Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZCI9vDSGszWUjj5L0n9gnj3YP2Q.roa
File: ZCI9vDSGszWUjj5L0n9gnj3YP2Q.roa (raw, json)
Hash identifier: qZph83gpcxtssqwjFFaUMuRdJpa+g7bZpEo24M7lj7U=
Subject key identifier: 64:22:3D:BC:34:86:B3:35:94:8E:3E:4B:D2:7F:60:9E:3D:D8:3F:64
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D714813FA2E63599D03100564A238D124
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZCI9vDSGszWUjj5L0n9gnj3YP2Q.roa
Signing time: Thu 09 Apr 2026 08:07:22 +0000
ROA not before: Thu 09 Apr 2026 08:07:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 185.226.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:48:13:fa:2e:63:59:9d:03:10:05:64:a2:38:d1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 9 08:07:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64223dbc3486b335948e3e4bd27f609e3dd83f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:98:ca:35:ef:a0:5a:e4:97:50:b6:38:f8:
06:1c:c5:cc:60:d7:33:10:aa:8e:68:b7:b0:4d:55:
68:2c:21:f9:64:f8:b6:db:fb:84:ad:72:3b:98:fb:
71:07:71:2a:50:02:9f:bf:e9:5e:91:cb:e8:c8:ba:
39:67:70:72:eb:cd:e0:d4:5a:35:0f:58:8a:82:06:
f4:94:2c:3d:55:c2:98:85:be:a2:1a:87:b7:f2:9c:
3d:a2:48:7b:ec:bb:ed:4b:c3:34:7e:82:3c:04:d7:
3d:88:da:25:51:f0:b9:3c:8b:62:68:a8:13:6a:52:
b7:b0:ae:a5:1f:57:7f:11:66:14:02:c2:1d:b3:11:
63:47:ec:7b:08:a7:a2:89:5e:64:b1:93:8a:29:d1:
fa:32:16:33:2d:c3:ee:e5:65:d9:b6:3e:0f:2e:0d:
f0:34:1e:84:5c:8a:88:9d:94:a8:b9:af:78:18:f2:
92:74:fa:44:2d:3a:bf:d5:e0:d7:f4:94:6e:ed:49:
93:d1:a7:cb:24:04:cc:a1:ce:c4:eb:3b:9d:fe:42:
21:15:7b:c8:c1:cb:02:85:4d:08:63:c8:dd:49:a2:
5e:a5:57:90:1c:87:9e:f7:ec:20:3d:cc:8b:ea:8f:
91:bf:08:78:94:bb:ad:35:ea:66:a1:76:e8:7f:d8:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:22:3D:BC:34:86:B3:35:94:8E:3E:4B:D2:7F:60:9E:3D:D8:3F:64
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZCI9vDSGszWUjj5L0n9gnj3YP2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.105.0/24
Signature Algorithm: sha256WithRSAEncryption
71:56:22:5d:67:95:4f:91:04:78:d0:db:a2:81:dd:38:65:be:
ce:a6:33:a9:5a:fc:0a:f4:73:a5:28:fb:a9:e0:a1:a3:ac:96:
fa:0a:7e:6d:e7:4e:86:c4:1b:7f:42:d0:5c:cc:96:78:70:1a:
93:a5:d9:1e:7c:34:05:27:b5:9c:a4:6a:bb:40:10:f9:03:d3:
7d:e8:a2:61:6e:bd:1f:68:af:f7:b6:21:2e:86:fd:f9:68:0b:
43:f8:62:48:8b:3f:c5:36:fd:24:94:c6:e5:c2:bb:4c:8b:fe:
00:3c:e5:e3:3c:44:67:3d:8f:e5:e9:d2:7f:9c:4f:d0:81:d1:
70:e9:70:26:78:3a:f8:ee:11:71:cf:70:33:e1:c2:06:55:cc:
3f:4d:d4:b6:0c:33:a0:c9:1d:57:11:c7:8d:d3:48:f4:b6:e5:
8c:2c:c1:27:6e:0b:cc:2c:a2:c9:2d:09:fb:07:70:ea:95:e3:
9b:36:11:87:7c:30:4c:ec:c8:c2:3a:06:8f:02:66:a1:6e:54:
f4:fd:54:1e:d1:90:4c:96:b6:4e:b9:f2:84:27:10:c5:4d:45:
8c:b1:c4:73:19:56:9a:78:a5:c4:a8:6b:8f:91:5c:75:c0:d3:
77:dc:09:d8:6b:c1:69:3a:dc:c6:84:33:07:03:ae:e9:d4:9e:
a6:48:8b:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1xSBP6LmNZnQMQBWSiONEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwNDA5MDgwNzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDIyM2RiYzM0ODZiMzM1OTQ4ZTNlNGJkMjdmNjA5ZTNkZDgzZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOuYyjXvoFrkl1C2OPgGHMXMYNcz
EKqOaLewTVVoLCH5ZPi22/uErXI7mPtxB3EqUAKfv+lekcvoyLo5Z3By683g1Fo1
D1iKggb0lCw9VcKYhb6iGoe38pw9okh77LvtS8M0foI8BNc9iNolUfC5PItiaKgT
alK3sK6lH1d/EWYUAsIdsxFjR+x7CKeiiV5ksZOKKdH6MhYzLcPu5WXZtj4PLg3w
NB6EXIqInZSoua94GPKSdPpELTq/1eDX9JRu7UmT0afLJATMoc7E6zud/kIhFXvI
wcsChU0IY8jdSaJepVeQHIee9+wgPcyL6o+Rvwh4lLutNepmoXbof9jWhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQiPbw0hrM1lI4+S9J/YJ492D9kMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWkNJOXZEU0dzeldVamo1TDBuOWduajNZUDJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJpMA0G
CSqGSIb3DQEBCwUAA4IBAQBxViJdZ5VPkQR40Nuigd04Zb7OpjOpWvwK9HOlKPup
4KGjrJb6Cn5t506GxBt/QtBczJZ4cBqTpdkefDQFJ7WcpGq7QBD5A9N96KJhbr0f
aK/3tiEuhv35aAtD+GJIiz/FNv0klMblwrtMi/4APOXjPERnPY/l6dJ/nE/QgdFw
6XAmeDr47hFxz3Az4cIGVcw/TdS2DDOgyR1XEceN00j0tuWMLMEnbgvMLKLJLQn7
B3DqleObNhGHfDBM7MjCOgaPAmahblT0/VQe0ZBMlrZOufKEJxDFTUWMscRzGVaa
eKXEqGuPkVx1wNN33AnYa8FpOtzGhDMHA67p1J6mSIts
-----END CERTIFICATE-----
Generated at Fri Apr 10 06:07:20 2026 by rpki-client