Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzjGPwTWcYkSx3HkyxXmdJhZRhw.roa
File: zzjGPwTWcYkSx3HkyxXmdJhZRhw.roa (raw, json)
Hash identifier: 4xTV6hWlt3eGpGxdz6uRywBd59pqTTmDt/wUEwj15RE=
Subject key identifier: CF:38:C6:3F:04:D6:71:89:12:C7:71:E4:CB:15:E6:74:98:59:46:1C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A120259271A16F161990FA3C75D97D77A3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzjGPwTWcYkSx3HkyxXmdJhZRhw.roa
Signing time: Fri 09 Oct 2026 10:11:35 +0000
ROA not before: Fri 09 Oct 2026 10:11:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218462
IP address blocks: 212.192.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:25:92:71:a1:6f:16:19:90:fa:3c:75:d9:7d:77:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 10:11:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf38c63f04d6718912c771e4cb15e6749859461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:6f:68:73:e6:00:5b:27:c3:91:0a:38:ff:
4e:bb:8c:4f:77:e8:7e:2f:99:25:99:09:52:a3:11:
b4:67:14:33:3f:d7:38:73:c0:e2:d2:0a:4f:28:ad:
cd:16:ed:57:f9:c0:9f:5b:8a:6a:7a:30:53:e9:e8:
42:4f:f6:f3:a4:b9:bc:48:96:96:4c:9e:69:a1:67:
0b:a5:e2:96:f8:dc:49:0d:53:4a:24:51:33:1e:7d:
cc:72:82:cf:ee:91:ca:52:c2:be:73:42:89:70:90:
da:65:62:e2:13:89:92:a9:7c:2d:f5:62:fb:7b:65:
c9:8c:6d:a6:41:81:9c:7a:8d:99:b5:ee:6e:fc:09:
81:cc:cd:52:78:95:b7:90:d7:e5:2f:29:1d:34:78:
f8:43:23:e1:19:b4:d9:49:fe:ee:d1:fc:06:a5:f6:
79:fe:15:06:49:90:df:34:85:95:98:51:83:92:a5:
27:b2:9b:fd:f4:5e:8f:f7:82:24:71:97:5b:18:f9:
c0:1e:20:cd:d8:29:0b:10:0f:3e:1b:08:70:88:e2:
84:86:06:2e:cf:67:9d:b4:af:c2:fd:06:1c:d4:7a:
7e:34:64:a3:ab:41:cc:5f:34:2d:31:71:c1:86:26:
ad:a5:01:f2:46:cc:58:04:a6:79:53:b1:50:d3:9b:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:38:C6:3F:04:D6:71:89:12:C7:71:E4:CB:15:E6:74:98:59:46:1C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzjGPwTWcYkSx3HkyxXmdJhZRhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f4:21:b3:94:39:cd:7d:6c:fc:fe:70:44:2d:a6:17:b8:5c:
39:4d:ac:a5:4a:a0:fb:9c:13:89:9f:99:2f:7c:f7:e2:00:ec:
19:44:2f:c0:33:14:37:01:58:b6:57:1d:ad:8b:63:b0:5b:f2:
e2:28:19:7e:38:cf:7e:32:6b:f3:32:bb:54:28:94:30:7d:15:
5a:3a:12:8d:09:df:40:8d:d7:4c:1a:3b:b2:dd:ce:a6:3d:19:
27:2d:16:63:20:41:df:fe:63:0b:19:37:9d:3f:01:98:25:e8:
bf:28:2e:f4:96:5b:c5:ea:a9:0a:1a:43:8d:4a:f4:95:ad:d2:
a4:9b:42:61:4b:04:82:c1:31:7a:2c:8d:f0:c8:94:0f:2f:de:
00:8e:1f:30:7d:78:b9:56:0f:ca:3a:27:22:c6:82:db:ee:6e:
0b:a1:36:8e:d5:79:91:73:1e:0f:68:9e:a8:48:ec:6c:70:0f:
34:d6:a8:55:02:2c:04:37:d1:5b:69:77:0c:bc:32:2d:58:27:
7d:10:46:1a:71:a3:d1:a7:41:a5:9f:3f:a7:c8:7d:2d:f2:39:
4e:13:4a:9e:84:a6:50:8e:a9:e4:b0:32:f3:0c:6b:c5:23:b2:
bb:42:e2:00:e7:7b:08:34:5e:d8:74:b6:6a:16:28:c6:e3:f6:
82:bd:3d:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEgJZJxoW8WGZD6PHXZfXejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDA5MTAxMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjM4YzYzZjA0ZDY3MTg5MTJjNzcxZTRjYjE1ZTY3NDk4NTk0NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRFvaHPmAFsnw5EKOP9Ou4xPd+h+
L5klmQlSoxG0ZxQzP9c4c8Di0gpPKK3NFu1X+cCfW4pqejBT6ehCT/bzpLm8SJaW
TJ5poWcLpeKW+NxJDVNKJFEzHn3McoLP7pHKUsK+c0KJcJDaZWLiE4mSqXwt9WL7
e2XJjG2mQYGceo2Zte5u/AmBzM1SeJW3kNflLykdNHj4QyPhGbTZSf7u0fwGpfZ5
/hUGSZDfNIWVmFGDkqUnspv99F6P94IkcZdbGPnAHiDN2CkLEA8+GwhwiOKEhgYu
z2edtK/C/QYc1Hp+NGSjq0HMXzQtMXHBhiatpQHyRsxYBKZ5U7FQ05uBCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM84xj8E1nGJEsdx5MsV5nSYWUYcMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvenpqR1B3VFdjWWtTeDNIa3l4WG1kSmhaUmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MAFMA0G
CSqGSIb3DQEBCwUAA4IBAQAB9CGzlDnNfWz8/nBELaYXuFw5TaylSqD7nBOJn5kv
fPfiAOwZRC/AMxQ3AVi2Vx2ti2OwW/LiKBl+OM9+MmvzMrtUKJQwfRVaOhKNCd9A
jddMGjuy3c6mPRknLRZjIEHf/mMLGTedPwGYJei/KC70llvF6qkKGkONSvSVrdKk
m0JhSwSCwTF6LI3wyJQPL94Ajh8wfXi5Vg/KOicixoLb7m4LoTaO1XmRcx4PaJ6o
SOxscA801qhVAiwEN9FbaXcMvDItWCd9EEYacaPRp0Glnz+nyH0t8jlOE0qehKZQ
jqnksDLzDGvFI7K7QuIA53sINF7YdLZqFijG4/aCvT16
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:21 2026 by rpki-client