Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/zxZqwJehpVybsjae4BmzmkoNkhQ.roa
File: zxZqwJehpVybsjae4BmzmkoNkhQ.roa (raw, json)
Hash identifier: rCR0I8R4ScKBM9S8D0yYBjLtRpnMLxYXODJP0P4tdPQ=
Subject key identifier: CF:16:6A:C0:97:A1:A5:5C:9B:B2:36:9E:E0:19:B3:9A:4A:0D:92:14
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 019FD25159AE6943DE5BF8E642757658B675
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/zxZqwJehpVybsjae4BmzmkoNkhQ.roa
Signing time: Wed 05 Aug 2026 14:26:14 +0000
ROA not before: Wed 05 Aug 2026 14:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34914
IP address blocks: 89.222.0.0/20 maxlen: 24
89.222.2.0/23 maxlen: 23
89.222.32.0/20 maxlen: 24
89.222.32.0/23 maxlen: 23
89.222.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:51:59:ae:69:43:de:5b:f8:e6:42:75:76:58:b6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Aug 5 14:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf166ac097a1a55c9bb2369ee019b39a4a0d9214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:a9:8c:10:aa:64:92:bc:f4:86:70:d7:58:
b4:21:04:8b:e8:49:f9:43:ac:cc:0e:5e:cb:9a:3a:
90:09:81:bf:1a:6f:e0:ac:52:dd:98:bd:a8:0d:41:
fc:18:1f:f7:98:dc:50:4e:7c:76:6f:1a:73:df:8d:
a9:e6:ce:c7:7c:ba:f5:09:b4:27:a1:e2:b6:70:5d:
e2:d9:d4:55:fa:00:5d:d9:26:22:b7:81:a4:7c:83:
56:74:7d:57:e8:d6:bb:7a:bb:7b:f2:fe:59:ef:a3:
78:42:fc:87:37:8a:9b:46:e4:26:46:2d:ed:a4:a1:
f5:bb:cc:6d:d6:14:ab:61:7c:78:86:3d:c3:df:a2:
39:74:1e:a2:08:49:f4:c9:9d:6a:37:7a:2e:22:78:
87:c8:6c:da:4d:89:81:4e:7a:09:61:12:09:55:d4:
3c:b1:25:de:af:ee:0c:66:fe:ff:31:d4:26:9d:78:
75:de:d7:33:68:fb:56:da:c8:f5:02:f8:17:e2:57:
b3:2f:83:86:db:dd:91:29:ad:b3:cf:ad:0d:93:04:
01:5e:d6:96:20:48:2f:ee:ef:d1:94:22:1d:92:b2:
e7:c5:8a:02:cd:19:74:c9:1f:03:8e:04:89:8a:cc:
d4:ca:73:aa:34:da:1e:b8:54:3e:1d:cb:e0:b0:d6:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:16:6A:C0:97:A1:A5:5C:9B:B2:36:9E:E0:19:B3:9A:4A:0D:92:14
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/zxZqwJehpVybsjae4BmzmkoNkhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.0.0/20
89.222.32.0/20
Signature Algorithm: sha256WithRSAEncryption
33:52:62:ba:6f:31:e3:aa:b5:01:1e:d2:02:df:fe:62:9d:26:
3c:39:20:21:0d:db:d9:63:50:87:9e:1f:a2:68:59:58:49:90:
93:de:5a:ff:56:de:fc:5f:d1:b5:53:1a:c1:d1:82:8f:89:da:
94:4a:00:86:f5:d7:9a:0e:7c:b1:1c:d3:78:37:7e:27:e8:6f:
9f:d0:db:70:f4:cb:ad:67:14:e1:89:70:60:b9:ce:26:6a:c7:
e9:fd:47:e9:6c:0f:04:fc:ca:fb:9f:85:db:1f:c8:09:45:cb:
69:83:e1:91:bf:b8:f3:02:34:b3:6e:33:78:77:15:81:8e:4f:
d9:55:eb:f8:19:b3:1c:7f:8e:ac:e7:ff:f5:59:aa:b9:92:4c:
f1:d3:cc:a9:f3:a7:7c:48:fd:c6:b6:80:66:4e:26:ac:5d:5c:
f8:d6:a1:f8:ff:b2:8d:14:58:70:f2:dd:c3:98:7d:72:67:5a:
e5:88:c8:99:0a:37:3f:5d:8f:8f:5b:76:60:b1:46:41:cf:20:
ec:9c:9a:41:67:23:e2:95:38:b5:87:10:14:b0:1a:c7:02:74:
ec:a3:41:aa:e5:2d:7f:1c:a6:77:f6:bc:78:01:47:3c:91:b6:
6c:8a:04:f1:b3:17:c4:67:7f:31:a3:58:6b:74:4e:98:82:a8:
b4:5d:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:58 2026 by rpki-client