Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ZLZqLz4Q9oKCvdx4VhR3oiAXjY.roa
File: 2ZLZqLz4Q9oKCvdx4VhR3oiAXjY.roa (raw, json)
Hash identifier: j0SZwUngjr1Ab5oVXbTb4oAztbqPL/M0xFqsUU32wh4=
Subject key identifier: D9:92:D9:A8:BC:F8:43:DA:0A:0A:F7:71:E1:58:51:DE:88:80:5E:36
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2369226631BBAF1536903E01DEF61DBA
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ZLZqLz4Q9oKCvdx4VhR3oiAXjY.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 77.93.150.0/23 maxlen: 24
81.5.189.0/24 maxlen: 24
82.153.32.0/24 maxlen: 24
89.213.124.0/23 maxlen: 23
109.176.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:22:66:31:bb:af:15:36:90:3e:01:de:f6:1d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d992d9a8bcf843da0a0af771e15851de88805e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:62:41:0e:06:57:9f:b5:d3:fe:c0:e1:8c:
d0:b7:48:66:bd:f2:4c:45:22:c6:a4:ef:9a:c9:44:
5b:fe:3a:63:dc:97:85:a6:db:94:a4:6e:9c:87:a4:
fc:41:a6:59:e8:09:10:e6:b7:ac:89:74:2b:6d:69:
bb:52:58:54:52:7e:65:9b:bd:78:53:47:65:a1:40:
50:0a:c1:ee:1a:f2:d1:45:25:e3:7c:e7:67:6f:2b:
a1:12:e3:c5:fb:20:23:fa:b4:07:46:b9:e2:50:22:
a8:7d:69:82:47:98:8b:81:55:3c:57:70:1a:e9:a6:
fb:ed:60:bc:2c:a9:de:a4:d5:51:fb:71:8a:7e:38:
6e:72:9d:4a:5b:48:63:ed:60:b1:32:8a:59:65:75:
cf:96:7e:28:7f:d1:55:e8:47:7d:cc:bf:c5:42:3c:
e5:6f:7b:0b:f5:e3:26:18:e8:94:58:43:a8:a2:b4:
ca:2a:82:88:49:80:10:2f:83:f5:55:3f:6d:11:f6:
5d:d8:2a:1d:da:23:09:b7:f7:c7:35:9d:56:2b:ea:
03:5b:db:0c:96:32:63:91:c7:4b:ac:09:9a:e6:f0:
10:14:ea:84:a1:a8:bd:fc:46:84:8f:95:cc:b2:a2:
b9:25:6d:b4:ec:8e:9d:a2:89:51:7a:35:42:65:d7:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:D9:A8:BC:F8:43:DA:0A:0A:F7:71:E1:58:51:DE:88:80:5E:36
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ZLZqLz4Q9oKCvdx4VhR3oiAXjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.150.0/23
81.5.189.0/24
82.153.32.0/24
89.213.124.0/23
109.176.204.0/23
Signature Algorithm: sha256WithRSAEncryption
19:6e:23:dd:33:10:9f:59:d2:5f:c5:1c:06:80:19:eb:5f:28:
e9:a0:df:e5:bf:d4:56:fc:00:db:3a:4c:da:79:42:d6:88:82:
21:3a:8e:28:60:ad:13:3a:d4:06:50:79:3c:cc:f1:0e:c8:65:
fa:5d:e6:a2:14:b7:5f:72:2a:f4:43:ca:64:1a:b2:d5:48:2e:
c4:c2:85:f8:8a:85:6a:da:8e:1d:8b:50:46:9a:53:5e:70:31:
0b:63:05:0e:b4:a0:7d:9a:79:ea:e1:59:d3:d3:04:47:6d:91:
a7:a7:6b:c5:2f:5e:2b:20:3b:a8:7f:df:13:58:7b:27:18:65:
31:5c:67:3a:9b:03:5b:95:3b:cd:d0:1b:b5:2d:0c:75:ba:22:
c8:b3:cc:95:e6:84:b4:14:f5:4f:3e:b1:5c:57:ea:9c:a4:73:
f7:d1:6f:be:c8:00:3a:af:19:c3:a5:f9:c1:57:39:61:a8:f8:
09:99:ff:f1:e0:bb:2e:f6:dd:3d:1c:dc:ff:9c:5d:30:2b:d4:
46:b6:a9:8c:ee:b2:00:02:2f:14:73:b3:ea:a1:d8:d5:67:b7:
f6:cd:28:33:8e:0b:85:4e:f9:da:75:ec:35:9f:f6:95:6b:9b:
f2:9a:c0:5b:75:6e:46:63:dd:ae:3f:47:2d:05:1b:63:e5:3c:
c2:3e:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:28 2026 by rpki-client