Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZarjC_KiO9hLsNzZ94EKah0JVdI.roa
File: ZarjC_KiO9hLsNzZ94EKah0JVdI.roa (raw, json)
Hash identifier: A4wXnsn6BsPWIksUqTtKBUZ//sdyeFvutuBEIqTVmhk=
Subject key identifier: 65:AA:E3:0B:F2:A2:3B:D8:4B:B0:DC:D9:F7:81:0A:6A:1D:09:55:D2
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FCC7858803271CD339B4CAF4D6B992069
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZarjC_KiO9hLsNzZ94EKah0JVdI.roa
Signing time: Tue 04 Aug 2026 11:11:06 +0000
ROA not before: Tue 04 Aug 2026 11:11:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56264
IP address blocks: 81.168.42.0/24 maxlen: 24
81.168.43.0/24 maxlen: 24
81.168.60.0/24 maxlen: 24
81.168.71.0/24 maxlen: 24
81.168.77.0/24 maxlen: 24
81.168.78.0/24 maxlen: 24
82.152.28.0/24 maxlen: 24
82.152.83.0/24 maxlen: 24
82.152.115.0/24 maxlen: 24
82.152.120.0/24 maxlen: 24
82.152.130.0/24 maxlen: 24
82.152.196.0/24 maxlen: 24
82.152.201.0/24 maxlen: 24
82.152.202.0/24 maxlen: 24
82.152.203.0/24 maxlen: 24
82.152.204.0/24 maxlen: 24
82.152.205.0/24 maxlen: 24
82.152.206.0/24 maxlen: 24
82.152.207.0/24 maxlen: 24
82.152.249.0/24 maxlen: 24
82.152.250.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.154.0/24 maxlen: 24
89.213.52.0/24 maxlen: 24
89.213.53.0/24 maxlen: 24
89.213.54.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/24 maxlen: 24
89.213.57.0/24 maxlen: 24
89.213.59.0/24 maxlen: 24
89.213.60.0/24 maxlen: 24
89.213.61.0/24 maxlen: 24
89.213.97.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:78:58:80:32:71:cd:33:9b:4c:af:4d:6b:99:20:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 4 11:11:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65aae30bf2a23bd84bb0dcd9f7810a6a1d0955d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:c9:a0:70:ce:33:59:ce:2f:c5:14:c8:3f:
d3:28:71:09:58:fb:29:f0:d2:ee:b1:a5:56:1c:0d:
78:29:e1:e8:57:17:1f:45:8d:dd:26:cb:15:91:9a:
25:d1:a5:4c:42:d5:07:69:8e:39:44:a5:8c:ae:0e:
59:90:a2:77:0c:53:96:d9:c8:59:f3:73:1e:83:80:
d2:37:54:1d:9b:ad:aa:6d:7f:56:e4:37:2e:a0:01:
5a:e4:46:6c:b3:35:cb:8a:4a:bd:9b:24:a1:25:15:
03:83:d4:4f:83:5e:eb:3a:2c:5b:33:df:5b:d0:40:
13:f4:22:f1:fb:db:82:fc:ef:c8:ce:8a:1a:c8:85:
93:34:4e:c8:0d:19:79:e5:56:ad:ce:e6:65:a7:14:
2f:96:b4:e2:40:33:f0:ed:14:63:b9:84:3b:33:f4:
83:20:22:35:a0:68:f0:bc:8f:2e:cc:e2:f9:7e:58:
eb:32:04:1b:78:24:14:4f:45:c6:ef:2b:46:2d:69:
a3:82:b3:0d:75:d0:53:03:d5:1f:a1:15:39:95:fe:
b2:a8:54:8a:d6:0d:2b:13:86:4f:bf:48:c6:97:48:
d1:2f:28:49:ea:08:13:2d:16:3e:12:de:14:66:ff:
9e:79:67:de:66:3b:9d:9b:75:6b:d2:4b:f5:12:86:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:E3:0B:F2:A2:3B:D8:4B:B0:DC:D9:F7:81:0A:6A:1D:09:55:D2
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZarjC_KiO9hLsNzZ94EKah0JVdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.42.0/23
