Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CzmNLAi_O43kWkwile7uSEY2jLk.roa
File: CzmNLAi_O43kWkwile7uSEY2jLk.roa (raw, json)
Hash identifier: s/+M3NwDdzgnED2q9/wE2yoc6vzKmsRSxttXJb5xJvU=
Subject key identifier: 0B:39:8D:2C:08:BF:3B:8D:E4:5A:4C:22:95:EE:EE:48:46:36:8C:B9
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019EB0B4FC4DFCE81D1C64063E2B02927208
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CzmNLAi_O43kWkwile7uSEY2jLk.roa
Signing time: Wed 10 Jun 2026 08:45:11 +0000
ROA not before: Wed 10 Jun 2026 08:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197959
IP address blocks: 185.154.153.0/24 maxlen: 24
194.147.71.0/24 maxlen: 24
2a0d:e680:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:b4:fc:4d:fc:e8:1d:1c:64:06:3e:2b:02:92:72:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jun 10 08:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b398d2c08bf3b8de45a4c2295eeee4846368cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:09:77:29:e1:ab:9d:b4:96:93:d5:e1:ce:
fe:a1:40:bf:0b:ea:a6:b4:46:78:7e:2e:68:67:51:
43:ea:59:f3:43:61:eb:f2:6d:fb:b2:81:ed:8a:24:
13:4f:54:df:97:fb:85:dd:2d:2a:2b:bc:4f:99:5e:
99:51:19:bf:65:3e:93:9b:c3:28:80:01:e0:36:44:
d1:58:c9:80:dd:71:56:c7:89:f9:88:b2:e4:42:1e:
a7:75:18:7f:e9:75:ce:a1:60:00:35:a6:cf:1b:89:
eb:02:78:2a:fc:eb:c0:32:2f:57:87:cf:97:fb:88:
b5:82:83:7a:2a:3b:a9:33:ee:e8:9c:ee:32:27:19:
5b:96:10:1b:b2:bd:89:94:07:58:cb:67:08:65:19:
ae:ed:21:2f:a6:ae:d0:68:6e:5c:b6:f9:14:93:5d:
d1:3a:4d:28:f1:95:2a:a3:da:21:e1:e6:70:8b:65:
c6:a5:e0:84:f1:a5:6c:00:95:33:9b:5d:18:43:c4:
2e:7c:6f:3f:5f:d3:a6:bd:7b:5e:85:f1:fe:e2:46:
d0:fa:d9:a8:94:2c:64:b0:1f:4f:68:63:f6:9b:3c:
3c:cb:be:f1:20:aa:ba:c2:4f:6c:77:13:73:3c:6e:
9e:c4:cb:6c:43:3d:ac:35:b3:45:59:b8:6b:c9:90:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:39:8D:2C:08:BF:3B:8D:E4:5A:4C:22:95:EE:EE:48:46:36:8C:B9
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CzmNLAi_O43kWkwile7uSEY2jLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.153.0/24
194.147.71.0/24
IPv6:
2a0d:e680:100::/48
Signature Algorithm: sha256WithRSAEncryption
76:34:b5:49:7f:a4:0e:a8:f9:77:22:f5:8b:5f:5a:37:61:99:
ea:71:94:e0:73:f9:41:9d:4e:4d:cc:df:78:1d:97:71:56:c8:
fa:b5:01:e5:2a:3a:6d:84:42:e6:d9:72:14:42:2b:fe:4b:1b:
39:a7:d9:c8:99:c5:9b:46:81:00:93:a7:c4:f6:ce:40:d9:e0:
4e:76:97:12:8f:ef:43:c5:20:5d:c3:a8:11:36:81:0e:fc:d8:
89:d2:51:71:ac:ad:1c:20:a9:ff:5d:10:3c:67:22:52:0d:50:
8a:c4:6f:60:f2:92:2d:bb:1b:5d:5b:59:ea:6b:af:28:7f:99:
e4:50:c1:fa:b3:f6:bd:16:77:5d:2c:c9:33:e0:bf:99:d7:05:
8b:b7:83:aa:24:76:26:c3:16:e5:b0:a1:fd:1b:77:7d:57:e4:
69:54:62:83:9b:fe:52:f6:23:36:62:fa:85:30:7a:63:2a:91:
ab:27:8b:0a:d9:a0:a9:93:a4:78:14:b1:3e:fa:fc:ff:6f:3c:
b7:24:d5:2f:a5:1b:d9:de:cd:e0:0b:c2:ec:e9:e1:4a:ce:a9:
06:9f:23:c5:cc:7c:cf:85:ea:2e:08:1e:15:91:66:3f:ab:14:
c0:aa:b8:20:ea:40:b6:08:5a:f6:c9:31:ca:75:f4:06:4e:f2:
aa:79:b3:10
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ6wtPxN/OgdHGQGPisCknIIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwNjEwMDg0NTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjM5OGQyYzA4YmYzYjhkZTQ1YTRjMjI5NWVlZWU0ODQ2MzY4Y2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mgJdynhq520lpPV4c7+oUC/C+qm
tEZ4fi5oZ1FD6lnzQ2Hr8m37soHtiiQTT1Tfl/uF3S0qK7xPmV6ZURm/ZT6Tm8Mo
gAHgNkTRWMmA3XFWx4n5iLLkQh6ndRh/6XXOoWAANabPG4nrAngq/OvAMi9Xh8+X
+4i1goN6KjupM+7onO4yJxlblhAbsr2JlAdYy2cIZRmu7SEvpq7QaG5ctvkUk13R
Ok0o8ZUqo9oh4eZwi2XGpeCE8aVsAJUzm10YQ8QufG8/X9OmvXtehfH+4kbQ+tmo
lCxksB9PaGP2mzw8y77xIKq6wk9sdxNzPG6exMtsQz2sNbNFWbhryZAdQwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFAs5jSwIvzuN5FpMIpXu7khGNoy5MB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvQ3ptTkxBaV9PNDNrV2t3aWxlN3VTRVkyakxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuZqZAwQA
wpNHMA8EAgACMAkDBwAqDeaAAQAwDQYJKoZIhvcNAQELBQADggEBAHY0tUl/pA6o
+Xci9YtfWjdhmepxlOBz+UGdTk3M33gdl3FWyPq1AeUqOm2EQubZchRCK/5LGzmn
2ciZxZtGgQCTp8T2zkDZ4E52lxKP70PFIF3DqBE2gQ782InSUXGsrRwgqf9dEDxn
IlINUIrEb2Dyki27G11bWeprryh/meRQwfqz9r0Wd10syTPgv5nXBYu3g6okdibD
FuWwof0bd31X5GlUYoOb/lL2IzZi+oUwemMqkasniwrZoKmTpHgUsT76/P9vPLck
1S+lG9nezeALwuzp4UrOqQafI8XMfM+F6i4IHhWRZj+rFMCquCDqQLYIWvbJMcp1
9AZO8qp5sxA=
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:46:41 2026 by rpki-client