Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/RZLACbFi7DDxMhSVk53rF6u_q5s.roa
File: RZLACbFi7DDxMhSVk53rF6u_q5s.roa (raw, json)
Hash identifier: qccsIYgKoKoAzDaa1FrisIRqKIFjJKfV6cslpJvk2g4=
Subject key identifier: 45:92:C0:09:B1:62:EC:30:F1:32:14:95:93:9D:EB:17:AB:BF:AB:9B
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FFF6E03A438628F265C6ED0EE5A2AF055
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/RZLACbFi7DDxMhSVk53rF6u_q5s.roa
Signing time: Fri 14 Aug 2026 08:40:27 +0000
ROA not before: Fri 14 Aug 2026 08:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 80.86.210.0/24 maxlen: 24
80.86.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:6e:03:a4:38:62:8f:26:5c:6e:d0:ee:5a:2a:f0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 14 08:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4592c009b162ec30f1321495939deb17abbfab9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:c3:4e:f2:fb:7f:47:b2:e4:94:a1:c8:45:
bb:ca:fe:0a:35:ff:41:81:e8:4b:e8:ac:7d:0d:4a:
2d:b6:e7:d5:d1:ad:74:05:4e:8e:ae:8a:81:ad:ed:
0d:68:91:47:52:2f:fc:d0:0b:57:64:26:ee:95:d4:
9c:06:71:7a:04:77:46:af:d5:0a:49:6e:ac:f1:e5:
a4:d0:f5:06:9b:10:c3:67:10:9e:84:8d:0a:5d:e4:
31:63:10:bf:71:29:09:d3:23:2d:70:92:5e:58:0d:
63:bd:14:76:83:a8:b1:7a:8c:6a:b3:62:97:55:4b:
f5:83:83:40:d7:86:8a:09:96:db:ff:d3:fb:81:23:
0c:9f:70:12:70:13:16:ee:d3:45:d1:49:f3:7d:63:
21:5d:7f:67:26:2a:29:dc:07:7e:07:04:f8:5d:20:
1a:4d:f4:ba:b8:f4:44:11:ae:93:09:f6:d7:6d:99:
12:04:1e:47:99:df:5d:6b:66:78:66:26:09:e8:55:
e4:a6:55:0e:3d:c4:1f:42:a0:3a:1c:b8:f6:58:5c:
66:fa:7e:bf:6c:13:5c:b9:28:1c:1a:71:61:1f:4b:
d1:39:3e:e1:99:32:0d:f0:01:4b:82:a7:0f:ec:db:
e0:09:95:98:45:87:94:bf:e5:91:66:ac:a7:57:e0:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:C0:09:B1:62:EC:30:F1:32:14:95:93:9D:EB:17:AB:BF:AB:9B
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/RZLACbFi7DDxMhSVk53rF6u_q5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.210.0/24
80.86.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ab:70:e2:df:24:4a:0b:3c:53:5b:d6:d5:c9:5f:bc:24:2f:
cc:8e:69:47:c0:4e:e8:be:ea:fd:c2:de:81:16:c8:6d:f5:1f:
ff:30:c4:14:94:4c:d3:ec:de:29:59:57:74:a2:06:70:d9:4b:
8f:d3:5d:02:ff:f7:e3:b4:3c:db:5f:74:2a:a9:5a:b7:38:10:
90:ed:73:6b:46:41:c0:00:e0:b6:d3:ff:35:6c:c3:f4:0e:dc:
a1:fb:04:90:dd:86:4a:0a:4f:38:a7:8e:73:5d:e0:08:42:d3:
1b:28:8b:a2:9f:53:58:21:6c:80:67:a4:42:34:cd:d6:45:56:
64:88:93:0b:05:ce:8d:0d:ce:e2:c2:7d:0b:51:57:43:ba:ee:
91:b8:ae:a7:d3:d9:f1:5c:4e:5e:c6:6f:3d:ba:a2:dc:4a:0e:
f9:8b:7d:ca:6e:f3:a1:89:f8:5c:2c:ae:c3:46:e9:15:e7:d2:
57:63:40:ff:37:bf:96:42:99:f0:3c:49:49:35:4b:38:0a:10:
9c:9b:60:16:e4:7f:8b:19:c3:78:46:0e:98:43:b5:05:05:3b:
c1:33:02:1b:29:89:b6:6d:16:19:97:9a:02:71:4b:f0:18:86:
17:e7:bf:fa:96:4a:24:94:7b:74:2b:05:cf:c0:11:06:a3:b6:
89:65:d5:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ//bgOkOGKPJlxu0O5aKvBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjYwODE0MDg0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkyYzAwOWIxNjJlYzMwZjEzMjE0OTU5MzlkZWIxN2FiYmZhYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/LDTvL7f0ey5JShyEW7yv4KNf9B
gehL6Kx9DUottufV0a10BU6OroqBre0NaJFHUi/80AtXZCbuldScBnF6BHdGr9UK
SW6s8eWk0PUGmxDDZxCehI0KXeQxYxC/cSkJ0yMtcJJeWA1jvRR2g6ixeoxqs2KX
VUv1g4NA14aKCZbb/9P7gSMMn3AScBMW7tNF0UnzfWMhXX9nJiop3Ad+BwT4XSAa
TfS6uPREEa6TCfbXbZkSBB5Hmd9da2Z4ZiYJ6FXkplUOPcQfQqA6HLj2WFxm+n6/
bBNcuSgcGnFhH0vROT7hmTIN8AFLgqcP7NvgCZWYRYeUv+WRZqynV+D5mwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEWSwAmxYuww8TIUlZOd6xerv6ubMB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvUlpMQUNiRmk3RER4TWhTVms1M3JGNnVfcTVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUFbSAwQA
UFbVMA0GCSqGSIb3DQEBCwUAA4IBAQCQq3Di3yRKCzxTW9bVyV+8JC/MjmlHwE7o
vur9wt6BFsht9R//MMQUlEzT7N4pWVd0ogZw2UuP010C//fjtDzbX3QqqVq3OBCQ
7XNrRkHAAOC20/81bMP0Dtyh+wSQ3YZKCk84p45zXeAIQtMbKIuin1NYIWyAZ6RC
NM3WRVZkiJMLBc6NDc7iwn0LUVdDuu6RuK6n09nxXE5exm89uqLcSg75i33KbvOh
ifhcLK7DRukV59JXY0D/N7+WQpnwPElJNUs4ChCcm2AW5H+LGcN4Rg6YQ7UFBTvB
MwIbKYm2bRYZl5oCcUvwGIYX57/6lkoklHt0KwXPwBEGo7aJZdXD
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:52 2026 by rpki-client