Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/zIne8xJNSG7-wrghehMLfcG-q2M.roa
File: zIne8xJNSG7-wrghehMLfcG-q2M.roa (raw, json)
Hash identifier: x34uMfMu0mf/ZBobv4uRuTns7a+u5gTHDS8W1pWH6gk=
Subject key identifier: CC:89:DE:F3:12:4D:48:6E:FE:C2:B8:21:7A:13:0B:7D:C1:BE:AB:63
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019E8CC7D5808EF8627863F393E386F58B60
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/zIne8xJNSG7-wrghehMLfcG-q2M.roa
Signing time: Wed 03 Jun 2026 09:19:26 +0000
ROA not before: Wed 03 Jun 2026 09:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
176.53.146.0/23 maxlen: 23
185.235.230.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e81::/32 maxlen: 32
2a0a:2e81::/36 maxlen: 36
2a0a:2e82::/32 maxlen: 32
2a11:7e40::/48 maxlen: 48
2a11:7e40:1::/48 maxlen: 48
2a11:7e40:2::/48 maxlen: 48
2a11:7e40:3::/48 maxlen: 48
2a11:7e40:4::/48 maxlen: 48
2a11:7e42::/36 maxlen: 36
2a11:7e46::/32 maxlen: 32
2a11:7e47:1000::/48 maxlen: 48
2a11:7e47:2000::/48 maxlen: 48
2a11:7e47:3000::/48 maxlen: 48
2a11:7e47:4000::/48 maxlen: 48
2a11:7e47:5000::/48 maxlen: 48
2a11:7e47:6000::/48 maxlen: 48
2a11:7e47:7000::/48 maxlen: 48
2a11:7e47:8000::/48 maxlen: 48
2a11:7e47:9000::/48 maxlen: 48
2a11:7e47:a000::/48 maxlen: 48
2a11:7e47:b000::/48 maxlen: 48
2a11:7e47:b002::/48 maxlen: 48
2a11:7e47:b003::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
2a11:8485::/32 maxlen: 32
2a12:6702::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:c7:d5:80:8e:f8:62:78:63:f3:93:e3:86:f5:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jun 3 09:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc89def3124d486efec2b8217a130b7dc1beab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:60:34:3b:1a:cc:3a:0b:8a:a9:f4:b4:bf:
c6:06:2b:a1:94:3f:67:e4:66:91:33:de:00:18:f5:
2b:ae:b4:53:41:6f:1f:0f:28:31:5e:e0:b3:4b:f5:
24:e9:3b:36:ac:6b:c1:99:0e:0e:2e:f0:90:ed:d4:
b2:5a:57:0a:7e:91:74:e6:c2:5b:23:3a:7e:5f:0b:
b8:37:f3:57:0e:48:88:12:e7:ef:c3:af:05:db:06:
2e:9b:85:3a:64:bf:9a:b5:14:db:43:23:a3:92:59:
fa:79:f8:fb:c1:36:5c:63:4b:32:f0:fc:f4:02:2c:
a9:73:6b:b6:df:0c:3a:ea:b0:c4:bb:60:96:8e:83:
47:21:c8:44:22:15:4f:58:92:df:bf:66:21:cb:ff:
69:d8:8c:56:1a:38:cb:a2:1f:74:64:ea:86:8a:82:
ff:1f:89:9e:f7:67:8d:f6:ad:83:c5:e7:bc:d3:4b:
02:0a:ca:d7:4f:b6:77:36:56:07:7b:8b:fa:82:b2:
63:90:58:64:03:3b:bb:af:b6:d7:05:b6:74:6f:db:
2b:9a:d4:df:7b:04:cf:56:49:a3:99:ec:60:77:ab:
2f:93:e5:6b:cd:dc:ff:20:08:61:57:d7:bd:9f:c7:
09:c8:28:27:06:a4:c1:bf:fa:11:1b:10:e0:ff:79:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:DE:F3:12:4D:48:6E:FE:C2:B8:21:7A:13:0B:7D:C1:BE:AB:63
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/zIne8xJNSG7-wrghehMLfcG-q2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
176.53.146.0/23
185.235.230.0/24
IPv6:
2001:678:e30::/48
2a0a:2e80::-2a0a:2e82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e40::-2a11:7e40:4:ffff:ffff:ffff:ffff:ffff
