Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/ZRETAiT7ebvgNtiSJSVlvKTo8a4.roa
File: ZRETAiT7ebvgNtiSJSVlvKTo8a4.roa (raw, json)
Hash identifier: aJSLU4K5IZ9b8QL1t0pyCeKJKGjRfTQGSyk/63XFEe0=
Subject key identifier: 65:11:13:02:24:FB:79:BB:E0:36:D8:92:25:25:65:BC:A4:E8:F1:AE
Certificate issuer: /CN=603fe809e2f5d2eeb41d946a3baf44de847801af
Certificate serial: 01A11B9F271A91F571D912E15372854941E5
Authority key identifier: 60:3F:E8:09:E2:F5:D2:EE:B4:1D:94:6A:3B:AF:44:DE:84:78:01:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YD_oCeL10u60HZRqO69E3oR4Aa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/ZRETAiT7ebvgNtiSJSVlvKTo8a4.roa
Signing time: Thu 08 Oct 2026 13:06:17 +0000
ROA not before: Thu 08 Oct 2026 13:06:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5610
IP address blocks: 91.193.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YD_oCeL10u60HZRqO69E3oR4Aa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:9f:27:1a:91:f5:71:d9:12:e1:53:72:85:49:41:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603fe809e2f5d2eeb41d946a3baf44de847801af
Validity
Not Before: Oct 8 13:06:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6511130224fb79bbe036d892252565bca4e8f1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:31:bb:bd:d7:a2:2c:06:c0:4f:ef:af:73:
41:e1:31:1a:cb:bd:9e:0a:36:52:bd:31:21:60:a6:
b3:3f:0e:2c:46:d7:87:7c:a4:ae:5f:15:11:40:bd:
f9:65:1e:a7:97:0a:43:a3:97:a3:a3:57:64:0a:26:
6f:b5:52:53:21:39:30:cc:81:74:43:80:a4:87:d3:
96:e3:f0:08:71:92:15:3b:ad:a9:99:fb:a9:6a:8a:
fb:2a:97:9f:3d:e9:1e:77:3b:37:7d:64:56:f0:8f:
1b:cd:f1:45:cc:8d:d9:08:2b:ce:ae:a8:17:9b:02:
a8:3d:95:80:35:fd:a5:41:95:51:a8:24:24:d5:1b:
56:22:59:76:83:48:9a:cc:ed:e4:3f:a6:65:e7:ad:
ef:c9:6b:b9:62:a7:ec:38:dd:6f:1d:f2:eb:12:11:
f3:89:0d:fb:86:4f:52:71:d9:64:55:e5:be:d7:11:
17:14:47:20:0d:3f:69:75:11:53:3f:11:bf:c5:6a:
8b:80:49:63:0a:ae:b6:0a:a2:e5:ad:ac:49:3c:19:
de:1b:ae:8a:99:46:88:cd:a8:a2:de:49:eb:ef:15:
66:ce:c0:ee:0f:43:23:21:2f:95:e1:56:1e:05:f6:
4c:5f:1c:fc:6d:76:3d:9c:5f:cb:3d:3a:3a:2d:46:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:13:02:24:FB:79:BB:E0:36:D8:92:25:25:65:BC:A4:E8:F1:AE
X509v3 Authority Key Identifier:
keyid:60:3F:E8:09:E2:F5:D2:EE:B4:1D:94:6A:3B:AF:44:DE:84:78:01:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YD_oCeL10u60HZRqO69E3oR4Aa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/ZRETAiT7ebvgNtiSJSVlvKTo8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:40:4e:11:79:fa:35:4c:2e:c9:b6:fb:98:9a:0a:60:a2:6d:
