Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/tZShe_XbhfyT-RzU0X05QdIYybM.roa
File: tZShe_XbhfyT-RzU0X05QdIYybM.roa (raw, json)
Hash identifier: 1edjhd7VnLaikIwI2k5/rIRzfukg5xKnUs/G2x9ofnA=
Subject key identifier: B5:94:A1:7B:F5:DB:85:FC:93:F9:1C:D4:D1:7D:39:41:D2:18:C9:B3
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 01A1349AD2605188078DD306B199E9EF5BF1
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/tZShe_XbhfyT-RzU0X05QdIYybM.roa
Signing time: Tue 13 Oct 2026 09:32:04 +0000
ROA not before: Tue 13 Oct 2026 09:32:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44398
IP address blocks: 176.62.200.0/21 maxlen: 21
185.66.0.0/22 maxlen: 24
185.177.120.0/22 maxlen: 24
195.42.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:9a:d2:60:51:88:07:8d:d3:06:b1:99:e9:ef:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Oct 13 09:32:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b594a17bf5db85fc93f91cd4d17d3941d218c9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:66:be:0c:7b:75:e5:79:da:12:b6:1f:cc:f6:
87:c3:49:48:a0:4e:bc:40:7d:79:b5:a3:87:0e:a0:
6c:1f:0a:64:40:4d:9b:a6:99:bd:31:9b:4a:16:a0:
82:18:df:ba:e5:b8:31:1b:85:63:b0:93:99:df:82:
8d:5d:5d:a9:2c:83:b3:38:ee:29:4b:93:88:af:7e:
bd:3c:a4:aa:d4:10:e8:74:4d:5a:5d:30:f1:6b:8d:
bc:25:50:90:b5:cb:e3:2e:d1:27:a9:62:e2:6d:4f:
84:d6:3d:87:c5:9f:47:1a:3e:a3:0f:ec:ba:cc:ec:
4b:3f:eb:fc:ab:0e:3f:6f:84:b5:78:df:f2:f2:f2:
b8:ee:9d:fb:51:8c:a2:fc:a2:69:6a:c9:cd:1e:55:
b5:4e:c5:4b:b1:f2:90:ec:2f:f8:72:7e:12:13:64:
73:0a:92:c6:ea:54:3f:c4:da:33:89:f6:6d:38:ae:
a2:ae:1e:58:b8:ab:70:fd:bc:8b:a5:e6:7d:e4:65:
14:f2:c8:c7:6e:7f:83:6e:ea:53:7d:d0:57:83:32:
30:73:26:38:7b:5f:a5:89:32:b1:7f:07:fd:07:4c:
2f:c0:f6:11:38:f9:a9:79:b1:14:34:1b:bf:ea:33:
f9:ff:9c:87:c4:81:7b:05:f1:ce:c7:ea:03:c4:0e:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:94:A1:7B:F5:DB:85:FC:93:F9:1C:D4:D1:7D:39:41:D2:18:C9:B3
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/tZShe_XbhfyT-RzU0X05QdIYybM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.200.0/21
185.66.0.0/22
185.177.120.0/22
195.42.150.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:0f:74:22:60:28:59:fb:b3:39:6d:df:bf:5b:18:28:ea:b5:
c0:6a:59:b4:e9:c6:1b:f4:3d:f3:3b:49:7b:0e:3b:ec:4c:30:
05:4f:ce:61:18:0a:c3:1e:c5:34:6e:5c:24:64:74:ad:5e:f3:
ca:ac:bf:7b:6e:08:31:11:94:c6:46:bb:f7:ee:10:11:3e:d2:
1f:8a:4c:d9:9f:bb:98:7a:c6:69:be:ff:b6:36:b0:87:2f:f5:
8c:a3:57:95:5b:40:d4:83:6c:35:c5:61:18:b0:48:b8:7c:97:
20:d3:1c:70:60:bf:b5:a4:33:b1:d3:a4:41:c7:4a:81:2b:e6:
17:57:67:4b:d7:60:e5:72:ae:bc:04:08:61:16:51:96:c3:ca:
33:28:5d:2d:20:ec:cd:9b:f9:35:3e:e5:61:ad:1c:32:87:92:
1d:5e:fc:d5:76:2f:91:89:eb:80:a9:8f:8e:c5:41:f1:cd:43:
30:ad:7f:84:8f:3f:8d:02:bd:42:11:8a:6c:05:f1:5e:06:a2:
1a:a1:5f:c1:c6:93:98:1d:7a:ae:76:3b:1f:05:ab:bc:01:f5:
05:3f:a9:86:9a:19:76:ee:17:75:31:94:d7:06:7b:a2:e5:cd:
1b:0e:a3:04:49:40:4b:bd:08:34:63:82:0e:ad:c3:d9:73:5c:
93:2a:18:37
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaE0mtJgUYgHjdMGsZnp71vxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjM0MWI0MzNlMWY4ZmNiNzk2MzIyZDJmZDkyNjQwOTM5
NmU3YWQwHhcNMjYxMDEzMDkzMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTk0YTE3YmY1ZGI4NWZjOTNmOTFjZDRkMTdkMzk0MWQyMThjOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Wa+DHt15XnaErYfzPaHw0lIoE68
QH15taOHDqBsHwpkQE2bppm9MZtKFqCCGN+65bgxG4VjsJOZ34KNXV2pLIOzOO4p
S5OIr369PKSq1BDodE1aXTDxa428JVCQtcvjLtEnqWLibU+E1j2HxZ9HGj6jD+y6
zOxLP+v8qw4/b4S1eN/y8vK47p37UYyi/KJpasnNHlW1TsVLsfKQ7C/4cn4SE2Rz
CpLG6lQ/xNozifZtOK6irh5YuKtw/byLpeZ95GUU8sjHbn+DbupTfdBXgzIwcyY4
e1+liTKxfwf9B0wvwPYROPmpebEUNBu/6jP5/5yHxIF7BfHOx+oDxA76rQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLWUoXv124X8k/kc1NF9OUHSGMmzMB8GA1UdIwQY
MBaAFCYjQbQz4fj8t5YyLS/ZJkCTluetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTct
OTgyODJjODlmNTE2LzEvdFpTaGVfWGJoZnlULVJ6VTBYMDVRZElZeWJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTctOTgyODJjODlmNTE2
LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDsD7IAwQC
uUIAAwQCubF4AwQBwyqWMA0GCSqGSIb3DQEBCwUAA4IBAQCjD3QiYChZ+7M5bd+/
Wxgo6rXAalm06cYb9D3zO0l7DjvsTDAFT85hGArDHsU0blwkZHStXvPKrL97bggx
EZTGRrv37hARPtIfikzZn7uYesZpvv+2NrCHL/WMo1eVW0DUg2w1xWEYsEi4fJcg
0xxwYL+1pDOx06RBx0qBK+YXV2dL12Dlcq68BAhhFlGWw8ozKF0tIOzNm/k1PuVh
rRwyh5IdXvzVdi+RieuAqY+OxUHxzUMwrX+Ejz+NAr1CEYpsBfFeBqIaoV/BxpOY
HXqudjsfBau8AfUFP6mGmhl27hd1MZTXBnui5c0bDqMESUBLvQg0Y4IOrcPZc1yT
Khg3
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:44:35 2026 by rpki-client