Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ztws6HPJPgg6O7cfvZqe9GayNag.roa
File: ztws6HPJPgg6O7cfvZqe9GayNag.roa (raw, json)
Hash identifier: MxcnthMDfJYyZsEp2VIXELdHts5JnO0blBa+UVkCd5E=
Subject key identifier: CE:DC:2C:E8:73:C9:3E:08:3A:3B:B7:1F:BD:9A:9E:F4:66:B2:35:A8
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01A1636812BC625BD385381E89EF21CE766D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ztws6HPJPgg6O7cfvZqe9GayNag.roa
Signing time: Thu 22 Oct 2026 11:38:47 +0000
ROA not before: Thu 22 Oct 2026 11:38:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213174
IP address blocks: 77.65.160.0/21 maxlen: 24
77.65.160.0/24 maxlen: 24
77.65.161.0/24 maxlen: 24
77.65.162.0/24 maxlen: 24
77.65.163.0/24 maxlen: 24
77.65.164.0/24 maxlen: 24
77.65.165.0/24 maxlen: 24
77.65.166.0/24 maxlen: 24
77.65.167.0/24 maxlen: 24
77.65.168.0/23 maxlen: 24
77.65.168.0/24 maxlen: 24
77.65.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:68:12:bc:62:5b:d3:85:38:1e:89:ef:21:ce:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Oct 22 11:38:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cedc2ce873c93e083a3bb71fbd9a9ef466b235a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:c6:ee:81:47:1b:c7:56:31:16:dc:d7:ae:
61:3c:05:f7:dc:a9:2d:46:f0:9d:13:c2:e5:23:46:
6e:d7:c5:fb:11:34:03:b9:f0:1a:70:eb:b9:4f:6b:
df:ec:b1:58:94:fd:72:43:96:f0:45:16:2e:97:58:
6e:e9:32:91:f0:bd:a1:8d:d6:63:5d:87:32:89:c4:
eb:5f:27:8f:86:22:22:c5:1c:9c:6e:e9:b5:04:91:
84:a6:7f:d5:3d:d7:ad:8f:cd:28:35:aa:88:0f:08:
49:3c:9b:42:3f:0e:a8:ec:13:d8:bb:90:db:79:ed:
5f:b3:33:b3:dd:3b:70:6f:53:3d:30:d1:ff:fc:1d:
f3:fc:d2:e6:d6:ba:92:87:3b:2f:5f:93:a9:bf:25:
b9:5a:92:25:63:19:da:eb:09:14:96:8c:78:7c:cb:
47:7a:a6:4b:60:19:fc:1d:b7:14:4f:de:4c:b3:4c:
af:ce:63:32:76:d9:ab:fd:72:79:7b:76:1e:a6:66:
8a:69:34:90:3d:9d:55:f3:5e:f7:e8:c7:1a:cb:eb:
c2:59:9b:7f:ba:d3:88:80:2a:2f:7f:d0:3e:8a:50:
74:ca:40:54:33:90:80:c5:1a:5d:a8:39:7a:4a:aa:
d8:c2:f4:48:c5:0c:c7:a7:69:68:bb:ec:91:19:94:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:2C:E8:73:C9:3E:08:3A:3B:B7:1F:BD:9A:9E:F4:66:B2:35:A8
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ztws6HPJPgg6O7cfvZqe9GayNag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.160.0-77.65.169.255
Signature Algorithm: sha256WithRSAEncryption
37:ca:2c:95:de:6d:d4:3c:5b:1c:77:00:32:c1:b2:ad:e5:ea:
64:de:e7:44:31:45:74:f9:91:6e:c3:d9:19:13:bc:50:36:94:
e3:e2:78:bb:5f:a0:4c:13:7e:28:1c:bb:49:36:9c:45:92:df:
d4:c5:54:2c:8e:30:b2:2c:38:b5:ed:ec:1e:d4:3c:e6:4f:17:
87:bb:4c:d3:46:05:4f:28:6a:fd:b2:f9:01:46:60:03:9e:46:
c6:bb:3a:e4:6a:cb:bd:17:3f:8f:de:23:e5:8a:3f:11:4c:7d:
b6:07:ea:f5:f8:66:bf:cb:de:ca:1d:b1:04:04:e6:9c:55:2f:
d1:4e:e8:7a:53:ff:36:6a:cd:1b:0c:91:38:6f:77:41:2d:ce:
ba:b2:c3:e0:56:f5:70:02:3a:a6:73:ac:2b:08:47:e7:31:ef:
44:d8:b2:bd:91:0f:c6:25:d2:12:11:01:41:88:07:81:f8:1b:
54:f3:eb:a3:8a:5c:0f:4e:b9:89:57:35:7e:ef:a9:ff:2a:8c:
6e:94:eb:b8:36:26:91:4e:91:66:0d:18:38:97:c1:fe:f9:47:
4c:73:ea:b6:c7:c5:bd:7e:1c:2b:d6:a7:d1:08:2a:52:d0:5b:
52:3b:8a:9e:6f:90:8a:d3:9b:7f:79:de:43:76:0e:48:3c:d1:
4d:6b:e9:75
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaFjaBK8YlvThTgeie8hznZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYxMDIyMTEzODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWRjMmNlODczYzkzZTA4M2EzYmI3MWZiZDlhOWVmNDY2YjIzNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F7G7oFHG8dWMRbc165hPAX33Kkt
RvCdE8LlI0Zu18X7ETQDufAacOu5T2vf7LFYlP1yQ5bwRRYul1hu6TKR8L2hjdZj
XYcyicTrXyePhiIixRycbum1BJGEpn/VPdetj80oNaqIDwhJPJtCPw6o7BPYu5Db
ee1fszOz3Ttwb1M9MNH//B3z/NLm1rqShzsvX5OpvyW5WpIlYxna6wkUlox4fMtH
eqZLYBn8HbcUT95Ms0yvzmMydtmr/XJ5e3YepmaKaTSQPZ1V81736Mcay+vCWZt/
utOIgCovf9A+ilB0ykBUM5CAxRpdqDl6SqrYwvRIxQzHp2lou+yRGZQPnQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFM7cLOhzyT4IOju3H72anvRmsjWoMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvenR3czZIUEpQZ2c2TzdjZnZacWU5R2F5TmFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVNQaAD
BAFNQagwDQYJKoZIhvcNAQELBQADggEBADfKLJXebdQ8Wxx3ADLBsq3l6mTe50Qx
RXT5kW7D2RkTvFA2lOPieLtfoEwTfigcu0k2nEWS39TFVCyOMLIsOLXt7B7UPOZP
F4e7TNNGBU8oav2y+QFGYAOeRsa7OuRqy70XP4/eI+WKPxFMfbYH6vX4Zr/L3sod
sQQE5pxVL9FO6HpT/zZqzRsMkThvd0Etzrqyw+BW9XACOqZzrCsIR+cx70TYsr2R
D8Yl0hIRAUGIB4H4G1Tz66OKXA9OuYlXNX7vqf8qjG6U67g2JpFOkWYNGDiXwf75
R0xz6rbHxb1+HCvWp9EIKlLQW1I7ip5vkIrTm3953kN2Dkg80U1r6XU=
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:37:51 2026 by rpki-client