Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zUZ2fgsG4JYyuGUdBHKH_YHU7zA.roa
File: zUZ2fgsG4JYyuGUdBHKH_YHU7zA.roa (raw, json)
Hash identifier: FGn21GgNoSUHhhZ37Yj6I9arRMZL9YjiYClUUxWOCTo=
Subject key identifier: CD:46:76:7E:0B:06:E0:96:32:B8:65:1D:04:72:87:FD:81:D4:EF:30
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F6543BB9042509318EA979A6B1BE2F76C
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zUZ2fgsG4JYyuGUdBHKH_YHU7zA.roa
Signing time: Wed 15 Jul 2026 10:12:45 +0000
ROA not before: Wed 15 Jul 2026 10:12:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 81.168.20.0/24 maxlen: 24
81.168.99.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.1.0/24 maxlen: 24
82.152.3.0/24 maxlen: 24
82.152.128.0/24 maxlen: 24
82.152.136.0/24 maxlen: 24
82.152.233.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 11:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:43:bb:90:42:50:93:18:ea:97:9a:6b:1b:e2:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 15 10:12:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd46767e0b06e09632b8651d047287fd81d4ef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:a2:ae:ff:43:e0:77:86:17:79:9d:98:e3:
2f:2d:e3:04:d0:8b:e3:1b:d0:9e:61:6e:dc:57:9c:
59:35:c2:3a:9c:3c:f2:14:25:1e:92:11:94:c7:e9:
7a:b7:c0:9d:38:18:4e:70:ad:02:4e:98:c9:49:9a:
42:c2:71:1e:ab:43:ba:b9:ce:55:91:a8:5c:68:51:
14:1d:f2:de:b1:8d:81:fd:9c:e5:a7:ec:1b:b6:5a:
f7:ec:d1:19:b3:4a:ea:6b:1d:58:56:af:97:a3:b9:
11:d9:15:64:ef:eb:cb:ac:7e:ed:db:dd:e9:23:68:
84:79:76:f2:74:da:30:2b:17:cc:8a:71:d4:52:a2:
69:aa:cc:b7:12:40:52:20:64:e8:8c:be:62:cb:0e:
a1:55:30:a9:16:dd:f3:de:3f:ec:d7:91:98:43:10:
51:ea:2a:e8:76:ab:89:3f:44:2d:ae:75:a2:12:9d:
cd:12:ea:b5:ea:ae:5d:c2:13:66:60:be:bf:2d:d3:
3b:fe:3e:72:6e:dd:a4:1f:9f:e2:52:d4:e8:83:85:
45:c4:8e:09:70:8b:e1:10:c8:b4:c6:05:1d:42:ac:
a5:a4:74:80:40:3e:46:44:dd:34:88:fa:87:71:2a:
48:3d:ed:91:e4:5e:55:7f:ea:ef:8a:51:94:29:be:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:76:7E:0B:06:E0:96:32:B8:65:1D:04:72:87:FD:81:D4:EF:30
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zUZ2fgsG4JYyuGUdBHKH_YHU7zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.20.0/24
81.168.99.0/24
81.168.120.0/24
82.152.1.0/24
82.152.3.0/24
82.152.128.0/24
82.152.136.0/24
82.152.233.0/24
82.153.72.0/24
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:89:fa:39:0b:13:c6:57:b8:ab:39:7e:96:07:6d:9b:7f:51:
c0:8b:4d:47:dd:fc:39:81:60:1e:f4:dd:e8:82:23:c3:08:a6:
91:cc:04:4b:b7:e2:37:c7:95:35:a7:34:de:c6:db:92:be:be:
3d:e5:77:20:2c:71:27:c8:f6:7f:b2:2d:5a:bd:c8:a7:07:6e:
0d:4b:f0:6d:40:d7:c7:48:59:1d:b3:ce:c4:21:65:2c:1f:ac:
df:e3:84:e9:98:98:ad:80:65:4e:a2:57:19:5f:54:27:8e:f2:
9a:0a:29:b8:15:09:24:31:7c:2b:59:60:68:b0:11:c1:fe:51:
36:81:49:de:0f:05:5b:1f:32:21:ce:66:78:38:fa:27:f8:81:
1a:3f:eb:1b:98:fd:6d:56:d9:d5:92:7d:69:92:8e:cd:92:a3:
0b:85:38:d1:01:68:8b:c4:83:cc:22:67:2f:28:24:e2:06:63:
e2:02:16:e5:b7:de:21:6f:42:27:4b:a3:48:6e:1e:8f:49:ee:
51:cc:fb:a3:cf:8c:4c:86:e3:c6:7d:0a:a9:2d:79:cc:4e:77:
bf:60:5e:9b:31:9c:4e:8d:f2:7e:2f:9c:c4:41:08:62:8b:de:
70:32:f3:c9:3c:8c:33:f2:05:49:9f:7a:e9:7d:6c:8e:76:92:
78:0a:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:27:54 2026 by rpki-client