Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/Zmzmq8tec6lBQarpxoq_XDJTiRM.roa
File: Zmzmq8tec6lBQarpxoq_XDJTiRM.roa (raw, json)
Hash identifier: irZuDXkESmxU7zmEhCriUU/hi66C1uypRi5Tp4yuBXc=
Subject key identifier: 66:6C:E6:AB:CB:5E:73:A9:41:41:AA:E9:C6:8A:BF:5C:32:53:89:13
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 01A18246C9D3D6DA575921E330259C8C3512
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/Zmzmq8tec6lBQarpxoq_XDJTiRM.roa
Signing time: Wed 28 Oct 2026 11:30:39 +0000
ROA not before: Wed 28 Oct 2026 11:30:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 153.56.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:46:c9:d3:d6:da:57:59:21:e3:30:25:9c:8c:35:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Oct 28 11:30:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=666ce6abcb5e73a94141aae9c68abf5c32538913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:81:3a:24:44:79:80:7b:3d:d5:ef:9c:79:
7c:a1:06:e1:75:0d:0a:8a:77:80:44:6a:23:ea:1c:
ee:72:a8:91:9f:30:5f:0c:08:02:98:8e:72:e5:74:
6c:8b:34:b7:1c:98:3f:8f:b6:15:2a:17:1c:fc:5c:
c1:97:7f:bc:08:12:27:29:65:a0:e0:22:4e:46:8b:
9f:d9:c0:b8:c2:7f:14:b1:37:64:d4:4c:e8:f8:4e:
e6:0e:16:0d:ca:c5:04:a7:1b:9d:de:cc:02:5a:2e:
6c:14:4f:42:84:b5:25:40:12:29:ba:b4:af:fa:b3:
51:ad:e6:9e:d4:c5:35:fa:80:e7:8a:44:f7:73:3f:
7c:23:63:49:74:68:1e:b9:f3:dd:54:b1:65:29:e2:
0b:4e:85:02:20:be:3b:93:eb:2e:01:cc:90:4f:a8:
1e:f4:43:06:ee:fb:5d:32:b9:ce:44:ca:df:71:65:
8d:56:f0:d8:a8:1f:84:bc:bc:2e:4f:bf:e3:71:fd:
bf:77:d4:c2:b2:f5:c1:2f:42:70:3a:64:fb:26:72:
54:5a:1f:9c:a8:ff:c3:09:a7:ff:eb:d7:38:45:3c:
3b:ca:74:ab:8a:f7:ae:74:0c:de:a1:df:08:e2:37:
04:a8:1d:b1:18:d5:b0:14:e0:4c:38:fc:a8:f4:76:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:E6:AB:CB:5E:73:A9:41:41:AA:E9:C6:8A:BF:5C:32:53:89:13
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/Zmzmq8tec6lBQarpxoq_XDJTiRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.246.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b7:0c:23:3b:12:f0:37:6f:f1:b7:2e:3e:86:ab:e3:7e:30:
66:61:ba:60:9e:a0:ea:3f:7b:95:45:43:9c:a4:06:b8:af:8e:
50:e6:a5:7c:21:0d:e2:e7:fa:27:a3:b5:40:53:70:0f:d8:e6:
e7:1c:c7:9a:3a:57:f5:6f:92:69:f5:91:f5:f1:67:5a:63:b1:
c0:da:df:73:77:c0:f1:8c:84:86:60:8e:b8:53:74:73:ab:25:
36:4d:9e:1f:0a:02:4a:0f:1f:d4:81:17:1c:60:84:04:5c:20:
be:a1:8d:49:c9:9b:b9:6a:cb:4f:88:a5:19:d2:38:2b:71:df:
d4:d8:c9:ba:ff:45:5f:d3:75:5e:46:8c:9e:4c:3a:62:05:da:
fd:6a:64:60:76:bf:1b:16:52:f3:c7:73:85:e0:90:cb:9e:90:
9b:9f:ee:33:60:8d:94:61:11:fd:e5:01:e7:40:10:ba:ef:63:
a3:1d:bb:93:4b:7c:8b:97:bb:51:79:9a:a6:25:3c:57:f7:1a:
de:18:c2:6d:f3:71:5c:f3:f9:2c:fe:eb:23:89:11:19:d4:bc:
60:a9:fc:0a:ff:a4:b4:d8:d6:4d:2a:22:12:ee:5b:64:2a:dc:
28:11:a3:15:fd:65:b6:44:89:ff:b8:64:64:2f:a6:9f:e1:b8:
96:f4:f3:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGCRsnT1tpXWSHjMCWcjDUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWMxNmY3ZWE3MTBhZjQ1ZTJiM2ExMWU2MjhhMzhjZTY3
YmM3YTUwHhcNMjYxMDI4MTEzMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjZjZTZhYmNiNWU3M2E5NDE0MWFhZTljNjhhYmY1YzMyNTM4OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaSBOiREeYB7PdXvnHl8oQbhdQ0K
ineARGoj6hzucqiRnzBfDAgCmI5y5XRsizS3HJg/j7YVKhcc/FzBl3+8CBInKWWg
4CJORouf2cC4wn8UsTdk1Ezo+E7mDhYNysUEpxud3swCWi5sFE9ChLUlQBIpurSv
+rNRreae1MU1+oDnikT3cz98I2NJdGgeufPdVLFlKeILToUCIL47k+suAcyQT6ge
9EMG7vtdMrnORMrfcWWNVvDYqB+EvLwuT7/jcf2/d9TCsvXBL0JwOmT7JnJUWh+c
qP/DCaf/69c4RTw7ynSriveudAzeod8I4jcEqB2xGNWwFOBMOPyo9HZsFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGZs5qvLXnOpQUGq6caKv1wyU4kTMB8GA1UdIwQY
MBaAFC0cFvfqcQr0Xis6EeYoo4zme8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzIt
MWZhNzgwMThhNmU5LzEvWm16bXE4dGVjNmxCUWFycHhvcV9YREpUaVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzItMWZhNzgwMThhNmU5
LzEvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTj2MA0G
CSqGSIb3DQEBCwUAA4IBAQBYtwwjOxLwN2/xty4+hqvjfjBmYbpgnqDqP3uVRUOc
pAa4r45Q5qV8IQ3i5/ono7VAU3AP2ObnHMeaOlf1b5Jp9ZH18WdaY7HA2t9zd8Dx
jISGYI64U3RzqyU2TZ4fCgJKDx/UgRccYIQEXCC+oY1JyZu5astPiKUZ0jgrcd/U
2Mm6/0Vf03VeRoyeTDpiBdr9amRgdr8bFlLzx3OF4JDLnpCbn+4zYI2UYRH95QHn
QBC672OjHbuTS3yLl7tReZqmJTxX9xreGMJt83Fc8/ks/usjiREZ1LxgqfwK/6S0
2NZNKiIS7ltkKtwoEaMV/WW2RIn/uGRkL6af4biW9PNw
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:35:56 2026 by rpki-client