Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/z3o1Wljd8fwYujmKWAy7mtR3VdE.roa
File: z3o1Wljd8fwYujmKWAy7mtR3VdE.roa (raw, json)
Hash identifier: E81csimlsIdRleSilJPwt5zMyJxZ+MqkzRlol8b0D5U=
Subject key identifier: CF:7A:35:5A:58:DD:F1:FC:18:BA:39:8A:58:0C:BB:9A:D4:77:55:D1
Certificate issuer: /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial: 019F2368BCCC841C8325239AA5A1F6405453
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/z3o1Wljd8fwYujmKWAy7mtR3VdE.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bc:cc:84:1c:83:25:23:9a:a5:a1:f6:40:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf7a355a58ddf1fc18ba398a580cbb9ad47755d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:72:d6:a3:2e:58:77:28:f9:0d:03:8d:b9:
7f:c7:3c:d2:fd:ea:77:ad:42:c5:a4:38:c4:5f:d5:
48:03:c5:de:58:a6:53:4e:d6:c9:89:cf:7c:7f:1c:
bd:c9:52:bb:52:7c:f3:21:be:73:40:05:43:6b:78:
42:e8:2a:ba:11:4f:56:78:30:b6:20:02:39:8b:8a:
52:f9:45:1b:b9:4b:8d:15:f2:70:f5:9d:79:f2:86:
43:07:cb:90:80:43:73:7b:35:c1:39:56:77:0c:5f:
98:93:cf:58:e7:02:fe:a7:e9:83:d8:79:7f:fd:6c:
ee:fe:75:cc:89:ad:de:52:7a:73:9d:4d:3f:fe:c1:
fd:c5:2b:ec:fc:e6:0c:2c:49:b6:35:6e:8b:51:70:
ba:2e:6a:73:d4:17:65:36:7d:f4:e1:e4:c6:07:e9:
89:ef:c6:85:ee:45:2d:e2:dd:af:70:7c:01:fc:be:
7e:56:92:ed:eb:e6:de:e6:50:85:ae:43:d2:b1:da:
ac:4a:af:25:29:09:89:9a:47:ab:89:e6:5a:6e:d8:
50:cb:03:ce:ba:a1:2d:6a:7c:45:93:04:0a:08:b9:
1c:eb:97:2a:33:42:22:22:48:89:4c:64:48:3a:b7:
15:85:49:2e:a4:a2:67:0c:8a:ed:bb:75:bd:28:ec:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7A:35:5A:58:DD:F1:FC:18:BA:39:8A:58:0C:BB:9A:D4:77:55:D1
X509v3 Authority Key Identifier:
keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/z3o1Wljd8fwYujmKWAy7mtR3VdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:33:87:58:e4:76:e1:1c:4e:6e:5e:40:cd:b5:dd:f0:ce:b2:
ec:f0:8c:7f:1a:9d:8c:9e:8a:66:af:a0:5f:a8:1c:4f:3d:15:
a6:42:15:09:c4:57:a4:73:85:de:d2:47:7d:5c:4a:bf:a9:61:
6f:91:aa:af:4d:3b:f5:69:08:72:2b:2f:27:6d:3d:eb:74:34:
d7:f4:4a:8d:70:9e:27:61:b9:fd:d5:a0:c5:a3:94:f3:21:55:
8e:10:72:36:78:57:64:58:52:80:af:a7:08:74:0a:e6:3e:84:
29:6a:67:93:7e:f9:3c:41:a4:ff:df:93:7b:1b:25:60:c8:aa:
6b:72:2f:95:55:d2:ca:1c:a0:f4:5a:1d:16:72:99:04:f5:ff:
c1:5e:8a:a6:db:26:79:cc:d1:29:8b:8e:5b:43:ef:1f:70:b4:
ef:46:54:c9:c2:6c:2a:bf:fd:bb:5b:48:af:59:ba:c2:22:b7:
37:c4:81:12:ad:eb:b0:95:4d:7d:a0:c3:73:1a:32:cd:ad:76:
4c:8a:9c:b2:91:95:bc:69:30:2b:e9:b1:51:34:07:81:40:09:
e3:f1:41:7a:b3:05:52:6e:77:4f:22:c7:57:57:7d:09:6d:e6:
a6:bd:02:0f:fe:9e:b3:e0:26:74:05:10:0f:87:9b:6b:79:32:
21:f9:cc:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLzMhByDJSOapaH2QFRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZGYyNTk2MWYxNDFiMjE1ODZlYjlhNDBiNWQ0MTY2ZDcz
YmI4YzYwHhcNMjYwNzAyMTUxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjdhMzU1YTU4ZGRmMWZjMThiYTM5OGE1ODBjYmI5YWQ0Nzc1NWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBly1qMuWHco+Q0Djbl/xzzS/ep3
rULFpDjEX9VIA8XeWKZTTtbJic98fxy9yVK7UnzzIb5zQAVDa3hC6Cq6EU9WeDC2
IAI5i4pS+UUbuUuNFfJw9Z158oZDB8uQgENzezXBOVZ3DF+Yk89Y5wL+p+mD2Hl/
/Wzu/nXMia3eUnpznU0//sH9xSvs/OYMLEm2NW6LUXC6Lmpz1BdlNn304eTGB+mJ
78aF7kUt4t2vcHwB/L5+VpLt6+be5lCFrkPSsdqsSq8lKQmJmkerieZabthQywPO
uqEtanxFkwQKCLkc65cqM0IiIkiJTGRIOrcVhUkupKJnDIrtu3W9KOwOEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM96NVpY3fH8GLo5ilgMu5rUd1XRMB8GA1UdIwQY
MBaAFHnfJZYfFBshWG65pAtdQWbXO7jGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWQ4bGxoOFVHeUZZYnJta0MxMUJadGM3dU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt
M2JhNWYzMGNhYWJmLzEvejNvMVdsamQ4ZndZdWptS1dBeTdtdFIzVmRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm
LzEvZWQ4bGxoOFVHeUZZYnJta0MxMUJadGM3dU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA4MA0G
CSqGSIb3DQEBCwUAA4IBAQB/M4dY5HbhHE5uXkDNtd3wzrLs8Ix/Gp2Mnopmr6Bf
qBxPPRWmQhUJxFekc4Xe0kd9XEq/qWFvkaqvTTv1aQhyKy8nbT3rdDTX9EqNcJ4n
Ybn91aDFo5TzIVWOEHI2eFdkWFKAr6cIdArmPoQpameTfvk8QaT/35N7GyVgyKpr
ci+VVdLKHKD0Wh0WcpkE9f/BXoqm2yZ5zNEpi45bQ+8fcLTvRlTJwmwqv/27W0iv
WbrCIrc3xIESreuwlU19oMNzGjLNrXZMipyykZW8aTAr6bFRNAeBQAnj8UF6swVS
bndPIsdXV30JbeamvQIP/p6z4CZ0BRAPh5treTIh+cy9
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:33:23 2026 by rpki-client