Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/ZSsj1rSciEURdB3oQXC7eVe1e38.roa
File: ZSsj1rSciEURdB3oQXC7eVe1e38.roa (raw, json)
Hash identifier: pGtD7o5Z9PRzNhMCNnkRNf7VtqWUNz21ydtfSsq44Gc=
Subject key identifier: 65:2B:23:D6:B4:9C:88:45:11:74:1D:E8:41:70:BB:79:57:B5:7B:7F
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 01A13AAE7219050D24AA02C6F238EEBA8A30
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/ZSsj1rSciEURdB3oQXC7eVe1e38.roa
Signing time: Wed 14 Oct 2026 13:51:13 +0000
ROA not before: Wed 14 Oct 2026 13:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48362
IP address blocks: 45.152.52.0/22 maxlen: 24
91.195.116.0/23 maxlen: 24
94.199.168.0/21 maxlen: 24
185.31.212.0/22 maxlen: 24
185.252.36.0/22 maxlen: 24
2a02:1688::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ae:72:19:05:0d:24:aa:02:c6:f2:38:ee:ba:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Oct 14 13:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=652b23d6b49c884511741de84170bb7957b57b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:fa:89:1b:5a:79:b7:47:f8:6e:35:26:1b:
79:85:92:ef:63:00:db:eb:83:b7:ba:a4:f5:b1:54:
5c:3e:c9:3c:41:7b:e1:e1:28:7d:46:e4:e4:31:f0:
68:98:0f:85:7b:12:ca:53:30:0a:56:1d:03:08:47:
5a:f1:ac:90:b1:d2:93:17:47:7d:9b:97:ca:bb:52:
8d:6a:9d:a6:41:2a:b6:22:1c:9c:e1:57:16:49:ff:
fe:9c:fb:f3:7a:00:e6:56:d1:29:5e:55:1e:3d:8e:
1e:e7:a9:c1:09:0a:d8:ba:4f:fd:77:af:c9:b5:68:
b9:5c:d3:66:aa:71:80:76:7e:65:35:5c:c4:9b:63:
30:e4:13:ed:6e:14:c5:5b:f1:4c:b8:5c:94:ac:9a:
bb:6e:ce:e2:c7:51:17:48:23:ff:f1:39:96:2c:91:
a5:e7:77:a7:06:41:46:48:e2:15:80:4e:ca:91:67:
f3:06:26:e9:88:a2:32:1b:15:58:b1:18:95:34:a2:
7d:a6:1c:56:e1:35:70:78:7a:2b:03:bb:71:9e:db:
ab:6f:b9:94:66:ac:df:a4:80:90:36:4a:89:f5:9d:
24:28:05:8b:22:7c:7c:a7:2c:cc:86:c2:36:f6:97:
39:e3:48:68:18:cf:45:b0:38:59:45:4e:d3:d2:12:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2B:23:D6:B4:9C:88:45:11:74:1D:E8:41:70:BB:79:57:B5:7B:7F
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/ZSsj1rSciEURdB3oQXC7eVe1e38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.52.0/22
91.195.116.0/23
94.199.168.0/21
185.31.212.0/22
185.252.36.0/22
IPv6:
2a02:1688::/32
Signature Algorithm: sha256WithRSAEncryption
09:87:e5:91:c5:2a:5e:f0:b2:f1:1a:9a:ff:1a:b6:c1:6c:bc:
80:ee:df:3e:bf:6c:a1:6a:ed:7d:6a:49:0b:56:bd:67:dd:ff:
