Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zzaEfoHEEz0UmxX-OCoWyIcvAWI.roa
File: zzaEfoHEEz0UmxX-OCoWyIcvAWI.roa (raw, json)
Hash identifier: FeMTlu1q1XIcw5rK/n7wvtHDnjMGJjWVFNljxCc8Ke0=
Subject key identifier: CF:36:84:7E:81:C4:13:3D:14:9B:15:FE:38:2A:16:C8:87:2F:01:62
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368FD38995919322CFC43E965362F94
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zzaEfoHEEz0UmxX-OCoWyIcvAWI.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213200
IP address blocks: 109.176.202.0/24 maxlen: 24
217.144.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:38:99:59:19:32:2c:fc:43:e9:65:36:2f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf36847e81c4133d149b15fe382a16c8872f0162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:bf:37:bf:2d:55:db:4a:38:f0:15:ee:cd:
a9:f9:07:2c:c7:db:02:be:c9:55:84:27:7b:81:5f:
13:0c:04:3b:92:2f:84:db:88:0f:04:4c:dc:95:d2:
db:2b:58:6c:a7:71:30:4d:27:db:6c:32:9a:a8:d6:
94:a4:b5:a7:9b:a1:df:0e:4d:d6:30:87:7b:89:f6:
b5:90:e9:4c:54:87:4a:b8:c1:db:5f:ac:84:3e:49:
66:4b:44:e2:95:50:2e:22:6f:69:8b:10:57:84:82:
a6:c2:34:18:a1:7e:d0:7e:25:4b:44:27:64:d0:0d:
3e:54:ad:b3:b3:80:72:70:09:95:f6:75:44:4d:d2:
85:6b:e0:c0:21:9c:6e:44:c3:4a:30:fc:08:e0:b4:
43:0e:e6:1a:d6:4e:88:1c:c0:d5:f5:eb:ca:0e:d1:
72:58:75:9a:57:22:1d:ae:ab:9d:d8:ba:44:ac:9e:
31:fb:8c:f9:83:0c:0c:55:36:db:c9:72:58:ee:f9:
2f:35:f3:53:ab:66:30:c0:f3:2e:34:cc:38:47:86:
de:94:36:2c:4e:a1:1e:26:77:34:d6:59:2c:4f:29:
a9:7c:0d:9a:2d:4a:c9:86:d4:94:fb:32:98:8d:86:
52:d1:57:48:db:8c:bc:db:eb:b4:c4:5f:51:5f:29:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:84:7E:81:C4:13:3D:14:9B:15:FE:38:2A:16:C8:87:2F:01:62
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zzaEfoHEEz0UmxX-OCoWyIcvAWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.202.0/24
217.144.154.0/24
Signature Algorithm: sha256WithRSAEncryption
54:07:e3:8d:46:12:e0:8d:35:a3:5e:f2:20:1a:35:35:5a:ac:
0b:4b:4c:2d:3a:6e:77:e0:cb:87:75:e8:c8:94:21:e6:09:56:
9b:c2:3d:78:96:09:49:f1:d7:40:fe:33:a1:ce:ac:88:7d:36:
1b:15:2a:56:26:b5:74:5f:59:a8:7b:93:84:f8:e6:68:c4:91:
d6:bc:70:7b:fc:9a:5a:47:8e:32:02:2c:32:64:c7:fa:e1:48:
26:fb:b0:3c:65:67:82:5d:5e:cf:3d:e9:b1:1f:49:a5:97:f0:
23:96:08:f5:0e:fd:f0:28:c2:e7:c3:4a:14:8a:82:1f:08:91:
31:13:69:c0:58:58:47:61:ad:ae:88:e7:de:f6:d4:33:4e:ed:
06:53:7c:f8:f5:9a:04:f9:47:63:34:ee:61:54:30:50:79:a3:
cc:16:a4:a7:64:55:79:28:e5:fc:ef:4d:57:8f:e7:5d:72:1b:
3e:a7:d3:ef:86:f6:6f:99:2c:88:99:bf:af:e0:11:f9:31:8e:
b0:50:7f:df:65:19:a1:78:7b:74:fd:43:c0:a7:e3:74:8e:12:
f2:7a:1a:48:97:32:54:a6:72:95:96:99:fb:4e:21:7a:4d:31:
c7:cc:d8:94:5a:8c:04:c6:ae:04:76:d6:91:70:c6:3e:81:1a:
a3:2e:90:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaP04mVkZMiz8Q+llNi+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjM2ODQ3ZTgxYzQxMzNkMTQ5YjE1ZmUzODJhMTZjODg3MmYwMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RG/N78tVdtKOPAV7s2p+Qcsx9sC
vslVhCd7gV8TDAQ7ki+E24gPBEzcldLbK1hsp3EwTSfbbDKaqNaUpLWnm6HfDk3W
MId7ifa1kOlMVIdKuMHbX6yEPklmS0TilVAuIm9pixBXhIKmwjQYoX7QfiVLRCdk
0A0+VK2zs4BycAmV9nVETdKFa+DAIZxuRMNKMPwI4LRDDuYa1k6IHMDV9evKDtFy
WHWaVyIdrqud2LpErJ4x+4z5gwwMVTbbyXJY7vkvNfNTq2YwwPMuNMw4R4belDYs
TqEeJnc01lksTympfA2aLUrJhtSU+zKYjYZS0VdI24y82+u0xF9RXynV4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM82hH6BxBM9FJsV/jgqFsiHLwFiMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvenphRWZvSEVFejBVbXhYLU9Db1d5SWN2QVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbDKAwQA
2ZCaMA0GCSqGSIb3DQEBCwUAA4IBAQBUB+ONRhLgjTWjXvIgGjU1WqwLS0wtOm53
4MuHdejIlCHmCVabwj14lglJ8ddA/jOhzqyIfTYbFSpWJrV0X1moe5OE+OZoxJHW
vHB7/JpaR44yAiwyZMf64Ugm+7A8ZWeCXV7PPemxH0mll/Ajlgj1Dv3wKMLnw0oU
ioIfCJExE2nAWFhHYa2uiOfe9tQzTu0GU3z49ZoE+UdjNO5hVDBQeaPMFqSnZFV5
KOX8701Xj+ddchs+p9PvhvZvmSyImb+v4BH5MY6wUH/fZRmheHt0/UPAp+N0jhLy
ehpIlzJUpnKVlpn7TiF6TTHHzNiUWowExq4EdtaRcMY+gRqjLpCK
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:29 2026 by rpki-client