92:12:1a:80:1b:65:
b4:64:32:6c:1b:04:30:96:9c:c8:eb:ad:c5:ef:ce:
8c:04:13:73:ff:19:51:81:aa:13:3c:fc:f7:d5:cf:
05:44:87:41:35:f1:d8:5f:74:f4:56:d0:8b:44:6e:
35:b1:bb:61:77:a5:13:53:b4:56:e3:2a:99:9e:fc:
3f:c9:93:1d:01:93:90:ca:0f:db:aa:e5:a3:82:53:
76:fe:da:16:5a:21:89:37:5b:e0:5f:a1:f2:71:98:
ba:8a:c2:12:00:5b:04:c8:93:52:f2:b0:bc:43:1b:
f2:d4:c2:ad:c5:a0:03:95:5a:94:6f:db:08:e8:b3:
64:7b:31:a2:96:e6:14:58:5d:5e:5a:f7:34:88:d6:
63:ce:48:93:a9:ef:92:63:30:42:cf:8a:3a:d6:bb:
5e:d7:ea:c7:8b:99:fd:f7:af:f6:c6:c6:a6:66:f2:
c9:a4:65:91:d1:90:17:51:c2:c3:87:69:0f:45:7b:
80:1c:f8:f3:f9:c3:cf:52:cc:31:96:f2:1a:72:d7:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:A7:72:73:C7:C1:7A:28:71:0B:74:33:CC:1D:36:18:C3:4D:10
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zpyncnPHwXoocQt0M8wdNhjDTRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:5c:48:dc:fb:c2:e4:78:5d:3b:33:00:06:2f:b1:b0:de:68:
c7:b8:d5:a1:03:40:f1:56:53:87:e9:b5:3f:25:ea:41:e7:eb:
da:f5:d4:e6:3f:3a:52:c7:5b:84:75:43:0a:a1:c8:d1:64:b9:
42:21:62:f2:77:26:db:ac:98:d3:36:8c:09:a6:01:d3:e0:70:
d5:64:af:37:b6:a9:ba:29:33:2f:2f:0a:19:15:af:5b:4f:c1:
3b:0a:cc:6d:9b:53:dc:a1:90:24:1b:ea:54:c7:d7:19:23:b7:
4d:f1:f2:27:bc:41:b7:ec:3f:66:82:a3:f4:d1:11:6b:ad:db:
77:ec:ae:d6:72:fc:d8:f8:da:e5:09:2d:f7:a5:94:c9:ca:8a:
2f:79:c9:77:17:e1:73:b2:7a:c9:32:51:73:30:13:99:52:29:
62:43:9a:70:c9:2f:47:8a:94:8a:98:be:f4:70:6f:b7:46:20:
69:83:eb:b2:9d:c7:3e:06:0b:85:9d:5a:97:24:a6:27:bf:0d:
f5:cb:c9:95:93:4b:5b:84:65:6a:d3:f8:26:14:88:4d:26:39:
a4:f5:a9:c5:e0:c0:0b:5f:26:ba:04:ea:93:4c:ab:1e:52:17:
e1:6c:37:03:7d:2e:35:12:77:75:74:b6:67:89:d0:45:5c:f9:
85:ba:2a:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaUZXGKPnYm/QjYUqPG9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDc4ZDIyNjk4Y2RkMWU2YTIzZDcwYzE3ZmZmZTMyMWRl
ZjNiMzAwHhcNMjYwNzAyMTUxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTljYTc3MjczYzdjMTdhMjg3MTBiNzQzM2NjMWQzNjE4YzM0ZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWdXgDbGNHxzR38YoUc/a9TQVDRa
E76IfynoyPFy7K38Xn2YIweIFSvHpAbwOEBBmbAEqEqSEhqAG2W0ZDJsGwQwlpzI
663F786MBBNz/xlRgaoTPPz31c8FRIdBNfHYX3T0VtCLRG41sbthd6UTU7RW4yqZ
nvw/yZMdAZOQyg/bquWjglN2/toWWiGJN1vgX6HycZi6isISAFsEyJNS8rC8Qxvy
1MKtxaADlVqUb9sI6LNkezGiluYUWF1eWvc0iNZjzkiTqe+SYzBCz4o61rte1+rH
i5n996/2xsamZvLJpGWR0ZAXUcLDh2kPRXuAHPjz+cPPUswxlvIactcQFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6cp3Jzx8F6KHELdDPMHTYYw00QMB8GA1UdIwQY
MBaAFCkHjSJpjN0eaiPXDBf//jId7zswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvenB5bmNuUEh3WG9vY1F0ME04d2ROaGpEVFJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsGd6MA0G
CSqGSIb3DQEBCwUAA4IBAQAKXEjc+8LkeF07MwAGL7Gw3mjHuNWhA0DxVlOH6bU/
JepB5+va9dTmPzpSx1uEdUMKocjRZLlCIWLydybbrJjTNowJpgHT4HDVZK83tqm6
KTMvLwoZFa9bT8E7Csxtm1PcoZAkG+pUx9cZI7dN8fInvEG37D9mgqP00RFrrdt3
7K7WcvzY+NrlCS33pZTJyoovecl3F+FzsnrJMlFzMBOZUiliQ5pwyS9HipSKmL70
cG+3RiBpg+uyncc+BguFnVqXJKYnvw31y8mVk0tbhGVq0/gmFIhNJjmk9anF4MAL
Xya6BOqTTKseUhfhbDcDfS41End1dLZnidBFXPmFuirE
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:43 2026 by rpki-client