Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p_ZmvnhxZXqMGAfBFkCIPxkVtcE.roa
File: p_ZmvnhxZXqMGAfBFkCIPxkVtcE.roa (raw, json)
Hash identifier: XwcZ/T09ELW4Epb9fnc9dHAR8K8+oApFZJOFrPW7dcg=
Subject key identifier: A7:F6:66:BE:78:71:65:7A:8C:18:07:C1:16:40:88:3F:19:15:B5:C1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FDB4EAECF90117B1582818C433B41CD2F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p_ZmvnhxZXqMGAfBFkCIPxkVtcE.roa
Signing time: Fri 07 Aug 2026 08:19:54 +0000
ROA not before: Fri 07 Aug 2026 08:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 185.225.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:4e:ae:cf:90:11:7b:15:82:81:8c:43:3b:41:cd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 08:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7f666be7871657a8c1807c11640883f1915b5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:29:c9:b5:10:aa:ba:6f:c7:25:aa:e3:22:
cb:1e:af:b9:37:4b:db:4a:00:af:24:b6:d0:38:9b:
3b:f5:5e:aa:ca:ed:5e:a2:8f:7f:68:61:6e:2e:29:
b1:01:44:0b:b3:15:29:fd:fc:7e:0a:5d:36:5c:73:
40:c8:36:b5:2a:c6:a9:90:bb:53:b3:71:5d:06:3c:
fa:61:c2:0b:ac:73:8d:55:b8:68:4e:53:c9:a8:4e:
32:21:86:aa:b6:e6:aa:a4:6e:11:70:a4:2b:1e:89:
25:4b:1a:e8:3a:67:36:13:29:a7:b0:57:f0:f6:46:
86:5f:4a:bb:2b:e4:20:f8:9d:37:fa:07:6a:c1:10:
e2:42:f3:20:2c:3a:ef:0e:94:dd:fe:21:15:d0:e7:
cd:ec:50:19:02:7b:07:10:2d:53:78:90:e6:09:eb:
eb:6d:bd:1b:80:e4:fa:c4:20:05:6a:04:1d:7d:77:
72:d1:78:a5:9b:49:bf:1a:68:bd:c6:75:2d:93:47:
e0:34:78:a6:06:f4:a8:c4:a1:8b:b2:18:fa:94:9f:
73:b6:96:b0:03:5f:47:9a:db:fe:d4:66:91:bf:d6:
b8:e1:0a:5a:5a:02:db:62:ef:47:b7:4b:d2:d2:42:
dc:2c:78:d2:72:31:da:71:1d:19:69:f6:81:c8:8e:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:66:BE:78:71:65:7A:8C:18:07:C1:16:40:88:3F:19:15:B5:C1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p_ZmvnhxZXqMGAfBFkCIPxkVtcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
71:84:f5:9a:c9:b0:b9:92:4c:26:45:de:e8:7e:68:c9:d2:f3:
49:65:f0:e9:40:59:42:8d:4a:76:0b:be:64:7b:a1:99:42:65:
3f:a7:92:35:c8:ae:71:85:e6:35:6d:2c:a5:ae:57:ac:fc:15:
bd:86:d4:41:f6:c5:a1:33:47:db:7b:6e:8d:8e:f2:1f:3f:2c:
b7:22:46:c6:12:99:a4:1f:7f:23:3b:35:62:f4:e4:49:0c:75:
6d:4f:b0:66:33:b3:08:c7:eb:1a:21:32:c3:89:36:dc:ae:71:
40:78:bd:a7:30:65:d2:1a:17:e9:56:a1:22:91:4f:50:c1:c4:
b6:01:84:83:c1:21:92:e2:73:b5:be:20:a4:4b:68:56:8f:75:
8e:1c:78:a8:e8:65:b8:b4:0e:47:6b:b9:1e:d7:aa:8e:0c:b5:
8c:5f:01:0d:2a:3f:fe:72:d4:5e:45:76:13:f4:85:ef:a0:a4:
46:e1:fd:ee:c5:58:26:9e:ee:60:26:bd:22:ff:9d:dd:af:ec:
34:dc:bf:36:c6:4f:f8:9c:ca:2b:11:99:67:7c:06:18:56:26:
25:b5:8b:5a:8b:85:d8:d7:df:84:b0:a9:9e:7d:af:8c:4a:ab:
53:96:5f:fa:97:55:0e:e4:f5:76:7e:c9:46:e7:5f:90:8d:2b:
f5:ad:1a:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/bTq7PkBF7FYKBjEM7Qc0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwODA3MDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2Y2NjZiZTc4NzE2NTdhOGMxODA3YzExNjQwODgzZjE5MTViNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sEpybUQqrpvxyWq4yLLHq+5N0vb
SgCvJLbQOJs79V6qyu1eoo9/aGFuLimxAUQLsxUp/fx+Cl02XHNAyDa1KsapkLtT
s3FdBjz6YcILrHONVbhoTlPJqE4yIYaqtuaqpG4RcKQrHoklSxroOmc2EymnsFfw
9kaGX0q7K+Qg+J03+gdqwRDiQvMgLDrvDpTd/iEV0OfN7FAZAnsHEC1TeJDmCevr
bb0bgOT6xCAFagQdfXdy0Xilm0m/Gmi9xnUtk0fgNHimBvSoxKGLshj6lJ9ztpaw
A19Hmtv+1GaRv9a44QpaWgLbYu9Ht0vS0kLcLHjScjHacR0ZafaByI4DvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKf2Zr54cWV6jBgHwRZAiD8ZFbXBMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvcF9abXZuaHhaWHFNR0FmQkZrQ0lQeGtWdGNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEVMA0G
CSqGSIb3DQEBCwUAA4IBAQBxhPWaybC5kkwmRd7ofmjJ0vNJZfDpQFlCjUp2C75k
e6GZQmU/p5I1yK5xheY1bSylrles/BW9htRB9sWhM0fbe26NjvIfPyy3IkbGEpmk
H38jOzVi9ORJDHVtT7BmM7MIx+saITLDiTbcrnFAeL2nMGXSGhfpVqEikU9QwcS2
AYSDwSGS4nO1viCkS2hWj3WOHHio6GW4tA5Ha7ke16qODLWMXwENKj/+ctReRXYT
9IXvoKRG4f3uxVgmnu5gJr0i/53dr+w03L82xk/4nMorEZlnfAYYViYltYtai4XY
19+EsKmefa+MSqtTll/6l1UO5PV2fslG51+QjSv1rRpp
-----END CERTIFICATE-----
Generated at Fri Aug 7 19:04:22 2026 by rpki-client