Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/Z6WV7_CviDtB4kK9RFUQZEfsld8.roa
File: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (raw, json)
Hash identifier: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=
Subject key identifier: 67:A5:95:EF:F0:AF:88:3B:41:E2:42:BD:44:55:10:64:47:EC:95:DF
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019CE785292505C32D9795F58995A63AEC99
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/Z6WV7_CviDtB4kK9RFUQZEfsld8.roa
Signing time: Fri 13 Mar 2026 14:06:29 +0000
ROA not before: Fri 13 Mar 2026 14:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202975
IP address blocks: 85.116.132.0/22 maxlen: 22
89.105.88.0/24 maxlen: 24
89.105.89.0/24 maxlen: 24
89.105.90.0/24 maxlen: 24
185.89.222.0/23 maxlen: 23
185.135.100.0/23 maxlen: 23
185.135.102.0/24 maxlen: 24
2a06:f2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:85:29:25:05:c3:2d:97:95:f5:89:95:a6:3a:ec:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Mar 13 14:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67a595eff0af883b41e242bd4455106447ec95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:5d:5e:f7:9b:72:19:8a:ec:5e:21:df:28:
72:ca:9d:65:9c:5b:98:5a:27:d4:04:0a:5d:27:07:
a9:15:c3:d1:64:96:ef:3f:50:4b:13:d1:05:99:30:
fd:48:d4:9a:22:d9:21:ce:8d:f2:a6:ea:80:27:fd:
ce:47:e5:4a:6d:23:65:c4:b7:23:b7:8f:ca:f1:8c:
0a:2b:c5:c6:6d:62:4e:12:32:e6:c2:2e:ac:30:d6:
e3:a3:e8:63:5b:41:50:ee:7e:b1:9f:e3:b8:45:07:
b1:9c:75:09:66:b9:fd:46:bd:dd:3e:6a:68:86:d5:
aa:32:0f:cf:1f:de:b3:a4:95:22:da:fa:84:3b:35:
4f:6b:1a:76:b7:e0:bc:26:e1:a0:22:89:0a:46:ad:
9b:a5:cf:62:ac:f0:ad:9d:3b:9a:09:54:07:26:93:
02:94:d7:0b:77:f3:58:05:cb:60:83:ac:e7:04:4c:
60:19:cb:8d:ee:f3:48:2c:ba:df:fb:7f:53:dc:48:
c8:87:26:1e:4e:ab:d3:08:9b:10:5b:12:30:19:28:
99:f5:fa:e5:80:88:ce:04:66:db:d6:1a:03:31:8e:
b3:50:ba:db:18:f8:71:00:67:d0:c1:f4:56:23:c2:
06:9e:e5:f4:68:fd:e2:8d:e7:3f:4a:23:e2:2b:32:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A5:95:EF:F0:AF:88:3B:41:E2:42:BD:44:55:10:64:47:EC:95:DF
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/Z6WV7_CviDtB4kK9RFUQZEfsld8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.132.0/22
89.105.88.0-89.105.90.255
185.89.222.0/23
185.135.100.0-185.135.102.255
IPv6:
2a06:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:32:07:3b:29:9a:6e:9a:64:e1:e8:97:9e:8c:b8:8a:98:08:
b1:24:3e:b4:c2:69:85:a9:47:a7:8c:b5:9b:d2:25:fa:7b:50:
5c:6c:00:8c:10:e9:3f:c0:6f:18:fd:d6:9d:b2:60:26:f9:46:
e8:7f:d4:27:a0:46:78:76:e8:9e:a9:51:fc:1b:b2:86:2d:14:
f5:bb:9e:24:dc:a8:0e:43:74:b5:20:37:e9:a6:c6:ef:50:cf:
9e:31:6a:a9:bd:81:1a:cb:70:c7:16:7d:63:6b:0f:40:97:31:
dd:50:e0:13:c7:76:5e:27:95:26:ec:e5:63:b3:90:a9:d8:c5:
0b:7e:8e:b8:0f:6b:2f:f2:1e:b7:16:6e:49:cb:ec:54:cd:f7:
06:8e:d2:db:8a:35:d1:50:2b:e3:1a:0c:42:33:f2:c9:ad:de:
06:b2:1f:16:0a:62:6c:ed:44:b3:4d:b9:f6:dc:6b:25:32:ef:
b5:4f:c5:04:1f:d7:20:4c:df:5f:75:18:24:51:c7:ea:d2:4f:
13:b9:74:2b:bc:2d:21:b7:10:f2:58:5b:f4:9b:fe:4f:ab:dd:
ac:6c:81:6b:85:14:91:2f:b2:f4:e4:4c:7b:25:c1:3b:8c:78:
1a:76:58:92:3c:95:fd:db:77:ce:e8:39:bd:71:e1:95:84:a4:
23:06:70:8d
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZznhSklBcMtl5X1iZWmOuyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1
MDc3NDAwHhcNMjYwMzEzMTQwNjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2E1OTVlZmYwYWY4ODNiNDFlMjQyYmQ0NDU1MTA2NDQ3ZWM5NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZVdXvebchmK7F4h3yhyyp1lnFuY
WifUBApdJwepFcPRZJbvP1BLE9EFmTD9SNSaItkhzo3ypuqAJ/3OR+VKbSNlxLcj
t4/K8YwKK8XGbWJOEjLmwi6sMNbjo+hjW0FQ7n6xn+O4RQexnHUJZrn9Rr3dPmpo
htWqMg/PH96zpJUi2vqEOzVPaxp2t+C8JuGgIokKRq2bpc9irPCtnTuaCVQHJpMC
lNcLd/NYBctgg6znBExgGcuN7vNILLrf+39T3EjIhyYeTqvTCJsQWxIwGSiZ9frl
gIjOBGbb1hoDMY6zULrbGPhxAGfQwfRWI8IGnuX0aP3ijec/SiPiKzLm9QIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFGelle/wr4g7QeJCvURVEGRH7JXfMB8GA1UdIwQY
MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt
ZDViMGY5MWQ5N2MyLzEvWjZXVjdfQ3ZpRHRCNGtLOVJGVVFaRWZzbGQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My
LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwQCVXSEMAwD
BANZaVgDBABZaVoDBAG5Wd4wDAMEArmHZAMEALmHZjANBAIAAjAHAwUDKgbywDAN
BgkqhkiG9w0BAQsFAAOCAQEAIjIHOymabppk4eiXnoy4ipgIsSQ+tMJphalHp4y1
m9Il+ntQXGwAjBDpP8BvGP3WnbJgJvlG6H/UJ6BGeHbonqlR/Buyhi0U9bueJNyo
DkN0tSA36abG71DPnjFqqb2BGstwxxZ9Y2sPQJcx3VDgE8d2XieVJuzlY7OQqdjF
C36OuA9rL/IetxZuScvsVM33Bo7S24o10VAr4xoMQjPyya3eBrIfFgpibO1Es025
9txrJTLvtU/FBB/XIEzfX3UYJFHH6tJPE7l0K7wtIbcQ8lhb9Jv+T6vdrGyBa4UU
kS+y9ORMeyXBO4x4GnZYkjyV/dt3zug5vXHhlYSkIwZwjQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 18:53:18 2026 by rpki-client