Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/g8_04g_ZLptnhbFMWnALX7jI71Q.roa
File: g8_04g_ZLptnhbFMWnALX7jI71Q.roa (raw, json)
Hash identifier: 70TJV8gzoaCntblmfItJ9c4lhtIDo3EwTvJjPUN694A=
Subject key identifier: 83:CF:F4:E2:0F:D9:2E:9B:67:85:B1:4C:5A:70:0B:5F:B8:C8:EF:54
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019ED98B087C0358DFF9A976FA71B1FB5F5D
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/g8_04g_ZLptnhbFMWnALX7jI71Q.roa
Signing time: Thu 18 Jun 2026 07:03:48 +0000
ROA not before: Thu 18 Jun 2026 07:03:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205676
IP address blocks: 185.207.32.0/24 maxlen: 24
2a0b:1d40::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:8b:08:7c:03:58:df:f9:a9:76:fa:71:b1:fb:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jun 18 07:03:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83cff4e20fd92e9b6785b14c5a700b5fb8c8ef54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:36:d8:d2:42:55:b6:5c:3a:43:0a:46:cd:
37:33:82:d4:c9:be:6f:8e:79:4a:a0:d8:98:ac:4c:
d5:ff:f2:14:17:75:45:c6:ea:4d:bb:18:47:3a:f9:
55:3d:b7:84:01:55:00:90:29:6c:73:0e:e0:e5:03:
34:69:f0:12:87:64:a5:6d:d6:ab:7a:d9:bf:e5:8b:
4c:15:1e:ec:60:99:71:b5:1d:15:71:a7:80:0d:c7:
92:b8:62:b5:17:20:98:0e:5f:87:c2:45:28:26:1d:
08:65:d7:32:17:de:2b:79:45:d7:2e:6b:4b:54:89:
64:13:16:e0:41:d0:a0:59:e1:7a:d3:e4:74:bf:59:
1c:7f:6a:ae:a6:17:65:95:18:01:d2:bc:06:a0:55:
c2:a9:c2:18:99:f3:30:b3:47:41:04:9a:27:2b:45:
d9:c6:51:af:5b:40:ba:c5:d0:63:d5:f1:b5:ae:20:
17:b9:0a:73:9f:b2:09:75:53:09:94:53:21:c9:f3:
08:2a:e1:98:75:e9:19:9c:10:39:8b:b8:82:45:49:
2d:52:64:1d:e2:a3:79:63:14:a6:8b:7a:c1:a8:2c:
27:4e:0a:9c:14:60:53:13:53:45:06:32:e4:1e:93:
be:6c:f4:c9:ed:6b:6b:1c:99:1c:51:ac:32:9b:2d:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:F4:E2:0F:D9:2E:9B:67:85:B1:4C:5A:70:0B:5F:B8:C8:EF:54
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/g8_04g_ZLptnhbFMWnALX7jI71Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.32.0/24
IPv6:
2a0b:1d40::/36
Signature Algorithm: sha256WithRSAEncryption
5e:a7:65:87:7e:db:76:f3:7d:15:4f:5d:7d:c4:74:44:47:e0:
7c:94:d4:d7:20:56:ea:fb:ba:90:7e:28:92:25:9e:db:c6:e8:
1c:c4:fa:15:df:df:9c:89:c8:d3:19:00:00:19:e9:7e:ec:73:
9c:af:15:90:f7:db:97:8f:79:74:bf:33:c9:5a:53:50:a2:72:
63:ba:61:e0:5c:ac:20:77:83:dd:99:1d:c0:1e:3b:3f:dc:2b:
fa:98:bf:f6:bd:13:d5:67:cd:50:8e:dc:31:59:37:50:89:72:
19:49:9e:cb:97:d1:9a:cd:b3:9d:3c:aa:c9:a6:c6:1d:dd:35:
9f:32:f9:0e:38:ac:35:02:4a:5b:4a:9c:ed:bc:35:7b:3a:f9:
a8:89:b6:9f:cc:6e:aa:40:34:4a:31:bf:fa:75:58:86:10:ee:
d1:a4:de:bf:66:f8:cc:64:1d:6e:ab:1f:7e:af:c4:88:ce:f3:
d1:29:56:ef:5e:0b:4e:1a:6a:21:05:77:ad:32:38:49:41:74:
a3:01:8e:3f:5e:8e:58:52:ae:9d:98:6f:22:a9:4a:24:9d:ed:
22:0d:09:c1:14:d6:a3:f0:e8:64:6b:9b:bb:16:91:97:02:91:
0e:31:5a:73:7d:7f:37:65:2f:35:78:4e:64:2d:01:ed:69:34:
da:a5:c6:f7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZ7Ziwh8A1jf+al2+nGx+19dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw
MjhlY2QwHhcNMjYwNjE4MDcwMzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2NmZjRlMjBmZDkyZTliNjc4NWIxNGM1YTcwMGI1ZmI4YzhlZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsME22NJCVbZcOkMKRs03M4LUyb5v
jnlKoNiYrEzV//IUF3VFxupNuxhHOvlVPbeEAVUAkClscw7g5QM0afASh2Slbdar
etm/5YtMFR7sYJlxtR0VcaeADceSuGK1FyCYDl+HwkUoJh0IZdcyF94reUXXLmtL
VIlkExbgQdCgWeF60+R0v1kcf2quphdllRgB0rwGoFXCqcIYmfMws0dBBJonK0XZ
xlGvW0C6xdBj1fG1riAXuQpzn7IJdVMJlFMhyfMIKuGYdekZnBA5i7iCRUktUmQd
4qN5YxSmi3rBqCwnTgqcFGBTE1NFBjLkHpO+bPTJ7WtrHJkcUawymy2+uwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFIPP9OIP2S6bZ4WxTFpwC1+4yO9UMB8GA1UdIwQY
MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt
NTJjYWQ2Njc1ZmM2LzEvZzhfMDRnX1pMcHRuaGJGTVduQUxYN2pJNzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2
LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuc8gMA4E
AgACMAgDBgQqCx1AADANBgkqhkiG9w0BAQsFAAOCAQEAXqdlh37bdvN9FU9dfcR0
REfgfJTU1yBW6vu6kH4okiWe28boHMT6Fd/fnInI0xkAABnpfuxznK8VkPfbl495
dL8zyVpTUKJyY7ph4FysIHeD3ZkdwB47P9wr+pi/9r0T1WfNUI7cMVk3UIlyGUme
y5fRms2znTyqyabGHd01nzL5DjisNQJKW0qc7bw1ezr5qIm2n8xuqkA0SjG/+nVY
hhDu0aTev2b4zGQdbqsffq/EiM7z0SlW714LThpqIQV3rTI4SUF0owGOP16OWFKu
nZhvIqlKJJ3tIg0JwRTWo/DoZGubuxaRlwKRDjFac31/N2UvNXhOZC0B7Wk02qXG
9w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:39 2026 by rpki-client