Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zo0Xk1hPVwFjRtAPVKAU8iyczRA.roa
File: zo0Xk1hPVwFjRtAPVKAU8iyczRA.roa (raw, json)
Hash identifier: boyFtWRhCMYFjELX2aeCQlY7f/PffOzZBdJM0R9Wi0Q=
Subject key identifier: CE:8D:17:93:58:4F:57:01:63:46:D0:0F:54:A0:14:F2:2C:9C:CD:10
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A166ADC8B3B32E7CCC28AD7E91A0AB33A6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zo0Xk1hPVwFjRtAPVKAU8iyczRA.roa
Signing time: Fri 23 Oct 2026 02:53:47 +0000
ROA not before: Fri 23 Oct 2026 02:53:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 77.67.101.0/24 maxlen: 24
194.77.187.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:ad:c8:b3:b3:2e:7c:cc:28:ad:7e:91:a0:ab:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 23 02:53:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce8d1793584f57016346d00f54a014f22c9ccd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:ee:78:f2:c3:4f:61:93:6c:7c:c0:90:cf:
17:76:f4:25:f9:71:30:d4:5e:51:ca:11:45:d8:a3:
63:3e:dc:b0:e1:28:81:59:62:44:87:7a:cc:a0:4b:
2f:40:21:f6:11:f3:27:f5:72:4e:e4:c9:ce:c2:07:
d9:51:37:6e:20:0e:fc:81:7b:d3:23:94:27:c6:5a:
41:dd:4e:5d:a0:04:d9:3c:f3:67:ff:76:9f:e1:c6:
52:d4:3f:a9:79:4d:47:5f:c0:66:2b:99:a3:57:14:
17:dc:f9:7c:d5:87:7b:d7:9d:a5:4c:bf:c5:5f:a0:
20:b3:25:e2:7a:04:83:3c:2c:c4:1f:d6:eb:8d:87:
5e:de:09:ff:db:c8:8e:34:1c:ab:51:ab:f9:70:02:
84:c4:60:eb:3e:54:1d:f3:88:14:1c:09:0f:b4:e3:
c4:4f:c9:b7:a0:c4:17:2b:65:5f:c2:b8:cd:21:ba:
aa:fb:84:81:db:44:4e:8b:7d:4f:5b:1c:74:5f:92:
6b:f9:2a:68:88:ee:67:04:0c:4b:b7:68:57:c3:c2:
bf:4d:d0:44:10:bc:a6:05:58:b6:dd:19:79:1c:8a:
9e:61:05:fe:8a:74:d2:a5:8f:8e:6e:76:0f:e5:89:
3b:d3:af:0d:8b:4e:da:eb:e7:44:52:23:10:52:63:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:17:93:58:4F:57:01:63:46:D0:0F:54:A0:14:F2:2C:9C:CD:10
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zo0Xk1hPVwFjRtAPVKAU8iyczRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.101.0/24
194.77.187.0/24
212.189.95.0/24
212.189.103.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2a:fb:de:50:41:be:2d:8c:fe:16:7e:ab:20:32:9b:10:8b:
b4:70:00:95:ec:6b:1a:72:0b:f1:db:4d:f1:19:24:bf:4f:81:
d5:48:48:3d:f9:93:26:44:28:c6:5a:c9:c1:af:b6:f6:96:ff:
01:be:45:ca:06:19:8c:c9:0f:c5:2b:cb:ed:59:e6:cd:c6:39:
97:50:01:83:ed:67:c1:69:b0:54:97:9b:6d:13:e6:36:03:84:
83:f2:f4:37:99:89:05:2b:d0:a7:3d:bd:d0:67:07:e8:d5:3b:
77:f3:10:75:d5:9b:f4:b9:2a:5f:a3:6b:28:f8:70:30:bf:c6:
20:72:93:5b:c1:75:bf:27:ca:ac:6d:59:6d:7e:29:47:23:0c:
57:27:9f:56:79:22:6e:42:8a:82:27:4e:a6:b8:65:10:33:66:
36:8a:1a:ba:ee:af:04:4c:84:98:80:ac:d8:9d:9b:cb:63:53:
88:5a:a3:1b:cc:1e:2a:e0:c6:fe:72:19:24:c6:6b:9b:4b:4a:
03:02:b5:20:01:4c:11:cd:9b:ce:94:1b:ff:f8:c5:9e:36:f7:
6d:70:99:f5:90:28:14:28:51:db:f1:90:97:ea:02:a1:7f:4b:
b7:15:69:48:5f:f7:fe:24:67:45:e0:6c:eb:60:b2:6a:db:68:
81:fd:c6:77
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFmrcizsy58zCitfpGgqzOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDIzMDI1MzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZThkMTc5MzU4NGY1NzAxNjM0NmQwMGY1NGEwMTRmMjJjOWNjZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BLuePLDT2GTbHzAkM8XdvQl+XEw
1F5RyhFF2KNjPtyw4SiBWWJEh3rMoEsvQCH2EfMn9XJO5MnOwgfZUTduIA78gXvT
I5QnxlpB3U5doATZPPNn/3af4cZS1D+peU1HX8BmK5mjVxQX3Pl81Yd7152lTL/F
X6AgsyXiegSDPCzEH9brjYde3gn/28iONByrUav5cAKExGDrPlQd84gUHAkPtOPE
T8m3oMQXK2VfwrjNIbqq+4SB20ROi31PWxx0X5Jr+SpoiO5nBAxLt2hXw8K/TdBE
ELymBVi23Rl5HIqeYQX+inTSpY+ObnYP5Yk7068Ni07a6+dEUiMQUmObEwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFM6NF5NYT1cBY0bQD1SgFPIsnM0QMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvem8wWGsxaFBWd0ZqUnRBUFZLQVU4aXljelJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATUNlAwQA
wk27AwQA1L1fAwQA1L1nMA0GCSqGSIb3DQEBCwUAA4IBAQAlKvveUEG+LYz+Fn6r
IDKbEIu0cACV7Gsacgvx203xGSS/T4HVSEg9+ZMmRCjGWsnBr7b2lv8BvkXKBhmM
yQ/FK8vtWebNxjmXUAGD7WfBabBUl5ttE+Y2A4SD8vQ3mYkFK9CnPb3QZwfo1Tt3
8xB11Zv0uSpfo2so+HAwv8YgcpNbwXW/J8qsbVltfilHIwxXJ59WeSJuQoqCJ06m
uGUQM2Y2ihq67q8ETISYgKzYnZvLY1OIWqMbzB4q4Mb+chkkxmubS0oDArUgAUwR
zZvOlBv/+MWeNvdtcJn1kCgUKFHb8ZCX6gKhf0u3FWlIX/f+JGdF4GzrYLJq22iB
/cZ3
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:36 2026 by rpki-client