Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ZJTsAaW_24ef3JlwBqS8hTC3PEo.roa
File: ZJTsAaW_24ef3JlwBqS8hTC3PEo.roa (raw, json)
Hash identifier: EuOWe+yEhat14czZTh5CmdYZMMIPL/Vo1Mj+LMkU7lU=
Subject key identifier: 64:94:EC:01:A5:BF:DB:87:9F:DC:99:70:06:A4:BC:85:30:B7:3C:4A
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FDB324B754FC00873EF3BD02235EF8567
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ZJTsAaW_24ef3JlwBqS8hTC3PEo.roa
Signing time: Fri 07 Aug 2026 07:48:54 +0000
ROA not before: Fri 07 Aug 2026 07:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219071
IP address blocks: 130.78.186.0/23 maxlen: 23
130.78.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:32:4b:75:4f:c0:08:73:ef:3b:d0:22:35:ef:85:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 7 07:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6494ec01a5bfdb879fdc997006a4bc8530b73c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:bb:f4:e0:7b:fc:fb:aa:97:1a:5b:2b:72:
06:a7:f1:99:f3:72:7d:ec:a5:eb:fa:1f:d3:ca:af:
6a:b1:23:f0:a2:59:00:be:6a:dc:d2:d0:92:57:30:
1c:05:62:bd:62:f0:54:b4:f6:0e:71:15:3e:68:ca:
49:36:19:6c:5f:bd:9a:b0:34:64:0a:57:2d:35:0c:
6c:75:3b:53:ae:f9:cc:42:ad:1c:84:fc:90:5b:22:
9c:c1:95:7a:4a:8a:6e:35:0c:50:eb:e6:f0:dd:9b:
6b:71:ce:d0:34:23:c3:c9:fd:3b:c5:0b:fb:d7:29:
30:76:cf:d0:84:3d:28:30:bd:f5:9f:bd:a3:27:9a:
1d:48:0e:c9:5c:82:68:e8:82:04:6d:e6:b5:9e:05:
8c:00:a2:ae:46:88:99:be:87:89:b1:57:73:48:36:
3c:f5:91:03:11:5e:5a:9a:9d:f6:d5:ff:b6:3f:e0:
b1:be:ef:3d:83:95:32:75:5b:57:f1:c8:9b:cd:47:
47:66:86:00:db:60:23:55:f1:5a:2b:1d:78:dd:e2:
dd:ad:fa:f6:96:81:fb:f3:36:06:6b:82:57:c7:74:
1b:3c:f2:d2:88:35:e6:65:e4:23:49:1a:fb:99:9a:
27:8f:59:1b:93:8a:73:40:90:e2:b2:26:48:12:fc:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:EC:01:A5:BF:DB:87:9F:DC:99:70:06:A4:BC:85:30:B7:3C:4A
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ZJTsAaW_24ef3JlwBqS8hTC3PEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.186.0/23
130.78.190.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b2:c4:22:13:a9:11:da:c7:f5:dd:5a:de:a7:2f:f5:a5:97:
9e:f8:1f:5f:25:4a:93:26:e7:22:d3:96:c4:0b:68:74:1a:af:
71:c6:6b:42:bc:45:13:4d:ab:bf:f1:b6:92:6f:78:a3:ad:9f:
6f:6f:14:56:59:8f:22:69:ef:9d:0f:4d:10:df:47:f0:84:43:
78:eb:bb:e9:0d:ad:e8:df:6d:70:92:a6:54:67:f9:4d:c4:00:
fb:3e:4a:15:94:9e:82:27:66:79:62:75:de:de:ea:23:d5:3a:
9d:a8:d7:4c:43:18:70:48:8f:04:26:f2:14:90:30:2c:55:6c:
e1:3b:37:4f:24:c9:2a:49:76:34:b3:36:18:b3:f2:f9:a4:a1:
31:4d:04:4f:ed:24:16:df:f9:44:9f:ed:d5:8f:3c:ea:66:9c:
f0:92:f3:9f:cf:96:05:1c:d4:72:f3:fa:fd:09:6c:fd:e8:f1:
1c:8c:ec:f4:d5:70:ac:88:76:6c:55:09:90:7d:2c:f9:e8:c1:
ad:2a:07:85:c2:fc:ac:1d:09:b2:3a:4d:f9:89:c0:35:02:f7:
cf:18:40:86:c2:b4:d0:a4:58:23:65:6c:64:83:c7:3d:ec:9b:
f4:40:d6:5e:6c:07:ab:9f:3f:52:0f:c5:38:1a:43:18:97:7b:
09:24:c7:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/bMkt1T8AIc+870CI174VnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwODA3MDc0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDk0ZWMwMWE1YmZkYjg3OWZkYzk5NzAwNmE0YmM4NTMwYjczYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsy79OB7/PuqlxpbK3IGp/GZ83J9
7KXr+h/Tyq9qsSPwolkAvmrc0tCSVzAcBWK9YvBUtPYOcRU+aMpJNhlsX72asDRk
ClctNQxsdTtTrvnMQq0chPyQWyKcwZV6SopuNQxQ6+bw3Ztrcc7QNCPDyf07xQv7
1ykwds/QhD0oML31n72jJ5odSA7JXIJo6IIEbea1ngWMAKKuRoiZvoeJsVdzSDY8
9ZEDEV5amp321f+2P+Cxvu89g5UydVtX8cibzUdHZoYA22AjVfFaKx143eLdrfr2
loH78zYGa4JXx3QbPPLSiDXmZeQjSRr7mZonj1kbk4pzQJDisiZIEvzw3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGSU7AGlv9uHn9yZcAakvIUwtzxKMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvWkpUc0FhV18yNGVmM0psd0JxUzhoVEMzUEVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBgk66AwQA
gk6+MA0GCSqGSIb3DQEBCwUAA4IBAQBzssQiE6kR2sf13Vrepy/1pZee+B9fJUqT
Juci05bEC2h0Gq9xxmtCvEUTTau/8baSb3ijrZ9vbxRWWY8iae+dD00Q30fwhEN4
67vpDa3o321wkqZUZ/lNxAD7PkoVlJ6CJ2Z5YnXe3uoj1TqdqNdMQxhwSI8EJvIU
kDAsVWzhOzdPJMkqSXY0szYYs/L5pKExTQRP7SQW3/lEn+3VjzzqZpzwkvOfz5YF
HNRy8/r9CWz96PEcjOz01XCsiHZsVQmQfSz56MGtKgeFwvysHQmyOk35icA1AvfP
GECGwrTQpFgjZWxkg8c97Jv0QNZebAernz9SD8U4GkMYl3sJJMen
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:09 2026 by rpki-client