Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZvTrAkW559sl_hSuaMsI6H4qEDk.roa
File: ZvTrAkW559sl_hSuaMsI6H4qEDk.roa (raw, json)
Hash identifier: uosnB+J+DswkmSZV02YJ87BayuLZIm5t0bijSC1v5oE=
Subject key identifier: 66:F4:EB:02:45:B9:E7:DB:25:FE:14:AE:68:CB:08:E8:7E:2A:10:39
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A0865B0744236C977A2E424BBE757BDCCE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZvTrAkW559sl_hSuaMsI6H4qEDk.roa
Signing time: Wed 09 Sep 2026 13:28:27 +0000
ROA not before: Wed 09 Sep 2026 13:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61998
IP address blocks: 79.172.210.0/24 maxlen: 24
79.172.212.0/24 maxlen: 24
87.229.77.0/24 maxlen: 24
217.144.53.0/24 maxlen: 24
217.144.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:5b:07:44:23:6c:97:7a:2e:42:4b:be:75:7b:dc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 9 13:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66f4eb0245b9e7db25fe14ae68cb08e87e2a1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:56:da:5c:0f:9d:31:b8:da:da:65:61:2e:
90:c6:26:58:b1:3e:50:63:9c:59:f9:08:45:04:f2:
92:8b:33:6f:b8:20:c0:91:5b:88:00:66:ca:9f:cd:
a2:7c:a7:ea:6c:50:78:8f:a1:be:dc:84:08:fe:c8:
78:06:d2:6e:26:ff:49:fd:bf:6b:ef:97:ca:9b:5d:
ba:f2:95:39:bb:03:b9:5a:bc:14:8f:7b:16:c3:66:
25:5e:16:5e:2d:ec:f0:51:0a:e6:6e:78:5c:cb:e9:
51:40:16:10:e8:63:a3:59:17:2b:b3:5b:2f:9a:cf:
05:5e:95:35:5f:eb:fd:d8:50:c3:4b:77:55:19:b8:
25:4c:f2:0e:21:5a:8b:83:6a:17:94:9c:32:c6:2c:
82:75:9c:b1:8c:95:18:c7:ee:88:30:17:23:7a:b1:
91:8b:dc:fc:45:12:06:a5:a6:36:29:74:10:3b:94:
74:9b:6d:2c:f1:32:5d:6b:5d:cb:89:17:15:eb:50:
95:7c:d2:10:4c:39:a7:c9:84:30:9d:45:52:db:0f:
60:68:69:ee:24:20:6f:e0:32:13:df:2a:68:9a:85:
05:cd:48:58:51:6c:c1:a1:94:da:cb:42:1a:c1:ce:
b8:4d:ee:96:cb:7e:91:b4:a4:79:03:23:02:b2:ec:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:EB:02:45:B9:E7:DB:25:FE:14:AE:68:CB:08:E8:7E:2A:10:39
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZvTrAkW559sl_hSuaMsI6H4qEDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.210.0/24
79.172.212.0/24
87.229.77.0/24
217.144.53.0-217.144.54.255
Signature Algorithm: sha256WithRSAEncryption
3b:a6:0c:95:89:bd:8a:07:aa:73:5b:f5:9d:f7:bb:04:6d:14:
fb:2c:e7:0c:41:60:ff:b8:9c:9b:62:4d:84:8e:0f:1f:53:11:
84:8f:56:65:f7:63:6b:06:cc:ae:59:39:ce:2c:f4:54:3b:1d:
ed:de:83:d9:df:69:40:3d:95:12:96:a7:9f:ec:e2:41:9b:1b:
2c:69:9d:31:b4:a4:63:c6:a3:97:85:9c:b1:78:61:7a:fa:9d:
0e:5b:62:5f:1b:ff:1e:dd:b5:94:d6:38:06:35:6c:41:f8:93:
6c:fa:f9:3c:8a:2f:6e:07:85:00:33:6f:97:37:ce:69:c5:b9:
c5:91:31:a6:96:e0:b4:73:d2:6f:df:34:e1:03:5c:31:1b:f0:
00:7f:ee:27:c5:ac:df:0c:69:be:e2:2b:a4:12:85:cc:05:cb:
e8:e0:a0:a4:5a:b4:2c:43:0f:73:f7:30:c1:86:47:71:56:28:
23:a5:b3:37:c4:5f:fc:c3:b3:c2:3f:9a:4b:8f:d8:08:95:e2:
0c:5d:24:47:32:5f:11:02:60:5e:b7:81:61:a7:92:e4:18:43:
3e:c4:6d:da:10:01:4d:6d:69:4f:7e:cb:26:3f:de:7b:d9:96:
fd:c5:2d:5b:c2:61:3d:51:53:fe:67:af:6b:9b:88:3e:4e:0d:
42:a9:1a:51
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaCGWwdEI2yXei5CS751e9zOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwOTA5MTMyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmY0ZWIwMjQ1YjllN2RiMjVmZTE0YWU2OGNiMDhlODdlMmExMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCRW2lwPnTG42tplYS6QxiZYsT5Q
Y5xZ+QhFBPKSizNvuCDAkVuIAGbKn82ifKfqbFB4j6G+3IQI/sh4BtJuJv9J/b9r
75fKm1268pU5uwO5WrwUj3sWw2YlXhZeLezwUQrmbnhcy+lRQBYQ6GOjWRcrs1sv
ms8FXpU1X+v92FDDS3dVGbglTPIOIVqLg2oXlJwyxiyCdZyxjJUYx+6IMBcjerGR
i9z8RRIGpaY2KXQQO5R0m20s8TJda13LiRcV61CVfNIQTDmnyYQwnUVS2w9gaGnu
JCBv4DIT3ypomoUFzUhYUWzBoZTay0Iawc64Te6Wy36RtKR5AyMCsuxUJwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGb06wJFuefbJf4UrmjLCOh+KhA5MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvWnZUckFrVzU1OXNsX2hTdWFNc0k2SDRxRURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAT6zSAwQA
T6zUAwQAV+VNMAwDBADZkDUDBADZkDYwDQYJKoZIhvcNAQELBQADggEBADumDJWJ
vYoHqnNb9Z33uwRtFPss5wxBYP+4nJtiTYSODx9TEYSPVmX3Y2sGzK5ZOc4s9FQ7
He3eg9nfaUA9lRKWp5/s4kGbGyxpnTG0pGPGo5eFnLF4YXr6nQ5bYl8b/x7dtZTW
OAY1bEH4k2z6+TyKL24HhQAzb5c3zmnFucWRMaaW4LRz0m/fNOEDXDEb8AB/7ifF
rN8Mab7iK6QShcwFy+jgoKRatCxDD3P3MMGGR3FWKCOlszfEX/zDs8I/mkuP2AiV
4gxdJEcyXxECYF63gWGnkuQYQz7EbdoQAU1taU9+yyY/3nvZlv3FLVvCYT1RU/5n
r2ubiD5ODUKpGlE=
-----END CERTIFICATE-----
Generated at Thu Sep 17 05:28:55 2026 by rpki-client