Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/ZY_YEbzrL_E-ZuZ3jIioPCydmlA.roa
File: ZY_YEbzrL_E-ZuZ3jIioPCydmlA.roa (raw, json)
Hash identifier: ilm5jQB9YySdwy/kG88g3FsUAj3cR0CDlM5CPaMuF94=
Subject key identifier: 65:8F:D8:11:BC:EB:2F:F1:3E:66:E6:77:8C:88:A8:3C:2C:9D:9A:50
Certificate issuer: /CN=4ecb6dc3e50016eaa6abc6930ee7e01630f47714
Certificate serial: 019D42D7E2A70B0A57D30286AC76720AAD54
Authority key identifier: 4E:CB:6D:C3:E5:00:16:EA:A6:AB:C6:93:0E:E7:E0:16:30:F4:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/ZY_YEbzrL_E-ZuZ3jIioPCydmlA.roa
Signing time: Tue 31 Mar 2026 07:42:17 +0000
ROA not before: Tue 31 Mar 2026 07:42:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208224
IP address blocks: 92.42.206.0/24 maxlen: 24
92.42.206.0/25 maxlen: 25
92.42.206.128/25 maxlen: 25
2a07:2640::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:d7:e2:a7:0b:0a:57:d3:02:86:ac:76:72:0a:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecb6dc3e50016eaa6abc6930ee7e01630f47714
Validity
Not Before: Mar 31 07:42:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=658fd811bceb2ff13e66e6778c88a83c2c9d9a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:09:9e:25:ac:cb:a5:ab:ad:ee:e9:b6:91:
ab:54:56:35:81:ab:f3:b5:16:4a:df:be:10:9e:95:
f6:cc:db:e7:1c:92:d5:09:03:6f:bf:aa:b5:17:ce:
33:d7:27:fb:96:f7:c1:bf:5d:cf:6f:b7:2a:75:00:
55:8a:72:5f:59:2d:dc:5b:5f:44:7a:61:51:96:13:
ae:a3:8e:eb:80:9d:92:61:cc:f8:8e:0d:e3:a1:bb:
1b:97:40:b8:35:0c:d5:df:8e:c6:49:6a:82:fa:47:
0a:b9:72:d4:6f:25:2f:c6:76:8f:48:de:76:42:81:
af:f3:c9:ef:4a:a0:40:16:cb:fe:c8:24:38:99:3f:
0d:6c:06:2d:66:5b:e2:db:a5:e6:da:d8:dd:59:a4:
7a:80:0b:8c:c0:87:d2:8d:bb:a1:d0:e4:eb:0d:fb:
46:a9:f9:c2:91:74:64:a6:7b:27:19:2d:56:86:45:
ec:3a:c0:8d:eb:ab:81:fd:f2:2e:4c:28:d8:14:3f:
3f:7a:e2:be:3a:ce:87:f1:f0:cd:75:0a:84:8d:c2:
94:4d:1e:65:94:db:6b:9b:dd:b6:85:a5:4d:2e:05:
f9:03:13:c5:6b:8d:f5:d0:fc:95:14:c8:e2:2d:e6:
aa:14:2f:08:7e:c3:3d:e6:4a:79:84:64:92:58:a0:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8F:D8:11:BC:EB:2F:F1:3E:66:E6:77:8C:88:A8:3C:2C:9D:9A:50
X509v3 Authority Key Identifier:
keyid:4E:CB:6D:C3:E5:00:16:EA:A6:AB:C6:93:0E:E7:E0:16:30:F4:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/ZY_YEbzrL_E-ZuZ3jIioPCydmlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.206.0/24
IPv6:
2a07:2640::/30
Signature Algorithm: sha256WithRSAEncryption
1d:d1:06:0c:e2:c0:08:c9:3b:11:44:58:98:6e:ea:da:97:4d:
