Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZyKwbccyVfxFWStWGmNBds2K9AE.roa
File: ZyKwbccyVfxFWStWGmNBds2K9AE.roa (raw, json)
Hash identifier: C74fBVKBp8P7zkaen+ft55vIs/92CO4DbwapwB4BQdE=
Subject key identifier: 67:22:B0:6D:C7:32:55:FC:45:59:2B:56:1A:63:41:76:CD:8A:F4:01
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A129FD1A5A9A912FAA431578EE5995C7F6
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZyKwbccyVfxFWStWGmNBds2K9AE.roa
Signing time: Sun 11 Oct 2026 08:03:35 +0000
ROA not before: Sun 11 Oct 2026 08:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fd:1a:5a:9a:91:2f:aa:43:15:78:ee:59:95:c7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 11 08:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6722b06dc73255fc45592b561a634176cd8af401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:b8:87:04:1c:fc:eb:70:2c:aa:17:c9:b7:
09:a8:7d:ec:6d:54:22:f4:0c:14:bf:71:a0:69:52:
20:bc:84:8f:08:59:3e:d5:68:99:c7:21:74:9c:e5:
ae:fc:90:c1:a4:f7:43:91:e5:5b:e4:2a:05:95:e3:
e9:9b:6a:ef:97:58:a6:cc:cf:76:a1:6c:e5:6a:c1:
aa:08:89:4b:96:3c:e7:45:38:eb:f4:f9:dd:72:ea:
6d:6e:3a:a3:f2:dc:7f:9c:8d:93:01:a4:64:16:68:
bf:60:b2:5f:1f:77:e1:b1:9b:85:87:7f:2d:35:cd:
be:85:f9:63:70:d0:be:7f:75:ce:80:00:d4:72:0b:
4d:60:0a:84:3d:d6:08:b4:50:11:a0:94:5c:f4:de:
3a:7e:a2:0a:7a:6a:c5:76:73:09:4c:f7:c9:78:6d:
2c:97:9e:8a:22:e6:46:af:6b:c9:75:ae:f1:df:ed:
a0:12:bc:50:a1:14:a9:c8:83:7a:43:a2:05:bf:b4:
e4:7f:c6:8d:97:c8:39:e3:9a:c0:76:a2:9e:d6:42:
c7:cd:c9:cb:c8:8f:10:cc:5e:9b:5d:2b:aa:d0:b3:
55:82:7d:f5:73:e6:e7:ce:50:21:33:84:82:d1:42:
f9:d3:f4:91:91:b2:4b:8b:41:e0:81:65:43:6b:0a:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:B0:6D:C7:32:55:FC:45:59:2B:56:1A:63:41:76:CD:8A:F4:01
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZyKwbccyVfxFWStWGmNBds2K9AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
98:00:83:b9:49:17:92:ee:7c:61:b7:70:9a:f3:2d:ed:d7:0d:
d9:1f:5d:e8:04:d8:52:50:94:a4:d9:f7:c5:4c:32:9c:80:c4:
f0:4b:f8:7a:50:02:fa:e5:26:12:9a:2b:ca:7f:ba:08:85:a6:
da:5a:43:f2:62:9e:10:1f:99:dc:d9:7f:8b:92:b4:87:f9:d9:
99:c8:74:d5:4b:fa:87:7e:5a:cd:2b:d4:54:f2:3e:32:e8:4f:
91:5c:87:5f:cc:db:e5:58:57:af:6a:b4:62:69:8e:e0:42:8f:
ae:9c:02:b5:44:e4:69:53:71:bb:4f:3b:f1:03:58:8e:39:cf:
6b:c9:bb:ca:b2:fd:4c:e8:0d:59:9c:f8:5b:32:1f:50:a5:7a:
a3:1b:ac:0e:33:60:c6:6c:41:67:be:6b:f5:75:21:03:17:aa:
86:8c:ed:87:18:15:96:10:11:bb:b5:f7:19:4e:b3:d2:51:4d:
cd:b7:f1:42:c6:f5:8b:2d:d2:92:4e:70:20:96:1c:91:74:bd:
66:2f:bb:df:45:4b:d9:58:fd:a0:7d:f0:fe:c7:cb:db:d2:b7:
32:73:55:1d:7a:5f:5a:5a:73:cb:52:29:97:6d:43:69:11:54:
91:a5:14:f3:36:e0:df:f0:c6:80:5d:ed:d5:32:82:08:52:d4:
4f:b6:04:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEp/RpampEvqkMVeO5Zlcf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYxMDExMDgwMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzIyYjA2ZGM3MzI1NWZjNDU1OTJiNTYxYTYzNDE3NmNkOGFmNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ra4hwQc/OtwLKoXybcJqH3sbVQi
9AwUv3GgaVIgvISPCFk+1WiZxyF0nOWu/JDBpPdDkeVb5CoFlePpm2rvl1imzM92
oWzlasGqCIlLljznRTjr9Pndcuptbjqj8tx/nI2TAaRkFmi/YLJfH3fhsZuFh38t
Nc2+hfljcNC+f3XOgADUcgtNYAqEPdYItFARoJRc9N46fqIKemrFdnMJTPfJeG0s
l56KIuZGr2vJda7x3+2gErxQoRSpyIN6Q6IFv7Tkf8aNl8g545rAdqKe1kLHzcnL
yI8QzF6bXSuq0LNVgn31c+bnzlAhM4SC0UL50/SRkbJLi0HggWVDawp3wwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGcisG3HMlX8RVkrVhpjQXbNivQBMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvWnlLd2JjY3lWZnhGV1N0V0dtTkJkczJLOUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVEQAwQA
uckxMA0GCSqGSIb3DQEBCwUAA4IBAQCYAIO5SReS7nxht3Ca8y3t1w3ZH13oBNhS
UJSk2ffFTDKcgMTwS/h6UAL65SYSmivKf7oIhabaWkPyYp4QH5nc2X+LkrSH+dmZ
yHTVS/qHflrNK9RU8j4y6E+RXIdfzNvlWFevarRiaY7gQo+unAK1RORpU3G7Tzvx
A1iOOc9rybvKsv1M6A1ZnPhbMh9QpXqjG6wOM2DGbEFnvmv1dSEDF6qGjO2HGBWW
EBG7tfcZTrPSUU3Nt/FCxvWLLdKSTnAglhyRdL1mL7vfRUvZWP2gffD+x8vb0rcy
c1Udel9aWnPLUimXbUNpEVSRpRTzNuDf8MaAXe3VMoIIUtRPtgTX
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:12:10 2026 by rpki-client