Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZSJi2Lf2ksv2QyV1wBcjetdeguk.roa
File: ZSJi2Lf2ksv2QyV1wBcjetdeguk.roa (raw, json)
Hash identifier: st+G97BHfLvk42Ww7xcsqAPk31EKiAgNPVxXxCCvsmM=
Subject key identifier: 65:22:62:D8:B7:F6:92:CB:F6:43:25:75:C0:17:23:7A:D7:5E:82:E9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D8AF4A254A39FA68158CD3A738C77074B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZSJi2Lf2ksv2QyV1wBcjetdeguk.roa
Signing time: Tue 14 Apr 2026 07:46:21 +0000
ROA not before: Tue 14 Apr 2026 07:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:f4:a2:54:a3:9f:a6:81:58:cd:3a:73:8c:77:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 14 07:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=652262d8b7f692cbf6432575c017237ad75e82e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:80:4c:2c:07:c1:08:78:8a:3d:fa:f9:bb:
e5:fd:9b:db:49:f3:0d:1f:3d:a7:ce:df:a9:bc:e2:
0d:f7:02:9e:9c:e4:10:d9:d5:53:d7:ef:2d:8d:44:
69:4a:4f:8d:47:4f:66:95:fa:1a:a3:7d:54:04:50:
e4:d2:d6:5f:03:45:7e:63:29:18:a1:9b:5e:e7:3c:
9e:61:94:8c:45:cc:b9:39:14:df:b5:f8:fe:2b:80:
f9:b5:00:18:34:c8:aa:d2:45:bd:3c:91:c0:ca:be:
a4:49:02:1d:a0:1a:c6:71:f8:f5:02:e0:a8:7a:ab:
a9:bf:e0:47:b9:13:c8:06:e7:77:7f:0d:e9:74:5a:
65:6f:19:46:1e:b6:be:af:a2:cd:45:0b:f1:bf:ea:
18:bd:44:df:8c:e9:f1:e6:6e:34:b7:ff:21:35:50:
5b:21:b0:ac:02:35:86:62:7d:b4:92:e1:68:03:e5:
88:9f:ce:cf:b5:d3:f0:11:96:b1:05:3f:5b:4f:7d:
ad:e2:91:2b:ae:e5:22:58:93:5c:d6:fa:6a:33:e6:
0a:ea:27:32:bf:10:9a:61:0c:4a:03:ce:a5:ec:bc:
12:47:18:07:c0:fc:71:fe:66:af:17:9e:ba:52:2c:
7e:59:6d:e9:b0:13:bf:55:16:2f:8c:65:77:ad:7f:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:62:D8:B7:F6:92:CB:F6:43:25:75:C0:17:23:7A:D7:5E:82:E9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZSJi2Lf2ksv2QyV1wBcjetdeguk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
87.121.103.0-87.121.104.255
91.92.16.0/24
94.156.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5e:a9:f0:47:a8:2e:41:8a:61:96:9b:10:70:ea:af:08:6e:
e5:da:c4:94:ff:36:99:6e:30:3a:5c:4f:42:08:a2:06:cc:bd:
c5:43:2a:a8:8b:01:a9:85:40:6a:56:bf:01:ed:bd:5b:b5:c1:
b2:80:35:12:92:64:95:7f:50:ba:08:83:3a:76:12:c5:71:c9:
1a:38:1b:51:5e:f1:54:f4:90:1c:80:fa:7f:ba:b9:26:ac:ce:
14:97:c6:5d:43:84:a6:2d:03:6d:3b:9f:7f:96:0b:a1:63:5e:
3b:c9:fd:05:5d:3c:81:a7:df:46:6d:0d:fb:15:04:55:2d:a0:
0c:af:dc:d0:59:17:df:6b:da:e6:4c:02:11:9c:0c:6b:d1:1e:
2f:3c:cb:b0:b9:ba:4c:9d:87:a4:e9:ef:57:f3:f2:84:2f:88:
fe:9d:1f:3b:de:b3:38:39:b9:92:41:81:bf:79:de:38:66:9e:
23:78:87:2e:93:d0:a3:77:06:94:72:4f:5b:20:63:ad:df:2a:
a0:44:61:6a:32:85:af:28:c9:9c:83:44:49:55:2e:6a:e4:d8:
78:b7:22:63:2b:25:e1:68:c0:fb:c3:56:e9:94:ac:d3:d5:8e:
e5:00:6c:4c:ca:36:a4:96:e0:fb:8f:ba:59:71:a8:67:49:6c:
78:85:fe:2d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ2K9KJUo5+mgVjNOnOMdwdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNDE0MDc0NjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTIyNjJkOGI3ZjY5MmNiZjY0MzI1NzVjMDE3MjM3YWQ3NWU4MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzyATCwHwQh4ij36+bvl/ZvbSfMN
Hz2nzt+pvOIN9wKenOQQ2dVT1+8tjURpSk+NR09mlfoao31UBFDk0tZfA0V+YykY
oZte5zyeYZSMRcy5ORTftfj+K4D5tQAYNMiq0kW9PJHAyr6kSQIdoBrGcfj1AuCo
equpv+BHuRPIBud3fw3pdFplbxlGHra+r6LNRQvxv+oYvUTfjOnx5m40t/8hNVBb
IbCsAjWGYn20kuFoA+WIn87PtdPwEZaxBT9bT32t4pErruUiWJNc1vpqM+YK6icy
vxCaYQxKA86l7LwSRxgHwPxx/mavF566Uix+WW3psBO/VRYvjGV3rX9XZwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGUiYti39pLL9kMldcAXI3rXXoLpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWlNKaTJMZjJrc3YyUXlWMXdCY2pldGRlZ3VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALZXyMAwD
BABXeWcDBABXeWgDBABbXBADBABenHEwDQYJKoZIhvcNAQELBQADggEBAE9eqfBH
qC5BimGWmxBw6q8IbuXaxJT/NpluMDpcT0IIogbMvcVDKqiLAamFQGpWvwHtvVu1
wbKANRKSZJV/ULoIgzp2EsVxyRo4G1Fe8VT0kByA+n+6uSaszhSXxl1DhKYtA207
n3+WC6FjXjvJ/QVdPIGn30ZtDfsVBFUtoAyv3NBZF99r2uZMAhGcDGvRHi88y7C5
ukydh6Tp71fz8oQviP6dHzveszg5uZJBgb953jhmniN4hy6T0KN3BpRyT1sgY63f
KqBEYWoyha8oyZyDRElVLmrk2Hi3ImMrJeFowPvDVumUrNPVjuUAbEzKNqSW4PuP
ullxqGdJbHiF/i0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:12 2026 by rpki-client