31:fc:39:e5:bb:b6:c1:78:e6:3c:9b:82:16:69:d1:49:0e:4a:
2b:24:33:d9:84:cc:b8:e8:97:de:e4:a2:f6:dc:4c:67:76:30:
5e:8c:e4:7f:c4:41:55:f2:24:a1:d8:37:75:31:e9:a6:ee:f0:
fa:61:13:0e:3e:0c:c8:b9:22:0b:b4:2e:33:31:b7:14:e0:b1:
b4:c2:c8:9d:0c:81:f9:b2:55:9d:19:62:6a:0d:84:31:f3:85:
f2:b6:2a:39:01:4f:fb:3b:13:59:91:17:2f:77:49:ec:59:79:
57:07:48:7f:79:54:ba:f0:38:96:a0:e8:4e:98:ed:50:2b:fc:
e8:0c:13:c8:08:3c:04:77:88:6a:70:06:e0:c2:c2:82:2e:6c:
9f:28:ca:75:4b:58:a5:1a:57:d0:be:86:4b:a0:b5:4c:02:df:
2b:7c:97:78:ff:92:e7:3a:0a:8c:89:e8:32:b1:32:70:78:7d:
61:8c:08:31:23:b2:a7:70:4f:96:c4:05:59:84:4e:3a:da:b5:
17:39:f4:df:67:23:bc:5d:aa:1b:fb:0d:48:c9:a4:ae:fc:2b:
e9:90:bd:4c:40:4e:45:99:77:00:df:25:45:1c:b7:6a:6b:b1:
98:1f:4e:97
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ1C1+KnCwpX0wKGrHZyCq1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2I2ZGMzZTUwMDE2ZWFhNmFiYzY5MzBlZTdlMDE2MzBm
NDc3MTQwHhcNMjYwMzMxMDc0MjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NThmZDgxMWJjZWIyZmYxM2U2NmU2Nzc4Yzg4YTgzYzJjOWQ5YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GgJniWsy6Wrre7ptpGrVFY1gavz
tRZK374QnpX2zNvnHJLVCQNvv6q1F84z1yf7lvfBv13Pb7cqdQBVinJfWS3cW19E
emFRlhOuo47rgJ2SYcz4jg3jobsbl0C4NQzV347GSWqC+kcKuXLUbyUvxnaPSN52
QoGv88nvSqBAFsv+yCQ4mT8NbAYtZlvi26Xm2tjdWaR6gAuMwIfSjbuh0OTrDftG
qfnCkXRkpnsnGS1WhkXsOsCN66uB/fIuTCjYFD8/euK+Os6H8fDNdQqEjcKUTR5l
lNtrm922haVNLgX5AxPFa4310PyVFMjiLeaqFC8IfsM95kp5hGSSWKBTTwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGWP2BG86y/xPmbmd4yIqDwsnZpQMB8GA1UdIwQY
MBaAFE7LbcPlABbqpqvGkw7n4BYw9HcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHN0dHctVUFGdXFtcThhVER1ZmdGakQwZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NzM1NGMtOWFkNS00NmJjLTk1NzYt
NmNlMDIxNGRjMzJiLzEvWllfWUVienJMX0UtWnVaM2pJaW9QQ3lkbWxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NzM1NGMtOWFkNS00NmJjLTk1NzYtNmNlMDIxNGRjMzJi
LzEvVHN0dHctVUFGdXFtcThhVER1ZmdGakQwZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXCrOMA0E
AgACMAcDBQIqByZAMA0GCSqGSIb3DQEBCwUAA4IBAQAd0QYM4sAIyTsRRFiYbura
l00x/Dnlu7bBeOY8m4IWadFJDkorJDPZhMy46Jfe5KL23ExndjBejOR/xEFV8iSh
2Dd1Memm7vD6YRMOPgzIuSILtC4zMbcU4LG0wsidDIH5slWdGWJqDYQx84Xytio5
AU/7OxNZkRcvd0nsWXlXB0h/eVS68DiWoOhOmO1QK/zoDBPICDwEd4hqcAbgwsKC
LmyfKMp1S1ilGlfQvoZLoLVMAt8rfJd4/5LnOgqMiegysTJweH1hjAgxI7KncE+W
xAVZhE462rUXOfTfZyO8Xaob+w1IyaSu/CvpkL1MQE5FmXcA3yVFHLdqa7GYH06X
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:57 2026 by rpki-client