Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/zgtbUSLv7W52Q_n4orQiXwk8zAA.roa
File: zgtbUSLv7W52Q_n4orQiXwk8zAA.roa (raw, json)
Hash identifier: /VYj7+CtS+qUe2nbwicLdt1ErW47gMB5dxbYhNpQQok=
Subject key identifier: CE:0B:5B:51:22:EF:ED:6E:76:43:F9:F8:A2:B4:22:5F:09:3C:CC:00
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A15438EBBAA6870C623128798B4361A848
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/zgtbUSLv7W52Q_n4orQiXwk8zAA.roa
Signing time: Mon 19 Oct 2026 12:52:58 +0000
ROA not before: Mon 19 Oct 2026 12:52:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 177.177.212.0/24 maxlen: 32
177.177.213.0/24 maxlen: 32
177.203.48.0/24 maxlen: 32
177.203.49.0/24 maxlen: 32
177.203.58.0/24 maxlen: 32
179.66.184.0/24 maxlen: 32
179.66.185.0/24 maxlen: 32
179.66.186.0/24 maxlen: 32
179.66.187.0/24 maxlen: 32
179.252.219.0/24 maxlen: 32
179.252.220.0/24 maxlen: 32
179.252.221.0/24 maxlen: 32
201.51.28.0/24 maxlen: 32
201.51.29.0/24 maxlen: 32
201.51.30.0/24 maxlen: 32
201.51.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:38:eb:ba:a6:87:0c:62:31:28:79:8b:43:61:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Oct 19 12:52:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce0b5b5122efed6e7643f9f8a2b4225f093ccc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:6d:18:e5:33:a4:b0:06:76:e1:99:46:1f:
b0:16:b2:75:d8:b1:7f:e7:dd:21:e6:b6:82:cc:c7:
ab:5a:eb:07:16:25:81:6a:41:52:92:e3:d2:31:a8:
99:f7:99:e6:c1:4e:8d:e5:ba:55:db:71:62:2f:ba:
ed:68:f8:f7:49:82:a5:3a:1d:af:d1:a2:15:93:15:
de:99:7f:5c:e7:56:e8:bc:26:e1:e7:8d:24:42:c3:
9a:6e:5c:1e:86:3b:fd:d2:87:db:d7:76:b9:55:ca:
e6:1d:af:c0:02:db:e7:5f:84:f3:5a:57:c2:7e:7a:
dd:91:a8:8d:85:96:9f:3e:9d:d8:f1:8f:56:50:2a:
76:0f:db:ed:ed:32:66:4e:bf:d8:6c:b3:3c:11:5a:
39:10:dd:e7:e5:63:e7:d0:81:5e:49:3d:da:06:6f:
d5:20:77:cf:bf:f9:72:58:6b:89:0c:03:da:30:0d:
9f:82:f5:6a:8f:70:c9:7b:41:84:67:8e:17:63:95:
84:00:10:1f:0b:6f:bf:6b:c7:58:3c:51:12:11:00:
fd:e4:a6:a3:81:d5:91:fd:97:9e:64:0d:b9:c6:0e:
93:c7:e5:a2:88:d4:c8:84:4d:c8:29:35:a3:42:ed:
4c:5e:04:42:54:30:24:88:f2:75:7f:c5:70:5e:d2:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:5B:51:22:EF:ED:6E:76:43:F9:F8:A2:B4:22:5F:09:3C:CC:00
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/zgtbUSLv7W52Q_n4orQiXwk8zAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.212.0/23
177.203.48.0/23
177.203.58.0/24
179.66.184.0/22
179.252.219.0-179.252.221.255
201.51.28.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b8:d0:e6:fd:34:8b:6a:0a:b6:23:54:a1:14:26:15:e6:6f:
23:3b:89:ca:cf:e3:43:3d:43:48:58:ee:be:d4:6b:6d:32:85:
3e:db:04:5b:33:df:20:be:cd:b8:54:6e:c0:4e:9d:58:61:9a:
05:95:8c:ba:20:cf:1d:ae:c0:e5:c6:e1:09:50:36:35:7d:ce:
d3:2b:82:75:e8:72:fb:49:02:f4:c1:1c:d0:6c:bd:bc:27:c4:
cd:5f:00:f3:d6:5d:c1:3e:a5:3d:d0:31:c0:f2:30:d8:e0:fd:
47:df:ea:60:de:50:78:51:e4:7f:a8:1b:a0:43:5f:78:b7:82:
36:5e:a4:12:9d:fe:7e:01:99:95:84:4d:23:95:f9:cf:63:10:
07:08:f8:af:95:c0:4a:1d:ba:e8:f7:5d:41:e4:cf:e9:51:7a:
50:ba:c3:af:2d:dd:d8:73:88:47:ea:97:3c:28:58:fd:4d:9b:
53:26:41:88:36:a9:17:c8:a7:6e:0a:d3:f8:50:b9:f1:9b:ef:
08:34:48:e0:9a:1b:80:bd:38:93:12:1f:fe:aa:17:ac:76:52:
fc:bb:7e:c1:04:e6:39:2e:bb:9d:d2:17:6a:c1:51:61:48:e9:
5e:b2:59:0c:43:45:fc:d7:31:78:60:0e:ed:0d:7b:be:05:35:
cd:2d:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:42 2026 by rpki-client