b3:2c:87:6d:7c:ad:09:08:48:80:05:60:b0:c1:0b:d9:59:ea:
03:23:be:b9:9e:4e:95:1d:3e:91:d8:6d:d7:4e:06:89:bd:40:
50:7f:ba:ac:96:f2:06:af:c6:f0:fe:ce:6c:8a:a1:2b:2c:87:
90:74:44:a7:b0:d0:7d:c1:70:4a:d5:91:a8:b7:5e:b7:f5:b3:
a7:10:42:a5:df:d2:bf:65:6b:c5:92:2e:3e:78:e8:96:c0:50:
59:48:fc:e7:60:0f:9f:2f:ff:21:37:ba:3d:06:bd:3a:ec:ab:
0f:04:fb:15:0e:56:33:13:27:9f:a4:87:b1:c8:c4:46:63:34:
76:5f:e6:ff:4f:b5:12:aa:7d:bd:81:42:e0:02:a6:28:1a:13:
ec:ec:f9:4c:78:5c:ff:19:b7:45:45:5e:58:3a:86:30:03:02:
e2:8e:0e:04:2d:a4:94:1c:8d:a8:6d:24:09:56:ff:65:3b:76:
1f:89:c7:28:5c:39:96:44:a5:1e:ae:28:eb:49:14:b2:f2:b0:
a8:33:4f:d4:06:2a:aa:54:2a:ed:e7:ce:2f:8e:16:1f:b8:66:
04:f9:6a:9d
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAaE6rnIZBQ0kqgLG8jjuuoowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODFkMWZmNDViMTU0N2MwMGE4NGI0NmVmOTllY2EyZGZi
ZDQ1YmMwHhcNMjYxMDE0MTM1MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTJiMjNkNmI0OWM4ODQ1MTE3NDFkZTg0MTcwYmI3OTU3YjU3YjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3L6iRtaebdH+G41Jht5hZLvYwDb
64O3uqT1sVRcPsk8QXvh4Sh9RuTkMfBomA+FexLKUzAKVh0DCEda8ayQsdKTF0d9
m5fKu1KNap2mQSq2Ihyc4VcWSf/+nPvzegDmVtEpXlUePY4e56nBCQrYuk/9d6/J
tWi5XNNmqnGAdn5lNVzEm2Mw5BPtbhTFW/FMuFyUrJq7bs7ix1EXSCP/8TmWLJGl
53enBkFGSOIVgE7KkWfzBibpiKIyGxVYsRiVNKJ9phxW4TVweHorA7txnturb7mU
ZqzfpICQNkqJ9Z0kKAWLInx8pyzMhsI29pc540hoGM9FsDhZRU7T0hJepQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFGUrI9a0nIhFEXQd6EFwu3lXtXt/MB8GA1UdIwQY
MBaAFF2B0f9FsVR8AKhLRu+Z7KLfvUW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hY2Q3ZTMtOWM3Ni00ZmY2LWI1YWUt
ZWU4MGEyZDI5NTJkLzEvWlNzajFyU2NpRVVSZEIzb1FYQzdlVmUxZTM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hY2Q3ZTMtOWM3Ni00ZmY2LWI1YWUtZWU4MGEyZDI5NTJk
LzEvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLZg0AwQB
W8N0AwQDXseoAwQCuR/UAwQCufwkMA0EAgACMAcDBQAqAhaIMA0GCSqGSIb3DQEB
CwUAA4IBAQAJh+WRxSpe8LLxGpr/GrbBbLyA7t8+v2yhau19akkLVr1n3f+zLIdt
fK0JCEiABWCwwQvZWeoDI765nk6VHT6R2G3XTgaJvUBQf7qslvIGr8bw/s5siqEr
LIeQdESnsNB9wXBK1ZGot1639bOnEEKl39K/ZWvFki4+eOiWwFBZSPznYA+fL/8h
N7o9Br067KsPBPsVDlYzEyefpIexyMRGYzR2X+b/T7USqn29gULgAqYoGhPs7PlM
eFz/GbdFRV5YOoYwAwLijg4ELaSUHI2obSQJVv9lO3YficcoXDmWRKUerijrSRSy
8rCoM0/UBiqqVCrt584vjhYfuGYE+Wqd
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:56 2026 by rpki-client