Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZgXdq9RvuTK--y1FFwXhOUThAjo.roa
File: ZgXdq9RvuTK--y1FFwXhOUThAjo.roa (raw, json)
Hash identifier: 49uQMq3IKg7nKguxacKMfKCdJRiuh5ggreKE7fvhMC8=
Subject key identifier: 66:05:DD:AB:D4:6F:B9:32:BE:FB:2D:45:17:05:E1:39:44:E1:02:3A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05BF453D50305EBB03188743C0F610E25
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZgXdq9RvuTK--y1FFwXhOUThAjo.roa
Signing time: Tue 01 Sep 2026 07:52:13 +0000
ROA not before: Tue 01 Sep 2026 07:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 77.93.138.0/23 maxlen: 24
77.107.95.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.65.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.117.0/24 maxlen: 24
82.153.122.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f4:53:d5:03:05:eb:b0:31:88:74:3c:0f:61:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 1 07:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6605ddabd46fb932befb2d451705e13944e1023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:07:ec:c9:30:d1:bd:80:82:f2:01:23:5a:
76:c4:9d:6d:33:e0:ac:11:d0:48:ef:8f:07:c5:b1:
9d:84:e1:59:4f:95:97:35:82:a0:21:e2:e1:c0:50:
9b:ca:87:72:5d:16:fd:35:29:2d:a9:c6:df:ad:a7:
9a:e3:38:0c:de:24:8e:72:63:e8:03:c3:b1:ce:6b:
8a:2b:61:26:80:58:ba:ae:18:a4:11:25:ea:1a:db:
61:47:43:94:55:cd:12:b4:e5:20:a7:ed:94:d6:6b:
11:80:79:42:59:19:bd:56:8c:12:8b:fe:0f:16:83:
90:77:fb:c1:ab:74:2c:2a:01:5d:69:30:ac:ba:d6:
d1:7f:e9:a2:81:cb:87:73:96:ad:56:ae:7a:69:7f:
c2:b1:97:36:33:79:2c:0c:c9:08:d6:66:68:5f:24:
93:e3:d6:99:95:cb:5f:fe:06:d5:05:d9:ff:41:0a:
5e:fa:50:58:f2:cb:24:ea:7c:95:ca:ac:3f:5e:e3:
6a:5f:f5:a2:45:71:43:7d:d3:7e:71:40:44:36:5f:
84:a7:58:07:f8:6b:6d:00:d3:76:95:70:0f:e6:f5:
c6:74:1e:23:9b:cd:40:6f:32:87:a0:ca:1d:74:08:
9e:ba:56:60:e0:2d:99:e1:65:e0:f1:85:7d:87:46:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:05:DD:AB:D4:6F:B9:32:BE:FB:2D:45:17:05:E1:39:44:E1:02:3A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZgXdq9RvuTK--y1FFwXhOUThAjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
77.107.95.0/24
81.168.58.0/24
81.168.65.0/24
81.168.125.0/24
82.152.117.0/24
82.153.122.0/24
109.176.91.0/24
212.38.81.0/24
213.130.138.0/24
213.210.11.0/24
213.210.48.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:bc:e8:17:88:ea:47:35:ed:d5:b6:6f:7a:ae:98:f1:c9:fd:
cd:78:6a:0f:7c:78:2a:2a:13:14:68:38:27:91:3a:9f:f6:11:
0d:3f:2a:29:60:14:d7:04:53:7b:5e:a8:53:2e:d4:79:0c:d3:
ce:19:ac:64:2d:23:a4:29:bf:f7:a3:f2:94:fb:ac:cc:44:38:
fd:95:0b:72:4c:87:be:c0:ea:27:5e:e8:53:aa:78:4e:66:18:
e8:a8:4c:9d:9d:a9:c7:8a:7b:24:fc:72:14:da:ad:4c:e4:c0:
2d:7a:0b:16:ee:e4:37:79:71:18:33:a4:e9:32:09:b6:f4:b3:
24:fe:cb:8b:f8:79:90:b6:4c:45:e3:d0:a4:9e:21:0c:a8:f9:
82:f6:61:69:07:58:ad:43:ca:0b:3c:ec:92:01:f8:04:b2:d0:
d9:77:88:1c:1f:1f:3f:78:4d:bb:c1:f7:2f:c7:df:33:04:3d:
24:c6:25:1d:c9:20:aa:d1:78:0e:0b:85:4d:f8:6b:65:75:cf:
b4:af:76:37:db:98:11:56:5a:75:23:9a:5e:3d:e9:fa:af:59:
06:1f:5c:72:bf:00:f0:66:69:87:76:9c:d4:ea:3e:b6:3a:aa:
d2:72:e0:d4:17:7f:a7:0c:ed:ea:8a:3a:1a:44:ac:a9:5a:5d:
9d:78:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:31:44 2026 by rpki-client