Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/zxwBYj7Qvavntwe91JyyGXm7I_U.roa
File: zxwBYj7Qvavntwe91JyyGXm7I_U.roa (raw, json)
Hash identifier: XI61RZHPW+HfdKW9XwXqRDSc0Vn+HfVmtVMBvv3braE=
Subject key identifier: CF:1C:01:62:3E:D0:BD:AB:E7:B7:07:BD:D4:9C:B2:19:79:BB:23:F5
Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial: 01A11CD643EBCA0CFF42855C7E41275310A6
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/zxwBYj7Qvavntwe91JyyGXm7I_U.roa
Signing time: Thu 08 Oct 2026 18:46:06 +0000
ROA not before: Thu 08 Oct 2026 18:46:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24703
IP address blocks: 147.78.116.0/24 maxlen: 24
176.111.48.0/23 maxlen: 23
176.111.48.0/24 maxlen: 24
176.111.49.0/24 maxlen: 24
176.111.57.0/24 maxlen: 24
176.111.58.0/23 maxlen: 23
176.111.58.0/24 maxlen: 24
176.111.59.0/24 maxlen: 24
176.111.60.0/22 maxlen: 22
176.111.60.0/24 maxlen: 24
176.111.61.0/24 maxlen: 24
176.111.62.0/24 maxlen: 24
176.111.63.0/24 maxlen: 24
193.111.8.0/23 maxlen: 23
193.111.8.0/24 maxlen: 24
193.111.9.0/24 maxlen: 24
195.128.16.0/22 maxlen: 22
195.128.16.0/24 maxlen: 24
195.128.17.0/24 maxlen: 24
195.128.18.0/24 maxlen: 24
195.128.19.0/24 maxlen: 24
195.234.212.0/22 maxlen: 22
195.234.212.0/24 maxlen: 24
195.234.213.0/24 maxlen: 24
195.234.214.0/24 maxlen: 24
195.234.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:d6:43:eb:ca:0c:ff:42:85:5c:7e:41:27:53:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Validity
Not Before: Oct 8 18:46:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf1c01623ed0bdabe7b707bdd49cb21979bb23f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:09:af:7e:65:d5:e6:43:0b:9c:b7:08:d6:
4a:73:12:5b:e6:b4:d6:0f:6a:cc:f7:07:a7:e3:c6:
98:58:16:10:4a:f3:1a:13:92:fc:ae:9c:a0:dc:96:
94:a0:7a:03:bc:51:74:a8:bf:90:4b:ba:ce:c6:a6:
7a:f5:5c:34:8d:ce:dd:93:1c:dc:cf:2a:e6:77:58:
be:fe:db:95:01:3f:1a:ae:53:a7:0e:c6:ef:06:40:
39:9f:9c:38:ba:9e:87:56:2b:a1:49:2a:0d:40:19:
36:48:1c:c8:25:83:1e:f6:2a:16:6f:6b:91:a2:f9:
7c:05:08:da:1c:9e:0d:4d:58:e4:20:89:ed:28:6c:
d3:eb:35:63:34:e3:2f:dc:e1:9f:29:3e:2b:5d:e6:
be:79:a6:49:b4:a3:b2:b5:61:a4:d9:d9:53:d4:ed:
06:18:60:19:2c:49:2d:70:0e:92:a7:13:b7:aa:c6:
c4:c3:a1:ca:b0:6f:3d:8e:b9:e6:37:f4:e9:94:2a:
8d:b4:bd:bb:7a:c2:4a:ce:34:f1:77:8b:2e:13:e4:
22:e4:7b:1c:5c:06:80:f8:d4:d9:11:8a:46:77:14:
26:33:de:01:ee:ac:03:9a:61:6b:1f:26:b7:35:54:
28:a5:af:ee:c1:dd:96:a6:37:48:21:0e:ae:fb:d9:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:01:62:3E:D0:BD:AB:E7:B7:07:BD:D4:9C:B2:19:79:BB:23:F5
X509v3 Authority Key Identifier:
keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/zxwBYj7Qvavntwe91JyyGXm7I_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.116.0/24
176.111.48.0/23
176.111.57.0-176.111.63.255
193.111.8.0/23
195.128.16.0/22
195.234.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:e5:80:3a:4e:3d:57:34:2d:39:dd:a8:b6:71:d9:f3:b7:92:
8f:8c:57:2e:a7:b1:14:1d:52:94:2b:33:9e:fd:dc:d0:56:16:
f2:c1:6d:6e:94:7d:15:5a:99:fa:7c:a6:93:63:46:1a:5f:9a:
76:1b:83:1c:be:ec:c5:5f:6e:c9:0a:92:1a:42:4f:d8:b0:0b:
dd:0c:f7:42:78:9b:6a:94:bc:7f:c8:8d:11:f9:ed:88:30:17:
a0:87:cc:03:f2:32:34:2c:48:96:a6:75:dd:f7:5b:d1:1c:bf:
e7:86:fa:79:99:89:52:50:8b:53:db:85:1a:53:f4:2a:dd:b4:
2d:8d:34:34:8c:2d:ef:16:b2:44:d0:e5:b4:cb:c3:f3:38:25:
0a:5f:95:cd:b2:5f:9e:66:34:9b:eb:28:48:32:70:a7:ad:e9:
65:f6:c1:da:2e:af:7e:c9:47:bb:c2:29:c7:24:7d:39:db:11:
e1:e2:5e:08:4c:69:a2:5d:a5:dc:8b:ff:b8:d2:33:dd:9d:f0:
85:cb:82:bd:1b:cc:05:1d:34:d3:22:c3:52:2c:46:7a:87:01:
5a:21:b7:fd:57:cb:ae:c9:90:96:94:25:9b:6d:57:29:6e:1b:
fe:6e:b9:3d:5b:3f:42:61:19:86:81:db:cf:5a:dc:30:96:ed:
90:3f:13:29
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAaEc1kPrygz/QoVcfkEnUxCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm
ZjFlMDkwHhcNMjYxMDA4MTg0NjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjFjMDE2MjNlZDBiZGFiZTdiNzA3YmRkNDljYjIxOTc5YmIyM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1EJr35l1eZDC5y3CNZKcxJb5rTW
D2rM9wen48aYWBYQSvMaE5L8rpyg3JaUoHoDvFF0qL+QS7rOxqZ69Vw0jc7dkxzc
zyrmd1i+/tuVAT8arlOnDsbvBkA5n5w4up6HViuhSSoNQBk2SBzIJYMe9ioWb2uR
ovl8BQjaHJ4NTVjkIIntKGzT6zVjNOMv3OGfKT4rXea+eaZJtKOytWGk2dlT1O0G
GGAZLEktcA6SpxO3qsbEw6HKsG89jrnmN/TplCqNtL27esJKzjTxd4suE+Qi5Hsc
XAaA+NTZEYpGdxQmM94B7qwDmmFrHya3NVQopa/uwd2WpjdIIQ6u+9mLHwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFM8cAWI+0L2r57cHvdScshl5uyP1MB8GA1UdIwQY
MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt
MDZjOTI5NmYwOGEyLzEvenh3QllqN1F2YXZudHdlOTFKeXlHWG03SV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy
LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAk050AwQB
sG8wMAwDBACwbzkDBAawbwADBAHBbwgDBALDgBADBALD6tQwDQYJKoZIhvcNAQEL
BQADggEBAH/lgDpOPVc0LTndqLZx2fO3ko+MVy6nsRQdUpQrM5793NBWFvLBbW6U
fRVamfp8ppNjRhpfmnYbgxy+7MVfbskKkhpCT9iwC90M90J4m2qUvH/IjRH57Ygw
F6CHzAPyMjQsSJamdd33W9Ecv+eG+nmZiVJQi1PbhRpT9CrdtC2NNDSMLe8WskTQ
5bTLw/M4JQpflc2yX55mNJvrKEgycKet6WX2wdour37JR7vCKcckfTnbEeHiXghM
aaJdpdyL/7jSM92d8IXLgr0bzAUdNNMiw1IsRnqHAVoht/1Xy67JkJaUJZttVylu
G/5uuT1bP0JhGYaB289a3DCW7ZA/Eyk=
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:43 2026 by rpki-client