Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zV1fCAaJzxxoyfA0WcdFKJrp2R0.roa
File: zV1fCAaJzxxoyfA0WcdFKJrp2R0.roa (raw, json)
Hash identifier: pb1m9M8yHzsPn9L4wFpH1jeHHft9SKcGVcBcOUgBDEc=
Subject key identifier: CD:5D:5F:08:06:89:CF:1C:68:C9:F0:34:59:C7:45:28:9A:E9:D9:1D
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01A177502C349DBCBA624A71196A0762EA94
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zV1fCAaJzxxoyfA0WcdFKJrp2R0.roa
Signing time: Mon 26 Oct 2026 08:25:05 +0000
ROA not before: Mon 26 Oct 2026 08:25:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206980
IP address blocks: 80.66.71.0/24 maxlen: 24
80.66.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:50:2c:34:9d:bc:ba:62:4a:71:19:6a:07:62:ea:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Oct 26 08:25:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd5d5f080689cf1c68c9f03459c745289ae9d91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:1e:fc:57:2c:61:b1:ab:e9:ed:2d:6b:2b:
3f:9f:e0:82:67:18:6d:10:cf:40:f7:a1:34:e2:3e:
a4:7a:d8:e5:6e:57:5e:0f:c3:84:a1:ea:f6:3b:31:
89:cf:30:10:d7:16:92:fa:fb:6b:cf:91:dc:e7:4a:
16:e7:9c:4f:a8:eb:ff:29:f1:b0:b2:d1:d1:eb:bc:
14:e4:b5:9b:cb:a8:58:1f:dc:83:ed:7f:1b:ff:dd:
ea:a8:15:78:f9:a4:b7:9f:c8:80:d2:56:ea:75:06:
31:4a:45:c7:f0:be:af:42:d3:1e:a0:92:5c:23:d9:
00:c6:1e:e9:0a:1a:99:3e:06:03:39:d4:21:c7:c9:
dc:17:b5:2d:87:88:57:0d:e7:21:3d:fb:97:60:8b:
5b:aa:87:79:e9:76:48:3d:f6:60:2e:c8:92:88:e6:
48:b5:8b:1d:99:86:76:23:70:3e:1b:87:16:3f:26:
aa:1b:08:4f:3e:21:47:d5:29:1b:93:7f:e0:f0:91:
20:b7:04:71:08:6d:ad:11:f1:0d:2c:80:83:7e:8b:
fe:30:4e:ea:10:59:b3:52:f7:91:87:96:81:66:96:
28:18:30:9e:98:9e:d5:ca:68:e1:43:a1:66:d8:1f:
c7:fc:56:60:c3:c5:6a:5e:de:57:5b:c5:c7:df:1b:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:5F:08:06:89:CF:1C:68:C9:F0:34:59:C7:45:28:9A:E9:D9:1D
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zV1fCAaJzxxoyfA0WcdFKJrp2R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.71.0/24
80.66.82.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a1:81:24:84:36:9d:95:73:8a:43:e5:a0:7c:34:22:fc:e1:
06:a7:c6:ff:58:64:94:a8:bf:47:c3:46:d5:11:fa:b0:be:56:
18:04:d6:f2:f2:2f:b6:f7:c9:3d:7a:46:72:4b:3d:a7:75:7d:
3d:20:da:2d:24:d6:21:49:74:68:3f:8f:ea:9d:d7:36:5d:3c:
c3:5b:87:49:08:21:a9:0d:5b:49:5c:8b:a3:bd:ca:58:9b:0d:
cf:22:0c:dc:57:b9:d6:2d:fd:e3:6f:06:b1:1b:7d:8d:55:3f:
87:6e:92:38:ad:f7:a5:9b:1b:0d:e4:a1:ee:68:de:8d:02:01:
de:49:91:9a:a0:de:56:cb:a9:34:7c:59:b0:22:a3:03:90:f0:
fc:ba:e1:a4:4d:df:53:e6:b7:4b:fe:d4:08:b1:48:bb:83:22:
20:4e:3d:99:4c:78:f2:81:e3:03:eb:99:8d:a3:70:aa:2e:7e:
56:d7:37:fb:ae:57:f8:5d:9d:f3:14:c9:b0:c0:23:93:c1:58:
55:0e:8b:a6:ed:4a:35:54:a0:54:da:da:bc:ca:4b:5c:2b:95:
e4:6a:e0:25:f3:6d:cf:41:79:67:f8:ef:8d:4f:20:08:86:96:
ea:20:80:98:1e:41:31:bd:cb:1e:27:e9:39:60:68:46:97:51:
42:a1:4c:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF3UCw0nby6YkpxGWoHYuqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjYxMDI2MDgyNTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDVkNWYwODA2ODljZjFjNjhjOWYwMzQ1OWM3NDUyODlhZTlkOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknUe/FcsYbGr6e0tays/n+CCZxht
EM9A96E04j6ketjlbldeD8OEoer2OzGJzzAQ1xaS+vtrz5Hc50oW55xPqOv/KfGw
stHR67wU5LWby6hYH9yD7X8b/93qqBV4+aS3n8iA0lbqdQYxSkXH8L6vQtMeoJJc
I9kAxh7pChqZPgYDOdQhx8ncF7Uth4hXDechPfuXYItbqod56XZIPfZgLsiSiOZI
tYsdmYZ2I3A+G4cWPyaqGwhPPiFH1Skbk3/g8JEgtwRxCG2tEfENLICDfov+ME7q
EFmzUveRh5aBZpYoGDCemJ7VymjhQ6Fm2B/H/FZgw8VqXt5XW8XH3xs5kQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM1dXwgGic8caMnwNFnHRSia6dkdMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvelYxZkNBYUp6eHhveWZBMFdjZEZLSnJwMlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEJHAwQA
UEJSMA0GCSqGSIb3DQEBCwUAA4IBAQCIoYEkhDadlXOKQ+WgfDQi/OEGp8b/WGSU
qL9Hw0bVEfqwvlYYBNby8i+298k9ekZySz2ndX09INotJNYhSXRoP4/qndc2XTzD
W4dJCCGpDVtJXIujvcpYmw3PIgzcV7nWLf3jbwaxG32NVT+HbpI4rfelmxsN5KHu
aN6NAgHeSZGaoN5Wy6k0fFmwIqMDkPD8uuGkTd9T5rdL/tQIsUi7gyIgTj2ZTHjy
geMD65mNo3CqLn5W1zf7rlf4XZ3zFMmwwCOTwVhVDoum7Uo1VKBU2tq8yktcK5Xk
auAl823PQXln+O+NTyAIhpbqIICYHkExvcseJ+k5YGhGl1FCoUyX
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:12:01 2026 by rpki-client