Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ZQnid9-fJgdD8QY7UXq6Q7rH7pw.roa
File: ZQnid9-fJgdD8QY7UXq6Q7rH7pw.roa (raw, json)
Hash identifier: XJUBajf9XyDNGQ8tEXvR1yvb6Zo2tLtl5//HhRaFZmw=
Subject key identifier: 65:09:E2:77:DF:9F:26:07:43:F1:06:3B:51:7A:BA:43:BA:C7:EE:9C
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019F374C7208ACD76EFA8E287243E959BBFB
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ZQnid9-fJgdD8QY7UXq6Q7rH7pw.roa
Signing time: Mon 06 Jul 2026 11:59:44 +0000
ROA not before: Mon 06 Jul 2026 11:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204767
IP address blocks: 153.56.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:4c:72:08:ac:d7:6e:fa:8e:28:72:43:e9:59:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Jul 6 11:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6509e277df9f260743f1063b517aba43bac7ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:99:0e:cf:d6:e9:b7:37:c8:0a:4e:6a:15:
d8:a3:7b:16:b2:0a:dc:92:0b:15:47:c8:6b:86:16:
6d:3b:80:66:59:27:26:d4:ff:d5:13:03:83:16:ed:
99:00:6f:89:f6:d5:fa:f6:46:40:3f:6c:14:24:80:
74:cb:2a:30:0f:d0:9b:34:3d:ee:e2:14:17:33:00:
77:52:3b:7a:df:54:50:f4:97:d0:69:03:b0:a7:af:
9e:8f:5c:02:33:e3:bf:7b:49:04:3c:1f:2b:dd:cb:
7b:d1:2e:ec:1f:a2:e2:1e:3a:80:63:c1:6b:49:91:
01:12:dc:d7:b3:c5:73:6d:8d:cb:df:6e:ee:77:b4:
58:50:4d:30:4b:cb:88:d6:42:fc:4b:92:d1:43:cd:
e2:09:98:de:56:69:d7:6b:64:d5:c0:62:29:1a:14:
7c:3b:26:fe:9d:98:59:db:cf:dc:14:a6:2b:3c:84:
55:c2:ce:a8:b5:4e:4c:38:a4:95:fb:1e:fe:29:3c:
06:bd:6f:ae:cf:6a:d2:6e:7b:4a:99:37:04:52:f8:
b5:37:b6:d0:0a:5a:6f:4c:60:b7:67:55:b5:03:98:
95:fd:ef:55:2c:ec:79:2d:c0:6d:7e:3b:50:d9:a2:
0b:a3:fe:8f:46:92:a9:91:57:62:f9:8b:47:c3:16:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:E2:77:DF:9F:26:07:43:F1:06:3B:51:7A:BA:43:BA:C7:EE:9C
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ZQnid9-fJgdD8QY7UXq6Q7rH7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:14:be:11:52:22:42:4d:1b:9e:35:85:8c:2d:16:03:98:97:
30:fc:96:b2:d5:9d:85:51:1a:98:cc:0f:de:53:7d:f2:5e:fc:
11:92:ad:02:a3:34:a3:42:bc:b0:71:7f:80:8f:40:f6:67:09:
4b:d7:a1:5f:cc:91:39:45:2b:34:c5:0a:33:85:67:2a:bc:0f:
c3:c5:ea:c0:9f:88:98:b4:33:a6:11:80:57:3a:c7:09:57:93:
6a:c9:00:61:01:32:a2:a0:c9:c1:d2:ac:9f:14:0f:7f:95:1a:
c1:c5:96:bf:c4:da:79:20:65:48:df:a6:fe:53:f3:6a:52:9c:
5c:6f:91:5e:0a:b4:d6:cc:c4:1f:59:c8:41:02:ed:4c:dd:30:
a6:ac:54:8f:10:1c:13:e0:a5:e4:3e:81:2c:d5:ce:ca:5d:09:
b7:6d:9d:c9:2e:b4:08:8d:a2:29:5f:5c:29:c5:18:75:79:13:
b8:6e:4f:64:c8:a6:4a:6a:7a:55:ef:a3:9e:f1:2f:3b:d9:e5:
e4:fd:54:53:7c:55:9a:56:17:fa:e9:4e:38:60:4d:06:23:95:
49:91:66:76:4a:e8:db:5f:40:44:d3:f1:9b:67:c2:06:d0:1b:
f2:84:7e:92:59:49:36:96:13:61:86:3a:33:24:f0:87:16:4f:
c4:7c:64:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ83THIIrNdu+o4ockPpWbv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjYwNzA2MTE1OTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTA5ZTI3N2RmOWYyNjA3NDNmMTA2M2I1MTdhYmE0M2JhYzdlZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvmZDs/W6bc3yApOahXYo3sWsgrc
kgsVR8hrhhZtO4BmWScm1P/VEwODFu2ZAG+J9tX69kZAP2wUJIB0yyowD9CbND3u
4hQXMwB3Ujt631RQ9JfQaQOwp6+ej1wCM+O/e0kEPB8r3ct70S7sH6LiHjqAY8Fr
SZEBEtzXs8VzbY3L327ud7RYUE0wS8uI1kL8S5LRQ83iCZjeVmnXa2TVwGIpGhR8
Oyb+nZhZ28/cFKYrPIRVws6otU5MOKSV+x7+KTwGvW+uz2rSbntKmTcEUvi1N7bQ
ClpvTGC3Z1W1A5iV/e9VLOx5LcBtfjtQ2aILo/6PRpKpkVdi+YtHwxYg4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUJ4nffnyYHQ/EGO1F6ukO6x+6cMB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvWlFuaWQ5LWZKZ2REOFFZN1VYcTZRN3JIN3B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTjeMA0G
CSqGSIb3DQEBCwUAA4IBAQBfFL4RUiJCTRueNYWMLRYDmJcw/Jay1Z2FURqYzA/e
U33yXvwRkq0CozSjQrywcX+Aj0D2ZwlL16FfzJE5RSs0xQozhWcqvA/DxerAn4iY
tDOmEYBXOscJV5NqyQBhATKioMnB0qyfFA9/lRrBxZa/xNp5IGVI36b+U/NqUpxc
b5FeCrTWzMQfWchBAu1M3TCmrFSPEBwT4KXkPoEs1c7KXQm3bZ3JLrQIjaIpX1wp
xRh1eRO4bk9kyKZKanpV76Oe8S872eXk/VRTfFWaVhf66U44YE0GI5VJkWZ2Sujb
X0BE0/GbZ8IG0BvyhH6SWUk2lhNhhjozJPCHFk/EfGRo
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:44 2026 by rpki-client