Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/ZRAagYxm8nFiYY3czShh5lyp9no.roa
File: ZRAagYxm8nFiYY3czShh5lyp9no.roa (raw, json)
Hash identifier: 5x6jeH3h5XRxgaIjgqUtVzT6iAVsz4jj0NUwGNa+3aw=
Subject key identifier: 65:10:1A:81:8C:66:F2:71:62:61:8D:DC:CD:28:61:E6:5C:A9:F6:7A
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 01A0F7AF58CEAE0940D3C2CBDC34319E7A2B
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/ZRAagYxm8nFiYY3czShh5lyp9no.roa
Signing time: Thu 01 Oct 2026 13:37:38 +0000
ROA not before: Thu 01 Oct 2026 13:37:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398962
IP address blocks: 176.125.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:af:58:ce:ae:09:40:d3:c2:cb:dc:34:31:9e:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Oct 1 13:37:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65101a818c66f27162618ddccd2861e65ca9f67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:f5:32:dd:bb:b9:9f:bc:49:da:10:e9:44:
c5:86:cc:6c:c9:13:28:70:8d:26:9d:7c:b9:ff:8b:
49:5e:22:99:bc:14:e7:8e:41:8b:da:b4:0a:97:3d:
f2:c7:45:da:62:77:00:d6:22:31:7e:bc:dd:2b:32:
b2:89:8e:e1:45:34:ed:e7:bf:d6:fe:79:64:f3:19:
33:65:43:a0:60:fe:82:e9:a3:b2:5d:b9:5e:de:a8:
04:a4:c1:91:99:17:f9:6f:56:f2:0a:92:09:61:8a:
30:ec:0d:2c:eb:10:69:84:32:7d:df:45:95:bf:be:
cf:3c:fd:a5:c4:1f:db:b5:ad:d0:44:0e:6f:46:02:
ce:5c:c7:db:19:ff:f2:5f:11:17:97:a1:a5:1e:44:
44:9f:c0:9c:2f:8d:a2:d7:9a:2c:89:8f:a0:69:96:
9a:df:03:73:3f:aa:5c:b6:2e:9d:37:ff:46:f8:74:
79:15:b0:c7:b1:ec:da:98:79:28:3e:a4:56:36:db:
b2:e5:1a:9f:10:58:a4:83:95:1d:f3:50:dd:4f:2b:
d5:1d:13:33:eb:11:89:12:32:64:4f:7c:7d:19:9d:
f5:ca:b3:73:96:f9:c0:c4:73:49:76:0f:40:fe:67:
5b:d0:23:be:5d:21:c3:26:62:2a:88:f0:d3:b4:92:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:1A:81:8C:66:F2:71:62:61:8D:DC:CD:28:61:E6:5C:A9:F6:7A
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/ZRAagYxm8nFiYY3czShh5lyp9no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
41:40:1d:61:0d:38:28:fb:ef:15:24:d1:74:a7:4a:8d:43:23:
f2:3f:51:ce:5c:ff:48:be:83:eb:bc:04:89:6b:a4:5b:2b:dc:
c5:97:8f:94:77:2a:fe:cc:21:1c:1b:50:77:72:71:22:f7:b0:
29:4d:21:dd:76:13:f2:0b:0a:02:7b:5d:07:86:0d:d3:57:5e:
84:9b:67:de:97:70:08:b1:7a:62:d3:b0:e5:33:f4:80:e6:79:
d9:47:b1:e4:d9:1e:79:5c:71:e1:8d:10:62:87:27:6b:f7:4e:
c7:4a:2b:17:40:2e:72:43:cc:7d:12:57:2e:a8:30:ee:a0:05:
28:4b:d5:db:c3:e4:57:b9:c0:d4:b6:7c:0b:99:a1:a1:60:cb:
a9:c8:12:92:4d:72:10:33:11:84:2c:0c:a9:c3:06:e6:2b:79:
57:6b:1d:f1:75:5f:98:9f:0c:1f:bc:32:a2:2f:ac:59:f7:35:
fc:00:72:a0:09:0a:32:67:7c:24:80:3a:5d:dc:d0:7b:0d:6a:
b5:73:37:da:6c:a7:eb:0c:00:d5:f7:07:ee:c1:41:c3:a0:28:
1e:6d:7e:f2:fe:a0:07:fa:03:06:b5:76:c1:d5:91:97:50:57:
97:19:06:c1:ce:6b:75:eb:5b:03:f3:d8:8e:1f:4a:1d:59:8c:
48:ec:d6:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD3r1jOrglA08LL3DQxnnorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx
NGRiMzkwHhcNMjYxMDAxMTMzNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTEwMWE4MThjNjZmMjcxNjI2MThkZGNjZDI4NjFlNjVjYTlmNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bj1Mt27uZ+8SdoQ6UTFhsxsyRMo
cI0mnXy5/4tJXiKZvBTnjkGL2rQKlz3yx0XaYncA1iIxfrzdKzKyiY7hRTTt57/W
/nlk8xkzZUOgYP6C6aOyXble3qgEpMGRmRf5b1byCpIJYYow7A0s6xBphDJ930WV
v77PPP2lxB/bta3QRA5vRgLOXMfbGf/yXxEXl6GlHkREn8CcL42i15osiY+gaZaa
3wNzP6pcti6dN/9G+HR5FbDHsezamHkoPqRWNtuy5RqfEFikg5Ud81DdTyvVHRMz
6xGJEjJkT3x9GZ31yrNzlvnAxHNJdg9A/mdb0CO+XSHDJmIqiPDTtJIzewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUQGoGMZvJxYmGN3M0oYeZcqfZ6MB8GA1UdIwQY
MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt
ZWQzMGI5YmIxMmQ1LzEvWlJBYWdZeG04bkZpWVkzY3pTaGg1bHlwOW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1
LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsH3sMA0G
CSqGSIb3DQEBCwUAA4IBAQBBQB1hDTgo++8VJNF0p0qNQyPyP1HOXP9IvoPrvASJ
a6RbK9zFl4+Udyr+zCEcG1B3cnEi97ApTSHddhPyCwoCe10Hhg3TV16Em2fel3AI
sXpi07DlM/SA5nnZR7Hk2R55XHHhjRBihydr907HSisXQC5yQ8x9ElcuqDDuoAUo
S9Xbw+RXucDUtnwLmaGhYMupyBKSTXIQMxGELAypwwbmK3lXax3xdV+YnwwfvDKi
L6xZ9zX8AHKgCQoyZ3wkgDpd3NB7DWq1czfabKfrDADV9wfuwUHDoCgebX7y/qAH
+gMGtXbB1ZGXUFeXGQbBzmt161sD89iOH0odWYxI7NZZ
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:43 2026 by rpki-client