Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/ZIZ030QhhzFvggSEl-vTxdGfHlg.roa
File: ZIZ030QhhzFvggSEl-vTxdGfHlg.roa (raw, json)
Hash identifier: CUycEuUDS0zxjJemu4oZ9wIU+xi7vqRjfi0W27XlBfI=
Subject key identifier: 64:86:74:DF:44:21:87:31:6F:82:04:84:97:EB:D3:C5:D1:9F:1E:58
Certificate issuer: /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial: 019F3A96B771AB3330CC9A541CDFB666700D
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/ZIZ030QhhzFvggSEl-vTxdGfHlg.roa
Signing time: Tue 07 Jul 2026 03:19:43 +0000
ROA not before: Tue 07 Jul 2026 03:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214459
IP address blocks: 193.38.32.0/24 maxlen: 24
2a0e:7a05::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:96:b7:71:ab:33:30:cc:9a:54:1c:df:b6:66:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Validity
Not Before: Jul 7 03:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=648674df442187316f82048497ebd3c5d19f1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:51:94:4b:b5:53:c4:f0:f1:33:df:c4:1d:
b7:6b:c4:54:29:d4:69:cc:ec:a7:17:d6:c6:11:e1:
e4:79:db:d6:a0:2d:54:5a:b1:cc:af:ba:00:7a:54:
40:d5:05:3a:f1:4d:52:f3:44:a1:30:11:d1:f0:22:
a1:93:7e:26:82:d2:40:50:b3:ba:ba:bd:a2:38:78:
2f:d5:43:29:cc:e0:98:48:09:c1:98:ba:b4:45:8a:
9a:c8:5d:55:48:39:77:de:fe:c7:7c:36:fe:be:7d:
11:cb:23:58:cc:75:34:1b:96:dd:1e:df:de:1f:3e:
2e:26:4d:46:3d:82:63:ae:3a:20:1a:2b:ae:3c:4b:
74:98:b8:c1:d2:cb:6a:f3:33:26:9a:94:66:9f:64:
b3:b5:95:04:22:fe:37:4f:9c:57:1f:31:7d:75:53:
29:53:52:12:1e:50:39:b3:38:b0:bd:80:43:01:36:
9f:ed:c7:a4:65:3e:11:8a:92:6f:4d:af:f5:29:01:
ae:14:07:a4:94:c7:f4:68:02:05:5f:cb:c7:01:1f:
9d:7b:31:41:28:e6:5d:91:32:74:b7:57:80:55:88:
14:96:db:d4:d4:70:53:11:13:6a:cd:12:10:87:65:
c8:ff:be:92:18:82:ed:29:34:3a:da:52:43:74:a6:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:74:DF:44:21:87:31:6F:82:04:84:97:EB:D3:C5:D1:9F:1E:58
X509v3 Authority Key Identifier:
keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/ZIZ030QhhzFvggSEl-vTxdGfHlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.32.0/24
IPv6:
2a0e:7a05::/32
Signature Algorithm: sha256WithRSAEncryption
3e:f5:68:6d:fb:5c:04:19:71:aa:f7:57:7a:be:f9:ab:6d:6d:
93:df:86:6b:5f:3c:e7:10:24:d6:86:0e:2a:55:04:d2:e1:d1:
fa:74:07:59:8f:46:89:1e:3f:3f:2d:7d:36:ed:1b:a4:eb:2c:
63:95:9a:12:83:cb:92:ec:13:ed:2d:92:2e:a5:d0:61:b9:82:
fb:32:cd:ab:1c:58:9a:b5:a8:35:64:54:7b:59:1c:32:a4:94:
a0:41:b3:14:65:5d:b6:f6:fc:02:d8:d0:12:a8:1a:8e:91:ac:
db:1f:34:f3:47:dc:65:ef:88:54:7a:03:46:2b:d1:61:9a:05:
da:05:35:87:c4:21:2f:1c:31:69:84:52:23:aa:39:0c:10:1d:
32:2b:4c:4c:53:f2:cc:d8:92:06:32:fb:c9:05:ed:83:7e:8c:
50:8c:8d:00:d5:d6:22:3a:52:47:cb:19:46:34:e8:df:43:cf:
dc:6b:ae:82:61:2b:2b:c7:00:4a:65:af:bb:3c:34:ea:72:31:
19:18:a1:e7:77:cd:3d:95:29:c1:d5:e7:0e:03:fd:f2:fb:1b:
46:d3:f9:19:81:1f:eb:62:9b:ec:c3:02:13:23:2d:51:9b:d8:
21:3e:87:da:c0:4f:74:9a:7e:67:07:6a:cb:56:ff:b4:2a:88:
c8:89:88:01
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ86lrdxqzMwzJpUHN+2ZnANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljNjI2YjNjZDRiZGMyMjQxZWVkMzQyZjQ4ODNlZmI1
NjU0YTAwHhcNMjYwNzA3MDMxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDg2NzRkZjQ0MjE4NzMxNmY4MjA0ODQ5N2ViZDNjNWQxOWYxZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNFRlEu1U8Tw8TPfxB23a8RUKdRp
zOynF9bGEeHkedvWoC1UWrHMr7oAelRA1QU68U1S80ShMBHR8CKhk34mgtJAULO6
ur2iOHgv1UMpzOCYSAnBmLq0RYqayF1VSDl33v7HfDb+vn0RyyNYzHU0G5bdHt/e
Hz4uJk1GPYJjrjogGiuuPEt0mLjB0stq8zMmmpRmn2SztZUEIv43T5xXHzF9dVMp
U1ISHlA5sziwvYBDATaf7cekZT4RipJvTa/1KQGuFAeklMf0aAIFX8vHAR+dezFB
KOZdkTJ0t1eAVYgUltvU1HBTERNqzRIQh2XI/76SGILtKTQ62lJDdKZxkQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGSGdN9EIYcxb4IEhJfr08XRnx5YMB8GA1UdIwQY
MBaAFIu5xiazzUvcIkHu00L0iD77VlSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduR0pyUE5TOXdpUWU3VFF2U0lQdnRXVktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOTM3NDItNmNkNi00YTUwLTgxYjEt
YzE1MjFiZGYzNDRkLzEvWklaMDMwUWhoekZ2Z2dTRWwtdlR4ZEdmSGxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lOTM3NDItNmNkNi00YTUwLTgxYjEtYzE1MjFiZGYzNDRk
LzEvaTduR0pyUE5TOXdpUWU3VFF2U0lQdnRXVktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSYgMA0E
AgACMAcDBQAqDnoFMA0GCSqGSIb3DQEBCwUAA4IBAQA+9Wht+1wEGXGq91d6vvmr
bW2T34ZrXzznECTWhg4qVQTS4dH6dAdZj0aJHj8/LX027Ruk6yxjlZoSg8uS7BPt
LZIupdBhuYL7Ms2rHFiatag1ZFR7WRwypJSgQbMUZV229vwC2NASqBqOkazbHzTz
R9xl74hUegNGK9FhmgXaBTWHxCEvHDFphFIjqjkMEB0yK0xMU/LM2JIGMvvJBe2D
foxQjI0A1dYiOlJHyxlGNOjfQ8/ca66CYSsrxwBKZa+7PDTqcjEZGKHnd809lSnB
1ecOA/3y+xtG0/kZgR/rYpvswwITIy1Rm9ghPofawE90mn5nB2rLVv+0KojIiYgB
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:55 2026 by rpki-client