Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zXZPutL8ScfbduogZNH2KJLoves.roa
File: zXZPutL8ScfbduogZNH2KJLoves.roa (raw, json)
Hash identifier: 0H/Z/umJFlUdgQOUZf4Gn4YatV3U86Tve45oZGSQYhQ=
Subject key identifier: CD:76:4F:BA:D2:FC:49:C7:DB:76:EA:20:64:D1:F6:28:92:E8:BD:EB
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019F1A7A34EA350264DBBBE3A313B59C375B
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zXZPutL8ScfbduogZNH2KJLoves.roa
Signing time: Tue 30 Jun 2026 21:40:44 +0000
ROA not before: Tue 30 Jun 2026 21:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 5.57.33.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:7a:34:ea:35:02:64:db:bb:e3:a3:13:b5:9c:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 30 21:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd764fbad2fc49c7db76ea2064d1f62892e8bdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:3d:7c:34:f4:f3:01:fe:ff:20:d4:26:0b:
6a:13:ea:34:bb:67:cb:dc:28:0f:1d:4b:fe:a2:3e:
1e:1d:1d:82:33:2c:b0:7e:15:a3:d4:2d:11:3f:34:
32:9e:b0:23:41:85:74:d1:bf:58:e9:cc:51:73:37:
2c:84:9e:a4:da:1c:37:99:40:4b:a9:80:d8:7c:53:
0c:bb:95:6c:b3:66:b1:0e:c5:4e:12:6f:d7:ed:33:
8a:a7:c3:c7:62:4e:8f:16:aa:68:c1:9f:59:61:d6:
94:6d:f5:7d:d2:45:54:bc:8b:8e:cb:e8:61:92:6a:
61:37:27:90:99:49:17:6b:86:99:6b:02:90:db:b0:
a4:25:94:77:f1:36:66:74:05:7e:d5:3b:7a:ee:8b:
7e:94:9f:12:b7:46:68:18:26:0b:c9:dc:65:16:80:
01:ff:4f:bc:39:7a:b3:37:35:51:5d:c6:7c:b3:9e:
b7:26:4c:e0:06:4a:41:e9:d2:72:ea:77:20:db:9f:
ed:5c:c9:e3:af:81:af:d7:bf:00:ba:e3:2e:84:d8:
e2:00:f5:df:45:ad:30:68:24:e9:f3:fb:04:ea:29:
12:2f:fa:7b:27:99:ec:53:6c:60:2a:26:2b:60:bb:
10:52:6d:1c:46:1e:01:79:93:db:ef:f2:06:6c:a1:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:4F:BA:D2:FC:49:C7:DB:76:EA:20:64:D1:F6:28:92:E8:BD:EB
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zXZPutL8ScfbduogZNH2KJLoves.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
185.26.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ee:a9:f5:1c:20:81:58:c8:72:08:4b:a4:1c:7f:4e:40:67:
4b:e8:29:f0:9e:8e:f4:b3:aa:e4:1a:ec:90:e5:e5:28:44:31:
ff:ff:a1:fe:15:14:a6:a2:0a:ef:45:d9:e0:ea:44:b0:a3:89:
db:70:2a:cb:5a:32:08:3e:07:cf:3e:99:54:b4:07:0d:67:20:
91:af:20:93:42:a8:7a:50:f5:9f:dd:3c:0f:a9:f3:27:88:ea:
e1:7c:b9:fb:0b:c1:39:79:b6:55:29:c0:b5:d5:3a:e9:6b:10:
79:7e:91:d5:32:40:ba:75:f4:0f:fb:46:5a:68:a2:5f:3f:b9:
7a:52:9f:85:09:8c:e7:e7:8f:0e:a8:da:d0:61:b4:84:91:f7:
7b:5f:52:d6:15:2a:22:1d:f9:ce:36:db:c3:78:d0:60:bb:3f:
19:9f:23:a2:f4:d6:05:3b:c4:f6:9a:18:e9:04:4a:63:5e:33:
f8:ca:b7:ed:4f:16:66:bd:dd:8f:50:66:7f:de:c3:64:ef:fb:
b5:69:e5:5a:92:e3:c8:75:2c:d3:99:88:aa:f0:83:81:ee:79:
86:79:90:ec:a2:e0:70:d7:39:9e:91:3a:2e:be:3e:4e:b6:04:
da:10:1c:7f:4e:e4:68:39:8b:90:19:16:92:8f:16:e2:01:ed:
ac:d9:55:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8aejTqNQJk27vjoxO1nDdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwNjMwMjE0MDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDc2NGZiYWQyZmM0OWM3ZGI3NmVhMjA2NGQxZjYyODkyZThiZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIM9fDT08wH+/yDUJgtqE+o0u2fL
3CgPHUv+oj4eHR2CMyywfhWj1C0RPzQynrAjQYV00b9Y6cxRczcshJ6k2hw3mUBL
qYDYfFMMu5Vss2axDsVOEm/X7TOKp8PHYk6PFqpowZ9ZYdaUbfV90kVUvIuOy+hh
kmphNyeQmUkXa4aZawKQ27CkJZR38TZmdAV+1Tt67ot+lJ8St0ZoGCYLydxlFoAB
/0+8OXqzNzVRXcZ8s563JkzgBkpB6dJy6ncg25/tXMnjr4Gv178AuuMuhNjiAPXf
Ra0waCTp8/sE6ikSL/p7J5nsU2xgKiYrYLsQUm0cRh4BeZPb7/IGbKHNrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM12T7rS/EnH23bqIGTR9iiS6L3rMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvelhaUHV0TDhTY2ZiZHVvZ1pOSDJLSkxvdmVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABTkhAwQA
uRogMA0GCSqGSIb3DQEBCwUAA4IBAQCh7qn1HCCBWMhyCEukHH9OQGdL6Cnwno70
s6rkGuyQ5eUoRDH//6H+FRSmogrvRdng6kSwo4nbcCrLWjIIPgfPPplUtAcNZyCR
ryCTQqh6UPWf3TwPqfMniOrhfLn7C8E5ebZVKcC11TrpaxB5fpHVMkC6dfQP+0Za
aKJfP7l6Up+FCYzn548OqNrQYbSEkfd7X1LWFSoiHfnONtvDeNBguz8ZnyOi9NYF
O8T2mhjpBEpjXjP4yrftTxZmvd2PUGZ/3sNk7/u1aeVakuPIdSzTmYiq8IOB7nmG
eZDsouBw1zmekTouvj5OtgTaEBx/TuRoOYuQGRaSjxbiAe2s2VUy
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:57 2026 by rpki-client