Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zWZBYmppa3HE7a_gXiCCR2JYoLE.roa
File: zWZBYmppa3HE7a_gXiCCR2JYoLE.roa (raw, json)
Hash identifier: WVWI9FZKGzSfankfPJ4tUp7rBOrOP/MmHJoLzJJlN+4=
Subject key identifier: CD:66:41:62:6A:69:6B:71:C4:ED:AF:E0:5E:20:82:47:62:58:A0:B1
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FCC262C9D645EC1BEFBE4534945C9A0C4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zWZBYmppa3HE7a_gXiCCR2JYoLE.roa
Signing time: Tue 04 Aug 2026 09:41:21 +0000
ROA not before: Tue 04 Aug 2026 09:41:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 77.107.82.0/24 maxlen: 24
109.176.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:26:2c:9d:64:5e:c1:be:fb:e4:53:49:45:c9:a0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 4 09:41:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd6641626a696b71c4edafe05e2082476258a0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:6a:6a:ac:a7:42:8a:b1:d2:e9:1a:3e:8a:
ee:dd:49:fd:cc:45:ec:10:f1:0d:d1:08:e6:84:9e:
f1:96:c4:46:7b:24:3a:09:86:cd:75:c1:91:bc:2b:
bd:42:9c:9d:e9:aa:b4:dc:3f:1c:5d:90:74:03:58:
d6:57:7b:34:92:f7:71:dd:5f:ef:1b:01:a4:ee:f7:
c5:04:60:97:4a:f9:d3:3d:30:28:73:17:33:e5:df:
2b:9e:04:79:a2:f8:db:6b:b2:ed:52:62:3d:44:ef:
b1:ab:ea:44:2c:20:d2:c7:cf:53:f6:d6:f5:9d:76:
fa:3b:a7:c4:f9:d6:ff:24:e1:b2:87:f9:9e:cd:60:
6c:be:89:09:8b:76:35:ad:b0:6d:ad:96:d3:c9:6c:
46:03:d2:7c:c2:5c:ae:38:fc:cc:89:41:08:a9:97:
36:45:05:a6:7c:11:8a:3f:f3:bc:5f:9b:cc:cd:d9:
1c:bd:62:b3:96:43:7a:e6:3a:45:ae:4b:e8:12:33:
02:c2:4e:4e:f8:00:a1:3b:4c:87:3f:87:16:f3:6e:
be:35:dc:35:04:00:31:04:83:63:83:7e:83:3f:a4:
95:73:55:d1:58:30:a1:33:3b:d0:f7:7a:a1:18:0d:
1a:92:ce:71:4e:f0:ec:e8:40:9a:4f:4c:81:15:f8:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:41:62:6A:69:6B:71:C4:ED:AF:E0:5E:20:82:47:62:58:A0:B1
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zWZBYmppa3HE7a_gXiCCR2JYoLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.82.0/24
109.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
03:83:9d:26:7a:83:0a:0b:06:e0:8f:23:5c:0c:d0:c7:69:b2:
e8:6e:ef:35:ad:9f:04:ff:76:d7:60:c3:8f:d2:ea:14:fb:4a:
bb:ce:f6:a5:3d:0f:3c:e3:84:55:98:7a:99:9b:ad:3d:0e:c7:
73:71:ee:71:bf:23:ce:1f:e0:e4:90:74:d3:a1:3c:9e:1d:ca:
c5:0b:46:66:1f:18:b3:20:28:78:39:06:b0:09:6b:40:73:a8:
6c:ae:17:ea:13:8c:0d:5a:4e:f2:3a:be:ab:c5:2d:2d:e1:ff:
93:3e:9f:5f:bc:a4:58:55:91:2c:eb:2c:1b:e3:2f:e0:4d:6f:
d3:d9:06:0b:e8:df:40:e3:52:26:31:9e:3b:9e:28:01:a1:0c:
7b:84:b6:f2:32:36:b7:33:5d:c5:6c:8e:bf:dd:fc:ff:18:93:
16:77:c7:fd:e6:6c:89:0a:9b:b9:02:8a:5e:c2:e4:c8:c0:b9:
33:60:01:5f:62:c6:c2:f4:39:71:73:6d:cc:72:8e:d4:57:8d:
a0:44:42:2d:e3:ca:a3:2f:48:eb:1a:35:0e:96:e0:1a:72:df:
12:ac:c6:2a:4d:f2:18:dd:73:7c:70:2a:03:d0:7f:64:a0:9f:
ae:66:62:ad:87:c6:d5:e1:74:7a:f0:36:ab:71:51:10:69:bb:
eb:d3:c4:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/MJiydZF7BvvvkU0lFyaDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODA0MDk0MTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDY2NDE2MjZhNjk2YjcxYzRlZGFmZTA1ZTIwODI0NzYyNThhMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSRqaqynQoqx0ukaPoru3Un9zEXs
EPEN0QjmhJ7xlsRGeyQ6CYbNdcGRvCu9Qpyd6aq03D8cXZB0A1jWV3s0kvdx3V/v
GwGk7vfFBGCXSvnTPTAocxcz5d8rngR5ovjba7LtUmI9RO+xq+pELCDSx89T9tb1
nXb6O6fE+db/JOGyh/mezWBsvokJi3Y1rbBtrZbTyWxGA9J8wlyuOPzMiUEIqZc2
RQWmfBGKP/O8X5vMzdkcvWKzlkN65jpFrkvoEjMCwk5O+AChO0yHP4cW826+Ndw1
BAAxBINjg36DP6SVc1XRWDChMzvQ93qhGA0aks5xTvDs6ECaT0yBFfgK7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM1mQWJqaWtxxO2v4F4ggkdiWKCxMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveldaQlltcHBhM0hFN2FfZ1hpQ0NSMkpZb0xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATWtSAwQA
bbCGMA0GCSqGSIb3DQEBCwUAA4IBAQADg50meoMKCwbgjyNcDNDHabLobu81rZ8E
/3bXYMOP0uoU+0q7zvalPQ8844RVmHqZm609Dsdzce5xvyPOH+DkkHTToTyeHcrF
C0ZmHxizICh4OQawCWtAc6hsrhfqE4wNWk7yOr6rxS0t4f+TPp9fvKRYVZEs6ywb
4y/gTW/T2QYL6N9A41ImMZ47nigBoQx7hLbyMja3M13FbI6/3fz/GJMWd8f95myJ
Cpu5AopewuTIwLkzYAFfYsbC9Dlxc23Mco7UV42gREIt48qjL0jrGjUOluAact8S
rMYqTfIY3XN8cCoD0H9koJ+uZmKth8bV4XR68DarcVEQabvr08Ro
-----END CERTIFICATE-----
Generated at Sat Aug 15 16:19:53 2026 by rpki-client