Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa
File: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (raw, json)
Hash identifier: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=
Subject key identifier: 66:AC:16:00:69:2C:7E:26:4A:29:CB:7C:4E:86:7F:27:F2:CD:83:0A
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019CE158ADC4176B75DBF710E0371ECE11E8
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa
Signing time: Thu 12 Mar 2026 09:20:11 +0000
ROA not before: Thu 12 Mar 2026 09:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7346
IP address blocks: 91.225.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:58:ad:c4:17:6b:75:db:f7:10:e0:37:1e:ce:11:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 12 09:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66ac1600692c7e264a29cb7c4e867f27f2cd830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:82:d5:02:01:6b:72:14:d6:5c:d1:6f:de:
1a:71:68:58:92:69:2d:25:24:f4:0f:c9:74:84:b8:
3c:40:95:af:0b:00:f4:62:e3:81:95:63:d3:c4:61:
44:72:b3:53:8f:f3:9d:17:f8:3c:c2:a8:e9:0f:8c:
d4:0e:96:03:9a:45:89:dc:12:ee:b1:86:0a:2c:c1:
b1:6a:a4:87:d0:81:79:ed:e9:af:19:65:f9:c8:65:
c1:d6:69:36:ad:67:24:5a:de:7a:cb:f3:fb:7f:55:
c6:82:7d:89:d7:a9:09:52:ae:e4:2e:99:6b:33:16:
ce:ba:89:97:62:34:ed:9f:f1:4e:3b:90:54:ff:69:
17:30:bc:45:41:d9:49:b2:97:25:e5:94:30:5f:65:
23:87:c7:59:ed:af:b5:d9:fc:54:96:c1:2b:29:bd:
e1:27:ba:4a:df:35:8c:24:a0:04:ee:ca:29:7f:46:
49:ca:f4:64:31:a2:43:60:9e:8c:1e:cd:6d:4c:e1:
d4:8b:d6:98:39:59:0a:01:a0:c3:e7:a4:69:ff:3d:
dc:2f:9f:51:6a:c2:91:c7:a1:e8:aa:f8:31:ce:29:
4f:49:07:3a:bd:e9:87:b4:d3:0a:0c:61:35:ca:5b:
97:6e:03:86:c5:3d:58:3e:ce:ad:3e:c6:97:fa:0e:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:16:00:69:2C:7E:26:4A:29:CB:7C:4E:86:7F:27:F2:CD:83:0A
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:78:89:8d:2d:62:fc:ef:e5:63:76:e2:78:f9:18:b2:bd:77:
53:bc:33:43:a0:3b:fd:ed:78:ba:e3:34:22:f6:e3:18:dc:65:
de:8e:b1:06:8b:12:9f:17:25:82:90:c9:2f:b2:40:a2:f4:bd:
65:dc:57:ab:80:eb:a0:d1:f3:d7:1d:8b:67:a7:fd:57:38:49:
e8:d1:82:0f:4d:9c:d2:ee:48:a2:d5:1e:90:51:f9:10:46:91:
91:79:09:f9:f8:85:4b:fd:e2:19:1f:2d:16:f5:49:9c:bb:30:
95:60:28:9c:bb:e2:6c:0f:80:c4:ff:1a:f3:71:ed:15:69:cd:
59:f9:48:69:53:55:ad:a0:5c:c1:d6:83:b4:e2:cd:19:f0:23:
57:08:e7:12:3e:68:75:b8:8f:59:fe:9a:6f:c2:7f:04:16:5a:
73:c8:39:b5:25:55:a5:45:f1:24:d4:68:e7:63:fb:46:91:48:
41:ed:f4:51:39:36:d7:7c:08:22:60:a8:ce:b5:f7:07:f9:74:
04:48:62:80:0c:ee:36:9f:8a:b7:40:ca:05:05:d6:ec:74:66:
b8:19:96:b8:f7:b1:be:16:cc:22:6b:4b:06:87:59:c7:e3:a2:
22:c6:2d:6e:ca:66:a1:2e:ca:54:c4:bd:be:42:e9:10:09:08:
c1:ee:a2:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzhWK3EF2t12/cQ4DcezhHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjYwMzEyMDkyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmFjMTYwMDY5MmM3ZTI2NGEyOWNiN2M0ZTg2N2YyN2YyY2Q4MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSWC1QIBa3IU1lzRb94acWhYkmkt
JST0D8l0hLg8QJWvCwD0YuOBlWPTxGFEcrNTj/OdF/g8wqjpD4zUDpYDmkWJ3BLu
sYYKLMGxaqSH0IF57emvGWX5yGXB1mk2rWckWt56y/P7f1XGgn2J16kJUq7kLplr
MxbOuomXYjTtn/FOO5BU/2kXMLxFQdlJspcl5ZQwX2Ujh8dZ7a+12fxUlsErKb3h
J7pK3zWMJKAE7sopf0ZJyvRkMaJDYJ6MHs1tTOHUi9aYOVkKAaDD56Rp/z3cL59R
asKRx6HoqvgxzilPSQc6vemHtNMKDGE1yluXbgOGxT1YPs6tPsaX+g5VDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGasFgBpLH4mSinLfE6GfyfyzYMKMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvWnF3V0FHa3NmaVpLS2N0OFRvWl9KX0xOZ3dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+HjMA0G
CSqGSIb3DQEBCwUAA4IBAQBteImNLWL87+VjduJ4+RiyvXdTvDNDoDv97Xi64zQi
9uMY3GXejrEGixKfFyWCkMkvskCi9L1l3FergOug0fPXHYtnp/1XOEno0YIPTZzS
7kii1R6QUfkQRpGReQn5+IVL/eIZHy0W9UmcuzCVYCicu+JsD4DE/xrzce0Vac1Z
+UhpU1WtoFzB1oO04s0Z8CNXCOcSPmh1uI9Z/ppvwn8EFlpzyDm1JVWlRfEk1Gjn
Y/tGkUhB7fRROTbXfAgiYKjOtfcH+XQESGKADO42n4q3QMoFBdbsdGa4GZa497G+
Fswia0sGh1nH46Iixi1uymahLspUxL2+QukQCQjB7qK6
-----END CERTIFICATE-----
Generated at Mon Mar 16 13:03:25 2026 by rpki-client