Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZaBTtXxHm50OL7jujOwiGybCS5g.roa
File: ZaBTtXxHm50OL7jujOwiGybCS5g.roa (raw, json)
Hash identifier: 406Pqi9Ikx0RkEmept16u9Bxqg0IVuITC0HCZCzuPCQ=
Subject key identifier: 65:A0:53:B5:7C:47:9B:9D:0E:2F:B8:EE:8C:EC:22:1B:26:C2:4B:98
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019FD2EADA61C5914B3C2443451BBE5EFB04
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZaBTtXxHm50OL7jujOwiGybCS5g.roa
Signing time: Wed 05 Aug 2026 17:13:54 +0000
ROA not before: Wed 05 Aug 2026 17:13:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.41.0/24 maxlen: 24
78.128.86.0/23 maxlen: 23
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.31.0/24 maxlen: 24
83.222.190.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:ea:da:61:c5:91:4b:3c:24:43:45:1b:be:5e:fb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Aug 5 17:13:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65a053b57c479b9d0e2fb8ee8cec221b26c24b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:6d:e0:53:9b:4e:9e:30:1b:90:fc:46:77:
bc:fe:ab:b6:61:fb:77:4d:f0:3c:5b:3f:f9:d4:99:
e0:46:a2:09:76:86:7a:eb:cf:04:1a:b6:96:00:c3:
95:9e:43:06:0e:81:83:4c:ad:d1:21:f7:91:3e:33:
db:bc:12:eb:6e:b0:94:09:53:6b:0e:ac:31:60:d9:
3f:1d:3a:c9:0c:c8:25:cd:87:c8:94:ac:af:f1:8f:
83:af:c0:48:a3:01:ee:bf:86:3d:71:6d:c0:4c:83:
54:2e:a6:a5:0a:e9:cc:4f:5b:4a:b0:d9:19:7f:0b:
11:8d:78:4d:0b:12:8c:e8:f3:52:a7:4f:3f:2f:90:
ec:03:99:e1:5d:19:3f:5f:8e:be:9d:6f:23:10:1f:
5f:09:de:a5:29:bf:ac:24:1e:87:cb:f1:53:ed:6c:
60:d9:b9:e0:c1:74:d2:33:52:85:f3:27:a3:1a:93:
c6:ed:1e:56:1d:20:e5:49:fd:42:1c:b0:01:21:c4:
59:b4:b6:52:d1:ee:bf:e0:2d:95:34:cb:0b:82:f1:
c3:81:86:63:c8:f3:ee:70:2a:be:60:9d:91:c9:a7:
7f:17:5d:12:a5:a8:90:77:d1:5f:c6:16:a1:8c:77:
67:49:9a:86:26:5f:22:0b:2b:b9:d1:f0:58:22:8c:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:53:B5:7C:47:9B:9D:0E:2F:B8:EE:8C:EC:22:1B:26:C2:4B:98
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZaBTtXxHm50OL7jujOwiGybCS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.41.0/24
78.128.86.0-78.128.91.255
78.128.97.0/24
78.128.100.0/22
78.128.116.0/23
78.142.31.0/24
83.222.190.0/23
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.175.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
be:43:07:c8:58:1f:4d:da:b0:de:71:ba:c9:ec:61:02:18:a3:
12:a3:9e:03:e4:2d:51:8d:0c:1b:07:8f:e6:db:49:5c:2d:af:
d4:f4:9c:74:d4:ec:8e:bd:fe:d1:78:73:01:fd:fb:32:6a:dc:
be:37:9c:08:29:89:ff:5f:ee:20:64:4d:4a:2c:3b:94:45:a4:
55:41:10:d3:f4:98:26:e3:42:38:32:12:9f:b1:bf:34:40:83:
0d:fe:49:f8:b6:d7:cf:80:50:9e:a3:74:26:78:46:fc:c6:b2:
36:63:11:b2:25:80:8d:ed:57:84:9f:d4:e3:e5:17:78:b8:92:
0f:cd:1a:c4:d6:35:83:42:94:c7:97:98:6e:40:a5:b1:d3:cc:
e9:cf:dd:a3:16:d0:d4:dc:a2:71:92:ff:a0:4b:f1:96:66:03:
a1:e0:cb:e5:55:78:5b:9d:e1:70:58:96:d6:1e:e8:06:4c:3c:
0a:8f:79:0f:77:f6:11:79:24:1e:d0:fa:d5:9e:19:bc:e4:c0:
fe:48:f6:51:68:cc:51:d5:ce:96:f5:02:1a:94:7a:08:c0:a4:
bc:93:1d:4c:16:15:8f:b9:d1:06:50:7c:dc:05:47:30:80:ba:
75:db:9d:7a:7f:ca:4f:ee:17:f0:e1:26:8c:d0:1d:ce:f7:8d:
6a:7f:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:48 2026 by rpki-client