Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/ZPGtvyJGl9jkegZSyppaSf49YoM.roa
File: ZPGtvyJGl9jkegZSyppaSf49YoM.roa (raw, json)
Hash identifier: /I7OauR4jItcGoEgVPkmNNB22hD/SZwkl7cKItr7pzA=
Subject key identifier: 64:F1:AD:BF:22:46:97:D8:E4:7A:06:52:CA:9A:5A:49:FE:3D:62:83
Certificate issuer: /CN=16c36f7dfdb7db6cdbc03ec8c6bf941b06795198
Certificate serial: 019F2368ECEFE675FF2A5EDC90A21F7E17D0
Authority key identifier: 16:C3:6F:7D:FD:B7:DB:6C:DB:C0:3E:C8:C6:BF:94:1B:06:79:51:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsNvff2322zbwD7Ixr-UGwZ5UZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/ZPGtvyJGl9jkegZSyppaSf49YoM.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57781
IP address blocks: 91.242.165.0/24 maxlen: 24
91.242.166.0/24 maxlen: 24
91.242.167.0/24 maxlen: 24
176.107.208.0/24 maxlen: 24
176.107.209.0/24 maxlen: 24
176.107.211.0/24 maxlen: 24
176.107.212.0/24 maxlen: 24
176.107.213.0/24 maxlen: 24
176.107.214.0/24 maxlen: 24
176.107.215.0/24 maxlen: 24
176.107.216.0/24 maxlen: 24
176.107.218.0/24 maxlen: 24
176.107.219.0/24 maxlen: 24
176.107.220.0/24 maxlen: 24
176.107.221.0/24 maxlen: 24
176.107.222.0/24 maxlen: 24
176.107.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/FsNvff2322zbwD7Ixr-UGwZ5UZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/FsNvff2322zbwD7Ixr-UGwZ5UZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsNvff2322zbwD7Ixr-UGwZ5UZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:ef:e6:75:ff:2a:5e:dc:90:a2:1f:7e:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c36f7dfdb7db6cdbc03ec8c6bf941b06795198
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64f1adbf224697d8e47a0652ca9a5a49fe3d6283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:f0:d2:95:ac:c0:11:70:73:a1:1a:08:48:
b0:13:5b:02:e5:68:e5:38:65:6b:7e:0b:8a:e3:2b:
fa:bb:1b:3e:1f:4d:33:8b:88:37:a6:a2:d6:0c:b1:
9f:92:39:21:4f:60:42:e7:1f:92:c4:a8:be:93:06:
d4:cf:2c:40:4e:79:62:13:2b:2c:7c:b9:13:be:a7:
1d:28:95:ad:a4:09:dd:d3:2f:48:b1:3a:fb:6e:ea:
1a:94:7e:7b:94:53:bc:3e:e5:6b:76:a0:55:65:45:
9b:77:97:b0:a0:e4:a8:3e:c9:5f:c7:26:9d:41:2e:
d3:8e:9c:44:42:32:7f:f4:da:b3:6e:db:cd:70:3c:
bc:e4:d5:da:cd:dd:81:97:7a:91:2d:2a:8e:18:7d:
3b:01:bc:41:72:12:ae:d6:3a:a6:ff:8c:3d:49:1f:
89:30:de:61:16:59:b4:3c:94:26:62:fd:93:27:59:
4a:8e:09:72:7a:78:3e:57:73:ee:68:7a:da:8f:7d:
17:50:c7:c9:af:c4:04:57:ae:5e:92:41:8a:e9:a3:
1a:b7:45:72:ff:3b:ca:eb:1f:00:ec:e1:76:ac:7b:
d0:cd:e1:02:8a:15:42:f4:f8:a3:8b:09:a5:a1:ff:
1c:62:63:bf:4b:06:c0:2f:79:0f:b6:e6:58:c9:5e:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:AD:BF:22:46:97:D8:E4:7A:06:52:CA:9A:5A:49:FE:3D:62:83
X509v3 Authority Key Identifier:
keyid:16:C3:6F:7D:FD:B7:DB:6C:DB:C0:3E:C8:C6:BF:94:1B:06:79:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsNvff2322zbwD7Ixr-UGwZ5UZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/ZPGtvyJGl9jkegZSyppaSf49YoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/FsNvff2322zbwD7Ixr-UGwZ5UZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.165.0-91.242.167.255
176.107.208.0/23
176.107.211.0-176.107.216.255
176.107.218.0-176.107.223.255
Signature Algorithm: sha256WithRSAEncryption
6f:ac:80:09:f8:3f:48:c6:1a:f5:9a:7a:66:52:ad:25:3c:89:
f8:4e:aa:4b:40:25:c2:1f:d2:21:73:cb:72:d8:5f:1f:28:36:
17:91:c8:25:78:a1:b0:50:21:c9:bf:66:99:b2:86:bc:cb:7b:
49:d3:c4:ad:ae:b8:07:47:af:4b:e2:95:6f:ba:db:f7:06:ef:
dd:df:b0:12:b3:dd:61:5e:d6:f0:d4:4c:23:ea:43:56:e2:01:
bd:e3:a3:1b:f7:86:f4:04:e6:07:85:db:cb:f3:4c:fb:38:58:
db:f2:79:d7:42:85:75:4d:c5:13:1e:b3:79:56:6b:df:39:3d:
5a:e0:03:49:8b:91:ba:dc:f2:b3:56:84:f4:0d:b0:0f:55:26:
ec:b6:c4:83:0f:05:ce:ea:86:65:9a:1d:90:53:e0:02:c5:dd:
07:3b:ca:7a:8f:22:30:0f:da:0d:c8:a1:78:65:c1:c1:18:cd:
fb:bc:70:a8:74:6d:b7:95:f2:12:69:37:c3:37:e5:50:ae:d1:
cb:eb:95:d5:f6:ec:1c:36:f2:40:3f:7f:59:be:5b:ec:3f:b3:
63:46:a7:fe:99:64:5f:19:b7:56:e5:9f:4a:3f:77:c1:bf:ae:
04:af:2c:15:f0:b7:c3:d2:e2:5d:d9:cd:0a:3f:36:bc:c7:f1:
83:5f:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:41 2026 by rpki-client