81.168.60.0/24
81.168.71.0/24
81.168.77.0-81.168.78.255
82.152.28.0/24
82.152.83.0/24
82.152.115.0/24
82.152.120.0/24
82.152.130.0/24
82.152.196.0/24
82.152.201.0-82.152.207.255
82.152.249.0-82.152.255.255
82.153.51.0/24
82.153.154.0/24
89.213.52.0-89.213.57.255
89.213.59.0-89.213.61.255
89.213.97.0/24
89.213.99.0/24
89.213.104.0/23
89.213.107.0/24
Signature Algorithm: sha256WithRSAEncryption
40:50:f9:d2:9a:1e:71:6a:c3:7b:c0:1f:75:88:d1:ef:f1:9e:
f1:66:ff:76:70:52:51:c4:c6:f9:03:70:3e:60:e6:38:17:72:
a0:de:80:be:8e:44:cf:b7:cd:48:35:0a:f2:f1:e2:bf:5b:37:
46:70:9c:cd:18:81:c5:c2:37:9e:b9:aa:e4:89:fd:e3:ee:6a:
19:71:92:3d:2e:22:12:40:3e:e4:60:f0:ba:6f:ed:9a:02:86:
bc:89:bd:eb:45:a4:31:8a:8e:ad:98:6e:cc:96:80:95:43:53:
9c:a7:45:8c:18:ee:94:28:bc:3d:c0:ca:6d:bc:ff:71:83:37:
9d:0c:cd:e9:fa:24:65:10:39:fb:4b:21:96:2b:21:95:7c:44:
bc:40:fc:70:7c:96:e3:b0:82:27:ae:21:da:21:42:73:82:94:
8e:a4:27:5f:7f:76:38:e1:6f:ee:64:b4:b7:cb:70:06:0e:fc:
85:54:c4:21:d1:4b:f2:d1:b0:77:82:2b:86:8b:a2:5c:a8:01:
9a:60:be:2e:fb:15:32:9f:50:58:1f:dd:0e:d9:49:be:71:10:
35:4b:eb:89:ad:03:fe:e1:d9:fc:74:f8:a5:f4:22:93:b3:28:
49:18:2d:68:8d:cd:ca:74:36:5c:3a:7f:7d:db:24:ca:63:af:
ac:da:63:24
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAZ/MeFiAMnHNM5tMr01rmSBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODA0MTExMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWFhZTMwYmYyYTIzYmQ4NGJiMGRjZDlmNzgxMGE2YTFkMDk1NWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+TJoHDOM1nOL8UUyD/TKHEJWPsp
8NLusaVWHA14KeHoVxcfRY3dJssVkZol0aVMQtUHaY45RKWMrg5ZkKJ3DFOW2chZ
83Meg4DSN1Qdm62qbX9W5DcuoAFa5EZsszXLikq9myShJRUDg9RPg17rOixbM99b
0EAT9CLx+9uC/O/IzooayIWTNE7IDRl55VatzuZlpxQvlrTiQDPw7RRjuYQ7M/SD
ICI1oGjwvI8uzOL5fljrMgQbeCQUT0XG7ytGLWmjgrMNddBTA9UfoRU5lf6yqFSK
1g0rE4ZPv0jGl0jRLyhJ6ggTLRY+Et4UZv+eeWfeZjudm3Vr0kv1EoZJpQIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFGWq4wvyojvYS7Dc2feBCmodCVXSMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWmFyakNfS2lPOWhMc056Wjk0RUthaDBKVmRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBpgQCAAEwgZ8DBAFR
qCoDBABRqDwDBABRqEcwDAMEAFGoTQMEAFGoTgMEAFKYHAMEAFKYUwMEAFKYcwME
AFKYeAMEAFKYggMEAFKYxDAMAwQAUpjJAwQEUpjAMAsDBABSmPkDAwBSmAMEAFKZ
MwMEAFKZmjAMAwQCWdU0AwQBWdU4MAwDBABZ1TsDBAFZ1TwDBABZ1WEDBABZ1WMD
BAFZ1WgDBABZ1WswDQYJKoZIhvcNAQELBQADggEBAEBQ+dKaHnFqw3vAH3WI0e/x
nvFm/3ZwUlHExvkDcD5g5jgXcqDegL6ORM+3zUg1CvLx4r9bN0ZwnM0YgcXCN565
quSJ/ePuahlxkj0uIhJAPuRg8Lpv7ZoChryJvetFpDGKjq2YbsyWgJVDU5ynRYwY
7pQovD3Aym28/3GDN50Mzen6JGUQOftLIZYrIZV8RLxA/HB8luOwgieuIdohQnOC
lI6kJ19/djjhb+5ktLfLcAYO/IVUxCHRS/LRsHeCK4aLolyoAZpgvi77FTKfUFgf
3Q7ZSb5xEDVL64mtA/7h2fx0+KX0IpOzKEkYLWiNzcp0Nlw6f33bJMpjr6zaYyQ=
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:10 2026 by rpki-client