Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/tzZM7nYn-Yv6VuwdydL4arg8J2c.roa
File: tzZM7nYn-Yv6VuwdydL4arg8J2c.roa (raw, json)
Hash identifier: k/xFXsG2Cc7BkpgSwakJflKtWLf9ZeYiel+DCWnqX60=
Subject key identifier: B7:36:4C:EE:76:27:F9:8B:FA:56:EC:1D:C9:D2:F8:6A:B8:3C:27:67
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 01A08181C5D3C63A5CCF8104CFE87533ADEC
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/tzZM7nYn-Yv6VuwdydL4arg8J2c.roa
Signing time: Tue 08 Sep 2026 14:52:40 +0000
ROA not before: Tue 08 Sep 2026 14:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6805
IP address blocks: 89.32.182.0/24 maxlen: 24
193.36.134.0/24 maxlen: 24
2001:1498:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:81:c5:d3:c6:3a:5c:cf:81:04:cf:e8:75:33:ad:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Sep 8 14:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7364cee7627f98bfa56ec1dc9d2f86ab83c2767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:8a:7a:40:80:50:f9:12:68:22:94:71:23:
7d:79:c3:1e:f0:c1:00:b2:a6:67:27:c2:95:68:79:
b2:31:3b:a0:5a:a8:18:a4:25:55:06:06:2d:df:a4:
fc:3a:65:1c:32:8b:35:b2:d9:28:b0:fd:20:2a:d9:
98:5f:d4:98:ad:cb:e4:c5:56:dc:01:1b:cc:2e:6f:
bf:2d:bb:12:23:c9:1e:52:7a:85:52:0b:49:ee:f8:
6f:cf:8d:7c:d2:d5:0a:b8:67:1c:52:9a:13:02:a3:
20:4f:cd:bd:13:7c:c4:86:b2:08:77:98:85:eb:a2:
04:63:2f:e8:37:2a:e1:db:45:74:5b:bd:eb:f7:f0:
05:73:f3:3d:09:f2:ce:04:26:a2:90:7d:29:66:fc:
31:dc:20:9b:89:ae:fd:f1:0c:e0:39:07:9c:45:47:
a3:5a:6b:90:ad:cf:d0:4a:fc:58:19:57:3f:44:f2:
37:6f:b7:be:7e:bb:f9:a8:4a:31:c1:cd:0c:c8:4a:
35:16:7a:68:b1:38:ca:b1:8f:94:da:fa:df:78:32:
de:4c:8a:a5:46:6b:f9:3a:ce:8f:3d:62:23:a5:ed:
3f:86:b3:79:fb:8d:e4:da:af:05:4e:df:ff:ba:93:
df:e9:58:0a:fc:5e:c2:dc:f4:9e:ee:95:63:07:aa:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:4C:EE:76:27:F9:8B:FA:56:EC:1D:C9:D2:F8:6A:B8:3C:27:67
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/tzZM7nYn-Yv6VuwdydL4arg8J2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.182.0/24
193.36.134.0/24
IPv6:
2001:1498:c::/48
Signature Algorithm: sha256WithRSAEncryption
a3:9c:55:d6:36:4c:bc:e4:5f:09:b8:a4:02:90:c8:47:03:8e:
4e:4f:ea:6d:8e:99:76:cc:a9:bf:dc:f2:48:cd:9f:71:8f:f7:
1c:cc:f5:74:11:23:92:91:ab:80:a5:a2:f8:19:a8:e6:7b:5f:
01:9c:af:e7:2c:f7:16:f6:c5:5d:8e:32:b3:d5:db:b5:fe:15:
95:cc:45:35:03:35:2f:be:90:77:0b:54:4c:7b:a9:db:be:75:
16:32:35:14:73:23:11:38:75:12:aa:41:7b:89:87:8c:49:fb:
45:f7:6c:05:d6:f2:48:8d:98:9c:50:04:62:d8:36:c8:82:d0:
9f:24:60:c3:48:15:a9:5a:66:a5:0d:6f:a3:e1:47:d1:5f:1d:
00:02:4d:0d:5d:78:d7:cd:1c:e0:60:e2:ec:fa:8d:19:2a:80:
c5:47:1b:61:fb:f7:93:8c:15:32:cb:6c:bc:7f:19:68:af:3f:
78:65:1b:30:f9:f3:09:6e:a0:4f:8e:ac:8f:69:56:7d:9f:50:
5f:4f:4f:76:a5:f9:de:28:98:5f:ce:41:68:c3:89:1b:33:dd:
fa:95:5d:fd:2c:1a:4a:bd:b9:a0:40:b4:5f:fd:a4:29:ba:1b:
26:9d:c6:fb:c0:ed:d9:51:05:63:63:d9:ec:56:92:88:43:de:
3f:8d:bf:ef
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaCBgcXTxjpcz4EEz+h1M63sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjYwOTA4MTQ1MjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzM2NGNlZTc2MjdmOThiZmE1NmVjMWRjOWQyZjg2YWI4M2MyNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YCKekCAUPkSaCKUcSN9ecMe8MEA
sqZnJ8KVaHmyMTugWqgYpCVVBgYt36T8OmUcMos1stkosP0gKtmYX9SYrcvkxVbc
ARvMLm+/LbsSI8keUnqFUgtJ7vhvz4180tUKuGccUpoTAqMgT829E3zEhrIId5iF
66IEYy/oNyrh20V0W73r9/AFc/M9CfLOBCaikH0pZvwx3CCbia798QzgOQecRUej
WmuQrc/QSvxYGVc/RPI3b7e+frv5qEoxwc0MyEo1FnposTjKsY+U2vrfeDLeTIql
Rmv5Os6PPWIjpe0/hrN5+43k2q8FTt//upPf6VgK/F7C3PSe7pVjB6rOxQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLc2TO52J/mL+lbsHcnS+Gq4PCdnMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvdHpaTTduWW4tWXY2VnV3ZHlkTDRhcmc4SjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAWSC2AwQA
wSSGMA8EAgACMAkDBwAgARSYAAwwDQYJKoZIhvcNAQELBQADggEBAKOcVdY2TLzk
Xwm4pAKQyEcDjk5P6m2OmXbMqb/c8kjNn3GP9xzM9XQRI5KRq4ClovgZqOZ7XwGc
r+cs9xb2xV2OMrPV27X+FZXMRTUDNS++kHcLVEx7qdu+dRYyNRRzIxE4dRKqQXuJ
h4xJ+0X3bAXW8kiNmJxQBGLYNsiC0J8kYMNIFalaZqUNb6PhR9FfHQACTQ1deNfN
HOBg4uz6jRkqgMVHG2H795OMFTLLbLx/GWivP3hlGzD58wluoE+OrI9pVn2fUF9P
T3al+d4omF/OQWjDiRsz3fqVXf0sGkq9uaBAtF/9pCm6GyadxvvA7dlRBWNj2exW
kohD3j+Nv+8=
-----END CERTIFICATE-----
Generated at Sun Sep 13 18:58:27 2026 by rpki-client