2a11:7e42::/36
2a11:7e46::/32
2a11:7e47:1000::/48
2a11:7e47:2000::/48
2a11:7e47:3000::/48
2a11:7e47:4000::/48
2a11:7e47:5000::/48
2a11:7e47:6000::/48
2a11:7e47:7000::/48
2a11:7e47:8000::/48
2a11:7e47:9000::/48
2a11:7e47:a000::/48
2a11:7e47:b000::/48
2a11:7e47:b002::/47
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8485::/32
2a12:6702::/32
Signature Algorithm: sha256WithRSAEncryption
5e:2d:5a:d5:ed:f7:9c:43:32:05:a8:98:89:1d:6f:06:35:e6:
c6:f4:06:e1:1c:dd:1c:f7:a9:4e:af:ab:65:43:d1:e0:f6:85:
e9:b3:72:9a:77:6f:49:bc:e8:8d:d1:64:84:42:c4:95:e5:85:
cc:34:a9:bb:09:08:fb:17:74:c5:cd:c6:1a:68:9d:12:80:6d:
0b:82:f6:af:ba:47:b8:d5:fa:c8:df:d7:3c:d3:e1:48:26:77:
02:a1:5a:4e:39:a7:76:db:01:62:71:75:32:4a:2a:91:51:f6:
c5:bb:e7:90:ec:2b:a7:5e:c1:d9:3f:9a:63:92:31:8b:98:05:
82:da:82:e0:d2:53:2f:81:00:0c:a8:f5:93:94:d8:36:83:11:
99:12:bc:4c:f7:5f:9f:24:74:45:8d:18:52:70:0d:92:f1:86:
11:c1:2d:5a:eb:12:68:9b:48:4e:09:4c:26:6e:67:d7:a5:52:
fa:18:59:0b:f5:ff:8c:92:63:d3:62:f4:22:c1:fe:37:ae:c4:
0b:5c:b3:69:9d:03:ea:cc:5f:09:7c:11:c7:81:04:d3:72:72:
30:29:4a:9a:67:25:d0:c0:8b:7d:59:41:63:20:7b:a6:98:4c:
37:88:df:e0:66:94:86:a6:2b:8a:09:b9:39:f9:da:0c:19:f1:
86:a5:81:a6
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAZ6Mx9WAjvhieGPzk+OG9YtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjYwNjAzMDkxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzg5ZGVmMzEyNGQ0ODZlZmVjMmI4MjE3YTEzMGI3ZGMxYmVhYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmpgNDsazDoLiqn0tL/GBiuhlD9n
5GaRM94AGPUrrrRTQW8fDygxXuCzS/Uk6Ts2rGvBmQ4OLvCQ7dSyWlcKfpF05sJb
Izp+Xwu4N/NXDkiIEufvw68F2wYum4U6ZL+atRTbQyOjkln6efj7wTZcY0sy8Pz0
Aiypc2u23ww66rDEu2CWjoNHIchEIhVPWJLfv2Yhy/9p2IxWGjjLoh90ZOqGioL/
H4me92eN9q2Dxee800sCCsrXT7Z3NlYHe4v6grJjkFhkAzu7r7bXBbZ0b9srmtTf
ewTPVkmjmexgd6svk+Vrzdz/IAhhV9e9n8cJyCgnBqTBv/oRGxDg/3lSWwIDAQAB
o4IC5jCCAuIwHQYDVR0OBBYEFMyJ3vMSTUhu/sK4IXoTC33BvqtjMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEvekluZTh4Sk5TRzctd3JnaGVoTUxmY0ctcTJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH7BggrBgEFBQcBBwEB/wSB6zCB6DAYBAIAATASAwQAH97j
AwQBsDWSAwQAuevmMIHLBAIAAjCBxAMHACABBngOMDAOAwUHKgougAMFACoKLoIw
EAMFBioRfkADBwAqEX5AAAQDBgQqEX5CAAMFACoRfkYDBwAqEX5HEAADBwAqEX5H
IAADBwAqEX5HMAADBwAqEX5HQAADBwAqEX5HUAADBwAqEX5HYAADBwAqEX5HcAAD
BwAqEX5HgAADBwAqEX5HkAADBwAqEX5HoAADBwAqEX5HsAADBwEqEX5HsAIwDgMF
ByoRhIADBQAqEYSCAwUAKhGEhQMFACoSZwIwDQYJKoZIhvcNAQELBQADggEBAF4t
WtXt95xDMgWomIkdbwY15sb0BuEc3Rz3qU6vq2VD0eD2hemzcpp3b0m86I3RZIRC
xJXlhcw0qbsJCPsXdMXNxhponRKAbQuC9q+6R7jV+sjf1zzT4UgmdwKhWk45p3bb
AWJxdTJKKpFR9sW755DsK6dewdk/mmOSMYuYBYLaguDSUy+BAAyo9ZOU2DaDEZkS
vEz3X58kdEWNGFJwDZLxhhHBLVrrEmibSE4JTCZuZ9elUvoYWQv1/4ySY9Ni9CLB
/jeuxAtcs2mdA+rMXwl8EceBBNNycjApSppnJdDAi31ZQWMge6aYTDeI3+BmlIam
K4oJuTn52gwZ8YalgaY=
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:44:37 2026 by rpki-client