Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Z82rG6_S6tuaECr9XCpjrA6MXBY.roa
File: Z82rG6_S6tuaECr9XCpjrA6MXBY.roa (raw, json)
Hash identifier: b7wehsai3YBico5JtbrGo9m6dNte7f4BVY42wHZn7pY=
Subject key identifier: 67:CD:AB:1B:AF:D2:EA:DB:9A:10:2A:FD:5C:2A:63:AC:0E:8C:5C:16
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01A05702843109F4C201E7DD44D455A40C5A
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Z82rG6_S6tuaECr9XCpjrA6MXBY.roa
Signing time: Mon 31 Aug 2026 08:49:37 +0000
ROA not before: Mon 31 Aug 2026 08:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62205
IP address blocks: 79.174.184.0/22 maxlen: 24
79.174.184.0/23 maxlen: 24
79.174.186.0/23 maxlen: 24
79.174.188.0/23 maxlen: 24
79.174.190.0/24 maxlen: 24
91.209.128.0/23 maxlen: 23
91.209.130.0/24 maxlen: 24
139.28.180.0/22 maxlen: 22
139.28.180.0/23 maxlen: 23
139.28.182.0/23 maxlen: 23
178.213.80.0/21 maxlen: 21
178.213.80.0/22 maxlen: 24
178.213.84.0/23 maxlen: 24
178.213.86.0/24 maxlen: 24
185.44.164.0/23 maxlen: 24
185.44.166.0/24 maxlen: 24
185.77.228.0/23 maxlen: 24
185.77.230.0/24 maxlen: 24
185.77.240.0/22 maxlen: 24
185.77.240.0/23 maxlen: 24
185.77.242.0/23 maxlen: 24
195.3.140.0/23 maxlen: 23
2a01:72a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:02:84:31:09:f4:c2:01:e7:dd:44:d4:55:a4:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Aug 31 08:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67cdab1bafd2eadb9a102afd5c2a63ac0e8c5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:9d:c7:cf:f1:d2:d7:e7:fc:70:f0:88:01:
3e:d9:07:dc:f3:43:ce:4d:8c:49:59:4d:1f:66:12:
dd:d6:a3:45:5c:49:82:a6:03:66:c4:92:d4:a2:df:
68:af:cb:45:fe:5d:07:86:0e:cb:9c:2e:17:8c:68:
c0:1b:79:35:31:da:70:8b:39:3d:bf:21:d6:70:45:
cf:51:9d:d0:9e:39:fa:b1:0c:10:32:5a:b5:1d:b3:
58:d4:f4:bc:0a:d4:69:2a:a2:16:d7:dd:68:82:ac:
d8:8a:9d:40:c6:a4:da:b5:89:aa:68:8f:c0:38:9f:
0c:87:51:7c:e5:53:1a:6c:22:4f:80:97:d7:28:9b:
a9:c0:72:91:5d:d3:da:ea:ba:44:5b:a8:47:ea:56:
f4:dc:0e:34:9d:8d:88:39:89:f7:bc:b2:3e:a5:cc:
af:ae:ec:bd:0c:d8:51:e9:9d:0c:45:76:fe:2b:e1:
39:8b:85:6a:6c:d0:36:90:b2:c4:ef:db:b5:11:b2:
6e:52:e1:88:6f:ff:20:af:8e:08:bb:1c:80:cb:3d:
81:d8:c8:17:4f:c3:4a:6b:8a:45:c2:a9:40:66:63:
68:0d:16:d5:8d:77:3c:d7:fc:ee:7e:d0:3e:61:9b:
c2:eb:92:3a:86:91:0d:f4:06:2a:7b:68:18:57:04:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:AB:1B:AF:D2:EA:DB:9A:10:2A:FD:5C:2A:63:AC:0E:8C:5C:16
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Z82rG6_S6tuaECr9XCpjrA6MXBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.184.0-79.174.190.255
