Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/zFqREBgVNzI2E15fdQInesLKPTw.roa
File: zFqREBgVNzI2E15fdQInesLKPTw.roa (raw, json)
Hash identifier: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=
Subject key identifier: CC:5A:91:10:18:15:37:32:36:13:5E:5F:75:02:27:7A:C2:CA:3D:3C
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019EE08D12413A0F0046A3AB71712CDB91FB
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/zFqREBgVNzI2E15fdQInesLKPTw.roa
Signing time: Fri 19 Jun 2026 15:43:21 +0000
ROA not before: Fri 19 Jun 2026 15:43:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60246
IP address blocks: 80.72.20.0/23 maxlen: 32
80.72.24.0/23 maxlen: 32
85.198.120.0/21 maxlen: 32
92.118.72.0/23 maxlen: 32
95.174.96.0/20 maxlen: 32
95.174.112.0/21 maxlen: 32
95.174.120.0/24 maxlen: 32
95.174.123.0/24 maxlen: 32
95.174.124.0/22 maxlen: 32
178.212.139.0/24 maxlen: 32
178.248.0.0/22 maxlen: 32
178.248.4.0/23 maxlen: 32
178.248.6.0/23 maxlen: 32
185.9.184.0/24 maxlen: 32
185.9.186.0/23 maxlen: 32
185.230.240.0/23 maxlen: 32
185.230.242.0/24 maxlen: 32
2a00:8740::/46 maxlen: 128
2a00:8740:10::/44 maxlen: 128
2a00:8740:20::/44 maxlen: 128
2a00:8740:30::/44 maxlen: 128
2a00:8740:80::/48 maxlen: 128
2a00:8740:100::/48 maxlen: 128
2a00:8740:110::/47 maxlen: 128
2a00:8740:112::/48 maxlen: 128
2a00:8740:113::/48 maxlen: 128
2a00:8740:201::/48 maxlen: 128
2a00:8740:ff00::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:8d:12:41:3a:0f:00:46:a3:ab:71:71:2c:db:91:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jun 19 15:43:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc5a91101815373236135e5f7502277ac2ca3d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e7:48:fb:3e:77:78:e7:c2:3f:92:ba:91:87:
2c:25:c8:d1:da:38:9d:46:0b:23:43:2c:e0:b3:e9:
25:e7:61:f6:c8:e9:15:0f:bf:af:01:f1:09:8b:b0:
a8:a0:9c:c0:30:f7:9c:38:77:2b:e3:01:52:45:a6:
4e:5a:fc:6f:8a:d0:85:0e:97:30:45:36:ab:6d:39:
d6:33:d9:44:6a:09:b4:ac:63:8f:67:88:45:b0:45:
e1:86:2f:2d:5b:5a:2f:b2:79:01:38:c2:4c:1f:4a:
ce:57:e6:a6:35:5e:90:c7:13:9d:3e:74:89:4c:c6:
f4:54:5b:c2:75:34:9c:68:28:bf:30:c6:72:50:03:
8d:80:15:7b:ba:eb:e6:ed:84:82:29:3f:d3:05:b0:
de:bb:e0:0f:0d:71:56:ca:c5:e5:2e:6e:71:ff:f5:
b4:46:61:f0:b5:ca:40:5d:71:66:2b:61:e7:48:6d:
f4:ca:7f:bf:51:37:d6:97:f0:cb:2a:9c:27:6c:4b:
1b:e5:fe:e1:da:67:2b:d5:d4:ae:25:0a:b5:b7:04:
63:d6:69:45:06:5a:74:6e:63:41:05:1a:e7:2d:b3:
dc:0a:bb:43:9b:33:92:72:f7:d8:65:8d:82:a7:4c:
b0:33:4c:08:9e:6a:68:23:10:d2:75:96:1a:dd:bd:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:91:10:18:15:37:32:36:13:5E:5F:75:02:27:7A:C2:CA:3D:3C
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/zFqREBgVNzI2E15fdQInesLKPTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.20.0/23
80.72.24.0/23
85.198.120.0/21
92.118.72.0/23
95.174.96.0-95.174.120.255
95.174.123.0-95.174.127.255
178.212.139.0/24
178.248.0.0/21
185.9.184.0/24
185.9.186.0/23
185.230.240.0-185.230.242.255
IPv6:
2a00:8740::/46
2a00:8740:10::-2a00:8740:3f:ffff:ffff:ffff:ffff:ffff
2a00:8740:80::/48
2a00:8740:100::/48
2a00:8740:110::/46
2a00:8740:201::/48
2a00:8740:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
1d:50:3d:f8:46:06:3d:10:37:d4:a4:a7:9a:13:cd:fd:4f:57:
b2:6c:c1:c5:9a:84:78:c3:14:a7:c9:23:31:d3:f1:ef:c9:10:
83:4f:da:33:9b:45:6f:48:d6:f2:3a:f5:a0:ac:d7:fb:56:ed:
75:42:fb:3b:69:19:6f:4f:3a:5d:1c:95:7b:2b:fc:51:d1:36:
72:61:cf:fa:29:fa:a9:31:40:08:08:26:b5:d9:8d:c2:1e:47:
21:1b:41:f9:a4:f2:25:5d:20:44:7f:9e:23:c3:16:d8:47:e8:
a9:7d:76:17:c1:9c:28:48:cb:68:99:df:5f:40:fe:a7:4d:b1:
40:c0:2a:54:46:c1:e7:1c:11:fa:12:fc:69:ff:b3:0a:11:a1:
1b:a9:83:cc:ec:52:d6:bb:88:dd:26:1e:57:1e:9c:6f:54:60:
af:cc:22:ee:52:4c:52:ca:3d:ee:d4:7b:e0:6e:23:60:cf:f0:
ef:d6:75:2f:49:58:19:8f:bc:42:d0:88:bb:61:66:51:b4:9e:
bf:92:dc:e5:47:5a:b5:c2:ac:1f:85:ee:a9:eb:d1:26:84:9d:
9b:c3:dd:af:0f:b5:30:59:42:9e:e4:b7:f3:a5:7d:f2:48:14:
ae:c8:a3:fd:e0:f4:6b:bb:3b:a2:0f:fa:e6:c2:38:54:6b:fc:
16:fa:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:43 2026 by rpki-client