31:c5:70:da:ac:65:e1:db:73:02:10:a6:dc:56:4b:de:31:f2:
ec:64:0b:a0:19:76:d9:15:ff:00:3f:f5:d8:60:a2:40:40:e5:
1c:07:1a:95:8c:d6:a7:18:cb:01:7b:3b:d0:c5:f4:31:22:f1:
61:0b:e4:2c:db:e9:05:c7:cb:69:74:60:ab:97:04:ff:9d:9c:
ba:e5:98:4c:dc:6b:86:ef:c4:f1:82:60:8f:e6:09:a2:5d:73:
b1:63:09:34:90:cb:39:44:8d:f7:9a:14:d4:9b:43:34:cc:6f:
b8:c6:16:25:d6:b7:39:ea:b5:33:b4:73:23:1f:1d:ad:e4:a2:
0a:03:52:85:26:66:1f:10:fe:40:58:a6:a2:13:82:80:cf:ad:
f8:66:4e:03:a3:2c:ca:8c:51:a7:88:2a:64:e4:bd:86:e6:d7:
e5:a3:a5:90:d4:34:55:4b:26:51:6c:be:3c:15:83:a4:53:61:
1e:c0:24:53:03:aa:c7:5e:cc:9a:36:d1:72:90:54:dc:17:09:
49:2c:08:cb:bb:3d:49:b5:63:fd:1f:56:20:b0:83:12:48:af:
82:f1:b1:d5:b3:b8:c9:32:4f:68:5d:41:8e:b2:be:93:46:b6:
94:6e:11:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEbnycakfVx2RLhU3KFSUHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwM2ZlODA5ZTJmNWQyZWViNDFkOTQ2YTNiYWY0NGRlODQ3
ODAxYWYwHhcNMjYxMDA4MTMwNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTExMTMwMjI0ZmI3OWJiZTAzNmQ4OTIyNTI1NjViY2E0ZThmMWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu28xu73XoiwGwE/vr3NB4TEay72e
CjZSvTEhYKazPw4sRteHfKSuXxURQL35ZR6nlwpDo5ejo1dkCiZvtVJTITkwzIF0
Q4Ckh9OW4/AIcZIVO62pmfupaor7KpefPekedzs3fWRW8I8bzfFFzI3ZCCvOrqgX
mwKoPZWANf2lQZVRqCQk1RtWIll2g0iazO3kP6Zl563vyWu5YqfsON1vHfLrEhHz
iQ37hk9ScdlkVeW+1xEXFEcgDT9pdRFTPxG/xWqLgEljCq62CqLlraxJPBneG66K
mUaIzaii3knr7xVmzsDuD0MjIS+V4VYeBfZMXxz8bXY9nF/LPTo6LUblcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUREwIk+3m74DbYkiUlZbyk6PGuMB8GA1UdIwQY
MBaAFGA/6Ani9dLutB2UajuvRN6EeAGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURfb0NlTDEwdTYwSFpScU82OUUzb1I0QWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNTc0NzMtNWIwMS00ZjZkLTg5NzEt
YWIzNmY0MjE5MGJlLzEvWlJFVEFpVDdlYnZnTnRpU0pTVmx2S1RvOGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kNTc0NzMtNWIwMS00ZjZkLTg5NzEtYWIzNmY0MjE5MGJl
LzEvWURfb0NlTDEwdTYwSFpScU82OUUzb1I0QWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8GEMA0G
CSqGSIb3DQEBCwUAA4IBAQB/QE4Refo1TC7JtvuYmgpgom0xxXDarGXh23MCEKbc
VkveMfLsZAugGXbZFf8AP/XYYKJAQOUcBxqVjNanGMsBezvQxfQxIvFhC+Qs2+kF
x8tpdGCrlwT/nZy65ZhM3GuG78TxgmCP5gmiXXOxYwk0kMs5RI33mhTUm0M0zG+4
xhYl1rc56rUztHMjHx2t5KIKA1KFJmYfEP5AWKaiE4KAz634Zk4DoyzKjFGniCpk
5L2G5tflo6WQ1DRVSyZRbL48FYOkU2EewCRTA6rHXsyaNtFykFTcFwlJLAjLuz1J
tWP9H1YgsIMSSK+C8bHVs7jJMk9oXUGOsr6TRraUbhHd
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:38:37 2026 by rpki-client