Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zbs0p6Hb7y8bWZ2gE9dWajuAxRc.roa
File: Zbs0p6Hb7y8bWZ2gE9dWajuAxRc.roa (raw, json)
Hash identifier: aZtZONpu9Kv9CAnkwURtsB2Bf+SBk994km/yDVOw5Y0=
Subject key identifier: 65:BB:34:A7:A1:DB:EF:2F:1B:59:9D:A0:13:D7:56:6A:3B:80:C5:17
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A06B860A4EA9FE4A4094C9215FC63584A7
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zbs0p6Hb7y8bWZ2gE9dWajuAxRc.roa
Signing time: Fri 04 Sep 2026 08:25:41 +0000
ROA not before: Fri 04 Sep 2026 08:25:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.153.218.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
109.176.23.0/24 maxlen: 24
213.218.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:86:0a:4e:a9:fe:4a:40:94:c9:21:5f:c6:35:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 4 08:25:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65bb34a7a1dbef2f1b599da013d7566a3b80c517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:35:91:1b:7b:ea:1f:2c:90:4c:84:d7:a9:
2b:65:a5:a9:7d:07:95:9d:2c:56:84:bc:43:b8:4d:
17:39:8c:be:fc:56:1e:54:57:9d:09:66:dc:13:cd:
f3:af:a1:d8:55:8f:2a:f2:74:c0:c2:00:1f:48:86:
a3:a2:3d:f5:a3:e6:95:6c:f7:5d:93:51:3c:9e:27:
33:b2:62:3a:24:64:d5:8e:e7:09:15:93:f0:dd:6f:
6b:11:6a:8b:a9:f9:e9:59:75:a8:3f:b0:c1:c9:6f:
86:91:02:1d:60:64:fe:ed:d3:b5:14:5c:a4:86:11:
79:90:c9:29:22:50:02:90:00:de:f8:5c:ba:91:15:
81:f6:12:38:fa:32:73:86:5d:23:fb:2d:42:37:a6:
1c:d7:82:48:04:ed:82:30:0d:8e:c7:64:03:74:9e:
24:9c:ee:2e:b7:5f:1e:b9:93:04:48:5e:4f:40:76:
f7:ac:22:5f:99:72:c1:26:6b:c6:49:c5:34:be:e9:
ab:5f:5b:1d:3a:91:6c:e9:6f:c8:f2:29:80:22:1e:
b1:1e:bc:ae:6a:81:3e:62:ca:56:7c:20:7d:0c:7a:
92:62:91:35:ec:d5:4c:54:bf:b5:e8:ff:3a:91:d4:
b7:b8:88:91:79:3c:27:c2:18:2a:f8:dc:0e:2e:e8:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BB:34:A7:A1:DB:EF:2F:1B:59:9D:A0:13:D7:56:6A:3B:80:C5:17
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zbs0p6Hb7y8bWZ2gE9dWajuAxRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.218.0/24
89.213.50.0/24
89.213.224.0/24
109.176.23.0/24
213.218.245.0/24
Signature Algorithm: sha256WithRSAEncryption
43:04:e8:56:e7:78:bd:81:79:6a:f9:9d:e1:11:06:68:ca:8a:
e5:12:66:0d:cc:27:a8:d0:25:96:1c:cb:46:d5:24:b0:e2:93:
df:77:4e:28:92:69:41:74:ed:43:ac:ba:be:e5:cd:df:5c:0e:
b9:94:f7:12:84:86:e8:70:34:6f:75:44:dc:08:49:d0:e3:c9:
0d:97:2a:39:6a:eb:d0:8b:db:60:69:df:a4:f9:47:63:e1:3b:
6e:d6:82:a4:38:f6:9b:a4:db:68:e7:6a:4b:b6:99:20:aa:e6:
4a:cc:98:fe:b7:f8:0c:73:50:93:30:60:4f:3b:94:29:e9:c3:
5f:f5:d2:5b:47:69:48:22:86:4a:cd:41:38:af:1a:66:d2:f0:
18:9f:db:86:2e:c4:b2:99:24:43:43:33:e9:5c:4d:9c:8d:8a:
17:4f:27:0b:2b:7b:32:aa:d1:af:4c:00:a0:28:2a:d0:00:3f:
18:ea:67:d0:bd:b2:54:e0:2c:19:88:ba:45:65:e9:5e:62:ce:
20:4e:bf:a9:e1:49:d2:bb:6e:4b:9f:dd:a1:9a:f0:50:cf:f0:
fe:38:bd:11:78:55:cb:ee:71:81:53:ff:79:2e:41:68:fd:68:
26:1a:71:14:cc:b9:22:4f:f0:2d:a9:be:b0:30:ac:fa:08:1c:
57:0e:b3:6a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaBrhgpOqf5KQJTJIV/GNYSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTA0MDgyNTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWJiMzRhN2ExZGJlZjJmMWI1OTlkYTAxM2Q3NTY2YTNiODBjNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Y1kRt76h8skEyE16krZaWpfQeV
nSxWhLxDuE0XOYy+/FYeVFedCWbcE83zr6HYVY8q8nTAwgAfSIajoj31o+aVbPdd
k1E8niczsmI6JGTVjucJFZPw3W9rEWqLqfnpWXWoP7DByW+GkQIdYGT+7dO1FFyk
hhF5kMkpIlACkADe+Fy6kRWB9hI4+jJzhl0j+y1CN6Yc14JIBO2CMA2Ox2QDdJ4k
nO4ut18euZMESF5PQHb3rCJfmXLBJmvGScU0vumrX1sdOpFs6W/I8imAIh6xHryu
aoE+YspWfCB9DHqSYpE17NVMVL+16P86kdS3uIiReTwnwhgq+NwOLuj+ZwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGW7NKeh2+8vG1mdoBPXVmo7gMUXMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWmJzMHA2SGI3eThiV1oyZ0U5ZFdhanVBeFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUpnaAwQA
WdUyAwQAWdXgAwQAbbAXAwQA1dr1MA0GCSqGSIb3DQEBCwUAA4IBAQBDBOhW53i9
gXlq+Z3hEQZoyorlEmYNzCeo0CWWHMtG1SSw4pPfd04okmlBdO1DrLq+5c3fXA65
lPcShIbocDRvdUTcCEnQ48kNlyo5auvQi9tgad+k+Udj4Ttu1oKkOPabpNto52pL
tpkgquZKzJj+t/gMc1CTMGBPO5Qp6cNf9dJbR2lIIoZKzUE4rxpm0vAYn9uGLsSy
mSRDQzPpXE2cjYoXTycLK3syqtGvTACgKCrQAD8Y6mfQvbJU4CwZiLpFZeleYs4g
Tr+p4UnSu25Ln92hmvBQz/D+OL0ReFXL7nGBU/95LkFo/WgmGnEUzLkiT/Atqb6w
MKz6CBxXDrNq
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:52 2026 by rpki-client