91.209.128.0-91.209.130.255
139.28.180.0/22
178.213.80.0/21
185.44.164.0-185.44.166.255
185.77.228.0-185.77.230.255
185.77.240.0/22
195.3.140.0/23
IPv6:
2a01:72a0::/32
Signature Algorithm: sha256WithRSAEncryption
08:ed:dd:8b:9f:38:f7:1c:b1:47:f3:75:c3:b1:3f:f6:63:28:
06:b8:66:4d:5b:05:c1:bf:b5:7c:c2:67:40:0d:1b:66:38:15:
1a:33:94:5d:e6:a7:54:c1:88:51:ab:17:9a:31:e9:f5:6f:8d:
15:16:7d:bd:cc:9f:d1:f4:38:1b:b7:57:7b:c2:7e:0a:58:0b:
e3:7c:c4:53:78:fe:e7:85:bf:a7:63:4e:ea:55:ad:d8:f1:1d:
53:ba:6f:17:d6:28:49:98:f6:4b:2b:0c:cd:4d:c2:fe:3a:74:
43:3e:89:76:61:7b:7d:dd:e8:05:8d:e5:b5:ca:e3:91:7b:f3:
cd:a1:7b:6f:04:39:40:06:b6:86:c4:c0:20:2d:76:6c:05:f8:
cd:d3:a7:bf:92:a1:2b:60:82:7d:83:35:2a:27:66:7b:3f:51:
01:50:d7:00:91:70:26:c1:63:26:63:1e:e0:09:7b:a7:c1:94:
96:2e:8e:3d:64:cc:76:f6:a5:34:49:4b:8f:30:b2:f5:6a:af:
6c:e2:aa:4b:29:d7:ec:c5:fa:24:26:92:cf:7b:c5:05:12:22:
d1:48:34:f7:88:83:df:19:dd:81:29:97:51:e3:f3:16:ad:f0:
f0:f3:76:e8:49:3e:97:b1:cf:15:17:2f:04:12:d5:c8:eb:c9:
ab:42:0f:85
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAaBXAoQxCfTCAefdRNRVpAxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjYwODMxMDg0OTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2NkYWIxYmFmZDJlYWRiOWExMDJhZmQ1YzJhNjNhYzBlOGM1YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+udx8/x0tfn/HDwiAE+2Qfc80PO
TYxJWU0fZhLd1qNFXEmCpgNmxJLUot9or8tF/l0Hhg7LnC4XjGjAG3k1Mdpwizk9
vyHWcEXPUZ3Qnjn6sQwQMlq1HbNY1PS8CtRpKqIW191ogqzYip1AxqTatYmqaI/A
OJ8Mh1F85VMabCJPgJfXKJupwHKRXdPa6rpEW6hH6lb03A40nY2IOYn3vLI+pcyv
ruy9DNhR6Z0MRXb+K+E5i4VqbNA2kLLE79u1EbJuUuGIb/8gr44IuxyAyz2B2MgX
T8NKa4pFwqlAZmNoDRbVjXc81/zuftA+YZvC65I6hpEN9AYqe2gYVwRZUQIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFGfNqxuv0urbmhAq/VwqY6wOjFwWMB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWjgyckc2X1M2dHVhRUNyOVhDcGpyQTZNWEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQMAwDBANPrrgD
BABPrr4wDAMEB1vRgAMEAFvRggMEAosctAMEA7LVUDAMAwQCuSykAwQAuSymMAwD
BAK5TeQDBAC5TeYDBAK5TfADBAHDA4wwDQQCAAIwBwMFACoBcqAwDQYJKoZIhvcN
AQELBQADggEBAAjt3YufOPccsUfzdcOxP/ZjKAa4Zk1bBcG/tXzCZ0ANG2Y4FRoz
lF3mp1TBiFGrF5ox6fVvjRUWfb3Mn9H0OBu3V3vCfgpYC+N8xFN4/ueFv6djTupV
rdjxHVO6bxfWKEmY9ksrDM1Nwv46dEM+iXZhe33d6AWN5bXK45F7882he28EOUAG
tobEwCAtdmwF+M3Tp7+SoStggn2DNSonZns/UQFQ1wCRcCbBYyZjHuAJe6fBlJYu
jj1kzHb2pTRJS48wsvVqr2ziqksp1+zF+iQmks97xQUSItFINPeIg98Z3YEpl1Hj
8xat8PDzduhJPpexzxUXLwQS1cjryatCD4U=
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:30 2026 by rpki-client