Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Zvt8X4WhiXbbl226J0JmcO5YtS0.roa
File: Zvt8X4WhiXbbl226J0JmcO5YtS0.roa (raw, json)
Hash identifier: PwHaFVRoY6iCycMYhgYos9fbDsuOtuK54RWzHik2Ptg=
Subject key identifier: 66:FB:7C:5F:85:A1:89:76:DB:97:6D:BA:27:42:66:70:EE:58:B5:2D
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0B9E8F6EFFF65B563816C430B20263720
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Zvt8X4WhiXbbl226J0JmcO5YtS0.roa
Signing time: Sat 19 Sep 2026 13:44:07 +0000
ROA not before: Sat 19 Sep 2026 13:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 178.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:e8:f6:ef:ff:65:b5:63:81:6c:43:0b:20:26:37:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 19 13:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66fb7c5f85a18976db976dba27426670ee58b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:c3:26:ff:27:80:e5:22:81:38:ea:73:f7:
d5:8e:35:33:26:eb:3a:d4:3b:87:b5:19:c1:3d:15:
79:31:56:ac:37:03:ce:18:cd:10:ac:5a:e4:33:2d:
87:ad:e5:d4:c4:b2:4c:9a:5a:fd:76:f9:d7:9c:34:
57:2f:51:c9:5b:c5:fd:27:9b:2c:a4:1f:8f:49:75:
74:06:6e:77:80:c2:67:18:10:ea:0f:6a:1e:ad:a9:
9b:8b:c5:85:ae:26:93:1a:bc:41:72:91:7f:ff:44:
50:1a:be:ee:e7:43:23:9f:82:39:e9:c7:11:ec:09:
b3:48:ef:c4:13:5b:f0:16:f0:20:fd:83:fb:e9:ac:
2c:42:cc:f5:41:1c:1e:24:4b:a8:85:a4:d0:b6:74:
3f:9c:4d:b7:38:3c:38:de:6a:7b:ec:47:2b:81:41:
0e:a1:f4:2b:63:33:2c:9d:51:1c:c4:9a:a6:45:62:
ce:2b:01:1b:b7:2e:82:92:fc:be:10:94:1d:52:40:
a5:f0:4f:54:66:3e:25:a7:86:3a:dc:e8:2e:f9:9d:
4d:0c:66:ea:b4:76:04:33:c0:9e:cf:b7:c6:39:aa:
53:40:90:c7:08:0f:2f:fa:6c:40:1e:6f:39:6a:ae:
c7:e3:9d:31:53:77:1d:b0:e7:69:9e:e7:16:3d:3c:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:7C:5F:85:A1:89:76:DB:97:6D:BA:27:42:66:70:EE:58:B5:2D
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Zvt8X4WhiXbbl226J0JmcO5YtS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:35:79:9b:7e:db:d6:4a:6a:28:bd:34:c0:85:9b:47:6d:99:
f9:da:fb:ba:de:b9:a1:7c:cf:0b:94:07:c7:f2:32:14:32:64:
c8:c6:b5:11:b8:1f:2f:4f:af:d2:84:bb:33:20:d7:3f:f8:d8:
56:48:93:8b:05:2b:31:bf:30:18:4f:97:91:1b:fd:ea:53:47:
ca:2e:42:f5:85:1a:89:19:e1:61:28:e7:6d:54:91:0e:db:57:
db:e2:15:c2:d0:a5:2b:12:7e:4d:75:a5:ee:00:e6:92:95:51:
5e:c5:d6:08:1a:03:49:7d:20:73:cc:df:50:29:0d:db:a5:20:
5d:c2:04:22:4e:ee:d3:59:f5:97:b6:ee:ca:04:21:24:cf:42:
88:db:e6:b6:a8:2e:cf:05:7a:36:c7:ed:95:1f:83:2b:6c:ff:
11:d0:59:1e:c4:8b:67:eb:79:85:67:a8:57:79:22:ce:ba:a1:
c9:25:66:bf:15:f7:bb:b0:e0:82:30:58:af:5d:a0:fb:03:6e:
8a:ff:1e:de:3f:e5:84:bd:23:3f:c7:61:63:db:a5:f1:5d:82:
00:b1:64:81:02:61:db:41:e9:49:05:1c:5c:fa:b4:43:49:1a:
70:8e:12:1b:c2:6c:05:c3:76:97:5b:76:6c:9f:78:48:b8:40:
a0:3a:28:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC56Pbv/2W1Y4FsQwsgJjcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwOTE5MTM0NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmZiN2M1Zjg1YTE4OTc2ZGI5NzZkYmEyNzQyNjY3MGVlNThiNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKfDJv8ngOUigTjqc/fVjjUzJus6
1DuHtRnBPRV5MVasNwPOGM0QrFrkMy2HreXUxLJMmlr9dvnXnDRXL1HJW8X9J5ss
pB+PSXV0Bm53gMJnGBDqD2oerambi8WFriaTGrxBcpF//0RQGr7u50Mjn4I56ccR
7AmzSO/EE1vwFvAg/YP76awsQsz1QRweJEuohaTQtnQ/nE23ODw43mp77EcrgUEO
ofQrYzMsnVEcxJqmRWLOKwEbty6Ckvy+EJQdUkCl8E9UZj4lp4Y63Ogu+Z1NDGbq
tHYEM8Cez7fGOapTQJDHCA8v+mxAHm85aq7H450xU3cdsOdpnucWPTzpLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGb7fF+FoYl225dtuidCZnDuWLUtMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvWnZ0OFg0V2hpWGJibDIyNkowSm1jTzVZdFMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu9wMA0G
CSqGSIb3DQEBCwUAA4IBAQDGNXmbftvWSmoovTTAhZtHbZn52vu63rmhfM8LlAfH
8jIUMmTIxrURuB8vT6/ShLszINc/+NhWSJOLBSsxvzAYT5eRG/3qU0fKLkL1hRqJ
GeFhKOdtVJEO21fb4hXC0KUrEn5NdaXuAOaSlVFexdYIGgNJfSBzzN9QKQ3bpSBd
wgQiTu7TWfWXtu7KBCEkz0KI2+a2qC7PBXo2x+2VH4MrbP8R0FkexItn63mFZ6hX
eSLOuqHJJWa/Ffe7sOCCMFivXaD7A26K/x7eP+WEvSM/x2Fj26XxXYIAsWSBAmHb
QelJBRxc+rRDSRpwjhIbwmwFw3aXW3Zsn3hIuECgOigq
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:10 2026 by rpki-client