Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/PH_ZKgl0YEGJU7EkBo6yBeC3Dmc.roa
File: PH_ZKgl0YEGJU7EkBo6yBeC3Dmc.roa (raw, json)
Hash identifier: ftUQrFR+3ehEYLFohxpomme6EwAaFtgPBICTDxCfk6I=
Subject key identifier: 3C:7F:D9:2A:09:74:60:41:89:53:B1:24:06:8E:B2:05:E0:B7:0E:67
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 01A019E747DCA075F899D4B0092C4D553B91
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/PH_ZKgl0YEGJU7EkBo6yBeC3Dmc.roa
Signing time: Wed 19 Aug 2026 12:03:02 +0000
ROA not before: Wed 19 Aug 2026 12:03:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63473
IP address blocks: 45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
45.91.95.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
83.138.53.0/24 maxlen: 24
85.155.176.0/20 maxlen: 24
85.155.176.0/23 maxlen: 23
85.155.178.0/23 maxlen: 23
85.155.180.0/23 maxlen: 23
85.155.182.0/23 maxlen: 23
85.155.184.0/23 maxlen: 23
85.155.186.0/23 maxlen: 23
85.155.188.0/23 maxlen: 23
85.155.190.0/23 maxlen: 23
91.190.155.0/24 maxlen: 24
109.205.61.0/24 maxlen: 24
167.104.96.0/20 maxlen: 24
167.104.160.0/20 maxlen: 24
167.254.240.0/23 maxlen: 23
167.254.242.0/23 maxlen: 23
185.223.207.0/24 maxlen: 24
188.93.140.0/24 maxlen: 24
188.244.117.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
194.29.101.0/24 maxlen: 24
194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
212.52.0.0/24 maxlen: 24
2a0e:dc0::/30 maxlen: 48
2a0e:dc0:1::/48 maxlen: 48
2a0e:dc0:2::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
2a0e:dc0:4::/48 maxlen: 48
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:6::/48 maxlen: 48
2a0e:dc0:8::/48 maxlen: 48
2a0e:dc0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:e7:47:dc:a0:75:f8:99:d4:b0:09:2c:4d:55:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Aug 19 12:03:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c7fd92a097460418953b124068eb205e0b70e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:8a:fb:87:70:52:bc:9c:ac:14:a2:5e:cb:
89:74:39:7d:78:5c:02:2e:0f:f3:7c:41:d3:f4:1e:
f4:d3:56:07:d2:e7:6f:8a:20:5b:d4:85:69:70:01:
86:58:b4:81:6f:03:3f:01:c0:f3:ba:02:47:39:f3:
64:00:07:d6:2b:5e:41:c7:a1:e5:d1:8b:db:45:c2:
1c:4b:4d:1e:3c:f7:72:fb:e2:fa:56:a7:47:4d:bb:
80:b6:9d:09:48:80:4b:ad:92:07:64:70:52:19:a6:
d1:67:e6:da:6f:6f:78:03:d1:25:34:71:95:49:e8:
f5:f8:7f:98:25:85:27:7d:8c:9d:0d:cd:75:ee:f8:
fb:bb:ba:fa:5a:ad:6a:0e:f9:40:9a:be:27:92:7e:
06:f7:ef:96:21:72:ad:95:07:1b:83:23:a3:73:b3:
52:ae:2f:93:b1:6f:d7:0c:fb:82:ed:03:38:93:e1:
9c:e8:78:54:5d:62:dc:de:30:1d:c5:8e:d7:03:b5:
be:c4:3a:2a:db:f2:07:4d:26:dc:e9:98:80:81:8d:
3a:e3:7d:88:4c:78:d4:db:bc:f5:52:5e:7f:1b:7b:
67:14:79:ac:40:ef:e2:e4:0f:9f:ec:4b:e5:fe:67:
39:85:20:22:52:a5:7c:77:8d:0d:e9:71:7c:bd:70:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:D9:2A:09:74:60:41:89:53:B1:24:06:8E:B2:05:E0:B7:0E:67
