Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z33--z8fmaUgoEo0qedUdHnQfVs.roa
File: Z33--z8fmaUgoEo0qedUdHnQfVs.roa (raw, json)
Hash identifier: VvH5H6nGOnc3+fKWm101oJIkOcgH+tdZE8S3medxiP4=
Subject key identifier: 67:7D:FE:FB:3F:1F:99:A5:20:A0:4A:34:A9:E7:54:74:79:D0:7D:5B
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1821559D18A93E60783EA7266A88F072D
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z33--z8fmaUgoEo0qedUdHnQfVs.roa
Signing time: Wed 28 Oct 2026 10:36:39 +0000
ROA not before: Wed 28 Oct 2026 10:36:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35278
IP address blocks: 170.168.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 10:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:15:59:d1:8a:93:e6:07:83:ea:72:66:a8:8f:07:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 28 10:36:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=677dfefb3f1f99a520a04a34a9e7547479d07d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3e:86:9e:c1:79:c2:81:d8:b9:4a:80:0c:b9:
fb:1b:5b:9c:22:ca:92:f9:8a:a8:32:95:f4:8d:f9:
a2:9b:2e:14:c5:2b:1d:ee:49:98:2e:76:6d:a5:e2:
a6:61:e6:c1:f8:c6:11:0d:49:4e:a3:30:68:b0:80:
9c:0f:f4:58:9a:be:a7:66:05:39:4a:07:dc:e5:e4:
8f:aa:ac:56:ab:fd:28:2f:6e:ec:10:e9:a8:89:c8:
92:5e:2b:e4:ad:e4:09:30:e6:f8:a6:db:36:25:b2:
2c:55:7b:47:3d:ea:a7:2d:fb:f3:4e:c1:ea:5e:a3:
b4:1d:9a:57:ce:2b:c4:73:61:cc:dd:46:31:7b:7a:
74:64:a1:49:cd:83:30:1a:63:4d:49:3d:82:3a:eb:
d4:20:3c:a8:4b:49:5f:ef:64:12:e2:11:b8:85:42:
35:d4:f3:ad:23:c1:25:60:d0:76:6b:25:ae:5d:f9:
48:17:b1:18:03:46:d2:b6:7d:2f:c3:bb:fe:e3:dd:
18:97:39:68:76:3e:9b:62:9d:11:ad:46:e1:41:9b:
10:bc:1b:4a:3f:e0:bb:2b:65:dc:db:75:52:b2:69:
86:18:a1:36:00:bf:41:66:7e:b8:35:e5:c8:c4:49:
be:0c:86:4c:d7:98:9f:b7:36:cf:44:ad:67:9f:7f:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:FE:FB:3F:1F:99:A5:20:A0:4A:34:A9:E7:54:74:79:D0:7D:5B
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z33--z8fmaUgoEo0qedUdHnQfVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.150.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e6:fc:64:50:34:3c:da:dd:8c:4f:74:05:ad:d0:06:87:bf:
aa:5c:28:8c:68:31:e8:7f:6e:aa:71:af:8b:98:6f:55:7b:54:
b5:25:e7:56:57:4d:bc:c6:13:d3:f3:55:02:6b:32:95:bb:13:
24:32:40:82:ab:7d:e9:0a:9d:ab:6b:f1:6a:0a:27:82:fe:e9:
4e:27:a1:00:ad:a4:2e:5d:76:49:00:77:16:99:42:95:7c:94:
cc:5a:2a:5e:f3:b0:38:4f:38:f6:68:a9:d4:2f:d8:14:4a:76:
56:41:8d:50:90:d5:09:df:f8:a3:ff:65:92:7c:32:01:64:c7:
31:8a:35:04:93:ec:2d:67:60:09:55:ad:5d:f9:19:4a:62:9d:
9e:3e:4e:2d:3b:b2:9b:43:e9:bc:1c:69:2a:64:41:3e:bf:ac:
91:14:be:76:26:0a:9e:a8:a3:b2:86:e9:d7:5b:fa:22:bc:c4:
29:b1:af:69:5d:d0:4e:93:2c:af:e9:a8:94:26:32:3b:fb:54:
06:33:f7:45:ee:90:a4:9f:51:84:2f:b7:a6:aa:53:ea:19:1d:
9d:30:0a:22:6e:54:1e:f1:1a:37:ab:a1:dc:09:2f:e7:8b:39:
51:f7:68:8f:fd:95:1a:2a:56:81:51:2d:03:7c:6f:b8:d5:2a:
31:0e:ed:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGCFVnRipPmB4PqcmaojwctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYxMDI4MTAzNjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzdkZmVmYjNmMWY5OWE1MjBhMDRhMzRhOWU3NTQ3NDc5ZDA3ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+j6GnsF5woHYuUqADLn7G1ucIsqS
+YqoMpX0jfmimy4UxSsd7kmYLnZtpeKmYebB+MYRDUlOozBosICcD/RYmr6nZgU5
Sgfc5eSPqqxWq/0oL27sEOmoiciSXivkreQJMOb4pts2JbIsVXtHPeqnLfvzTsHq
XqO0HZpXzivEc2HM3UYxe3p0ZKFJzYMwGmNNST2COuvUIDyoS0lf72QS4hG4hUI1
1POtI8ElYNB2ayWuXflIF7EYA0bStn0vw7v+490Ylzlodj6bYp0RrUbhQZsQvBtK
P+C7K2Xc23VSsmmGGKE2AL9BZn64NeXIxEm+DIZM15iftzbPRK1nn3/bHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGd9/vs/H5mlIKBKNKnnVHR50H1bMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvWjMzLS16OGZtYVVnb0VvMHFlZFVkSG5RZlZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqqiWMA0G
CSqGSIb3DQEBCwUAA4IBAQA25vxkUDQ82t2MT3QFrdAGh7+qXCiMaDHof26qca+L
mG9Ve1S1JedWV028xhPT81UCazKVuxMkMkCCq33pCp2ra/FqCieC/ulOJ6EAraQu
XXZJAHcWmUKVfJTMWipe87A4Tzj2aKnUL9gUSnZWQY1QkNUJ3/ij/2WSfDIBZMcx
ijUEk+wtZ2AJVa1d+RlKYp2ePk4tO7KbQ+m8HGkqZEE+v6yRFL52JgqeqKOyhunX
W/oivMQpsa9pXdBOkyyv6aiUJjI7+1QGM/dF7pCkn1GEL7emqlPqGR2dMAoiblQe
8Ro3q6HcCS/nizlR92iP/ZUaKlaBUS0DfG+41SoxDu3A
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:24:11 2026 by rpki-client