Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZyzIIB7JjHy1kXAbJ0AnL6mOb_0.roa
File: ZyzIIB7JjHy1kXAbJ0AnL6mOb_0.roa (raw, json)
Hash identifier: ZHEtYi18I57hkbDqlwL899FJTNe1+nyygrdvncsKywo=
Subject key identifier: 67:2C:C8:20:1E:C9:8C:7C:B5:91:70:1B:27:40:27:2F:A9:8E:6F:FD
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B4C958B3D84D37DA5A46B91CDCDC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZyzIIB7JjHy1kXAbJ0AnL6mOb_0.roa
Signing time: Thu 26 Mar 2026 14:18:22 +0000
ROA not before: Thu 26 Mar 2026 14:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40647
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b4:c9:58:b3:d8:4d:37:da:5a:46:b9:1c:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=672cc8201ec98c7cb591701b2740272fa98e6ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:c8:e1:e0:4f:a9:a0:c6:6f:9b:b8:fd:8d:
d7:c0:f6:ab:ee:24:a8:f0:62:42:8a:fa:b1:16:66:
63:33:3a:85:26:aa:60:ad:40:33:17:b4:e9:ce:18:
ad:db:63:a4:1d:11:50:97:8e:9c:8a:99:16:0a:98:
09:55:9a:16:f0:3e:6d:25:87:4f:39:98:7b:0e:0a:
cd:4c:ab:44:ba:9c:d9:e9:64:d5:4b:bb:8f:04:43:
8f:60:d4:9e:31:06:7f:f4:22:1d:8a:99:b8:1e:37:
47:2e:ef:f0:bd:06:a1:46:7e:92:91:35:07:98:04:
0c:3f:1b:a2:8b:7c:ef:90:3f:9e:f5:67:70:d7:27:
be:b1:19:5d:e2:d5:34:5d:20:b4:2b:96:11:ac:d1:
14:c5:82:5e:f9:d6:d1:60:9a:8b:1f:5a:57:f8:74:
04:81:27:57:c9:90:0c:12:57:82:5e:c7:c1:0a:2a:
1b:43:dd:d9:03:94:19:3f:6f:94:0c:43:f3:6d:e7:
a4:d4:e9:f2:49:51:de:1e:b5:e1:9f:2a:d3:90:f0:
4a:54:10:42:24:f3:c2:9a:46:b3:17:bc:f9:81:e6:
7d:2f:66:cf:5e:f3:63:ac:5d:23:b8:da:76:31:1f:
9a:92:be:c1:ca:ee:cf:ae:93:ae:3a:dc:e9:7d:6d:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2C:C8:20:1E:C9:8C:7C:B5:91:70:1B:27:40:27:2F:A9:8E:6F:FD
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZyzIIB7JjHy1kXAbJ0AnL6mOb_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:11:68:68:11:c7:9e:01:df:f7:52:e2:f4:ac:61:ff:ad:1c:
f5:5c:fc:d8:28:17:e2:cb:14:c6:a8:06:8e:34:3c:2b:c5:15:
8e:9c:d3:d1:6d:3f:14:b5:c0:46:f8:95:11:d9:6c:44:77:29:
55:d3:3e:43:db:39:88:27:42:5c:0d:a2:06:e0:58:c0:2d:8f:
ba:fc:28:c6:50:25:a7:16:17:7c:01:23:86:f9:73:17:42:f2:
e4:a4:7f:c7:6b:fb:ef:6f:d2:32:0a:53:97:9d:20:fc:24:22:
6d:10:4d:ef:5f:f9:01:8f:69:0a:48:1a:40:8f:1e:1b:d7:f6:
a7:b7:7e:32:3b:e9:72:c6:b4:7c:52:be:7f:62:b7:b5:8d:0a:
36:25:15:a7:d3:b3:57:4c:36:6d:2b:61:13:c6:02:79:25:8f:
78:9c:cf:d5:ff:e9:2b:89:73:8b:14:fc:ad:7d:9b:4a:50:a0:
74:57:bc:ed:33:d0:b8:53:cd:03:b8:7c:d1:4d:09:38:7f:bd:
70:b4:88:3a:da:cc:30:3f:9b:62:1c:bc:db:4a:00:d4:dc:41:
b9:ba:15:4f:5a:b9:47:68:16:a0:0b:b2:a0:e5:3d:e6:a8:f2:
6b:3c:b7:16:0e:1d:18:e1:e4:4b:ee:70:3c:d5:b0:4b:12:79:
73:9f:22:32
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgrTJWLPYTTfaWka5HNzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzJjYzgyMDFlYzk4YzdjYjU5MTcwMWIyNzQwMjcyZmE5OGU2ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCDI4eBPqaDGb5u4/Y3XwPar7iSo
8GJCivqxFmZjMzqFJqpgrUAzF7Tpzhit22OkHRFQl46cipkWCpgJVZoW8D5tJYdP
OZh7DgrNTKtEupzZ6WTVS7uPBEOPYNSeMQZ/9CIdipm4HjdHLu/wvQahRn6SkTUH
mAQMPxuii3zvkD+e9Wdw1ye+sRld4tU0XSC0K5YRrNEUxYJe+dbRYJqLH1pX+HQE
gSdXyZAMEleCXsfBCiobQ93ZA5QZP2+UDEPzbeek1OnySVHeHrXhnyrTkPBKVBBC
JPPCmkazF7z5geZ9L2bPXvNjrF0juNp2MR+akr7Byu7PrpOuOtzpfW1uIwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFGcsyCAeyYx8tZFwGydAJy+pjm/9MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWnl6SUlCN0pqSHkxa1hBYkowQW5MNm1PYl8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAuxFoaBHHngHf91Li9Kxh/60c9Vz82CgX
4ssUxqgGjjQ8K8UVjpzT0W0/FLXARviVEdlsRHcpVdM+Q9s5iCdCXA2iBuBYwC2P
uvwoxlAlpxYXfAEjhvlzF0Ly5KR/x2v772/SMgpTl50g/CQibRBN71/5AY9pCkga
QI8eG9f2p7d+Mjvpcsa0fFK+f2K3tY0KNiUVp9OzV0w2bSthE8YCeSWPeJzP1f/p
K4lzixT8rX2bSlCgdFe87TPQuFPNA7h80U0JOH+9cLSIOtrMMD+bYhy820oA1NxB
uboVT1q5R2gWoAuyoOU95qjyazy3Fg4dGOHkS+5wPNWwSxJ5c58iMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:52 2026 by rpki-client