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/PH_ZKgl0YEGJU7EkBo6yBeC3Dmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
85.155.176.0/20
91.190.155.0/24
109.205.61.0/24
167.104.96.0/20
167.104.160.0/20
167.254.240.0/22
185.223.207.0/24
188.93.140.0/24
188.244.117.0/24
194.29.100.0/23
194.29.186.0/23
212.52.0.0/24
IPv6:
2a0e:dc0::/30
Signature Algorithm: sha256WithRSAEncryption
38:3d:2a:a4:10:06:f3:30:48:e5:b9:26:73:07:40:48:be:67:
98:e6:22:63:79:26:15:04:3a:c3:14:83:ec:4a:a1:14:2c:15:
0d:05:7f:97:d1:92:98:c8:8f:c5:0c:01:57:b9:8f:46:b4:08:
a1:29:58:9e:1a:47:19:9d:d7:0e:bb:55:85:94:af:57:aa:5c:
09:ea:db:2b:83:bd:5a:03:9b:d7:a8:c9:72:b1:c2:0c:ec:51:
bf:8b:6b:76:ed:42:fd:7b:50:7f:b3:0b:94:ee:38:77:b4:91:
60:86:9e:80:9c:8d:3c:1f:dd:68:8b:68:77:90:ee:9b:ed:0f:
90:75:87:16:66:2d:bb:37:60:00:75:48:45:a5:70:77:33:15:
f3:ba:c1:79:a2:1e:a1:b7:88:01:d8:03:3d:48:cb:00:71:00:
f6:fa:79:ea:08:de:18:de:b5:43:62:66:a2:d3:79:37:a4:70:
f4:79:b0:3e:18:81:20:18:d3:72:e8:1d:a5:17:4b:4b:c1:f5:
d6:f5:2d:d3:fc:fa:21:bd:aa:a0:b2:db:f4:5f:74:e5:df:70:
a1:20:48:8e:4e:01:a4:a2:c4:36:87:77:71:d7:16:66:19:e2:
59:48:63:1d:2a:5b:5d:27:c4:28:a2:66:50:81:13:d7:b6:a9:
85:f3:bf:75
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAaAZ50fcoHX4mdSwCSxNVTuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzk2OTU1ZDZjNjRkZGZhMTVjZDRhYzg4Y2U1NGQzZjhj
YjEzNDQwHhcNMjYwODE5MTIwMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzdmZDkyYTA5NzQ2MDQxODk1M2IxMjQwNjhlYjIwNWUwYjcwZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOSK+4dwUrycrBSiXsuJdDl9eFwC
Lg/zfEHT9B7001YH0udviiBb1IVpcAGGWLSBbwM/AcDzugJHOfNkAAfWK15Bx6Hl
0YvbRcIcS00ePPdy++L6VqdHTbuAtp0JSIBLrZIHZHBSGabRZ+bab294A9ElNHGV
Sej1+H+YJYUnfYydDc117vj7u7r6Wq1qDvlAmr4nkn4G9++WIXKtlQcbgyOjc7NS
ri+TsW/XDPuC7QM4k+Gc6HhUXWLc3jAdxY7XA7W+xDoq2/IHTSbc6ZiAgY06432I
THjU27z1Ul5/G3tnFHmsQO/i5A+f7Evl/mc5hSAiUqV8d40N6XF8vXDV1wIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFDx/2SoJdGBBiVOxJAaOsgXgtw5nMB8GA1UdIwQY
MBaAFLt5aVXWxk3foVzUrIjOVNP4yxNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNscFZkYkdUZC1oWE5Tc2lNNVUwX2pMRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmIt
YWM0MDE2MTIwY2I5LzEvUEhfWktnbDBZRUdKVTdFa0JvNnlCZUMzRG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmItYWM0MDE2MTIwY2I5
LzEvdTNscFZkYkdUZC1oWE5Tc2lNNVUwX2pMRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEAi1bXAME
AS2ESgMEAFOKNQMEBFWbsAMEAFu+mwMEAG3NPQMEBKdoYAMEBKdooAMEAqf+8AME
ALnfzwMEALxdjAMEALz0dQMEAcIdZAMEAcIdugMEANQ0ADANBAIAAjAHAwUCKg4N
wDANBgkqhkiG9w0BAQsFAAOCAQEAOD0qpBAG8zBI5bkmcwdASL5nmOYiY3kmFQQ6
wxSD7EqhFCwVDQV/l9GSmMiPxQwBV7mPRrQIoSlYnhpHGZ3XDrtVhZSvV6pcCerb
K4O9WgOb16jJcrHCDOxRv4trdu1C/XtQf7MLlO44d7SRYIaegJyNPB/daItod5Du
m+0PkHWHFmYtuzdgAHVIRaVwdzMV87rBeaIeobeIAdgDPUjLAHEA9vp56gjeGN61
Q2JmotN5N6Rw9HmwPhiBIBjTcugdpRdLS8H11vUt0/z6Ib2qoLLb9F905d9woSBI
jk4BpKLENod3cdcWZhniWUhjHSpbXSfEKKJmUIET17aphfO/dQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:33 2026 by rpki-client