Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/z1OUVqTuxE_6Zocr9uXXX6a_sTI.roa
File: z1OUVqTuxE_6Zocr9uXXX6a_sTI.roa (raw, json)
Hash identifier: h8B0v2q6Vq0EI0FLxIYG2VBg4AiOV3z3eOv9vvKAQ0M=
Subject key identifier: CF:53:94:56:A4:EE:C4:4F:FA:66:87:2B:F6:E5:D7:5F:A6:BF:B1:32
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A0B3F7889656D0676099B22C4679348087
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/z1OUVqTuxE_6Zocr9uXXX6a_sTI.roa
Signing time: Fri 18 Sep 2026 10:02:19 +0000
ROA not before: Fri 18 Sep 2026 10:02:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212921
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
45.142.152.0/24 maxlen: 24
45.142.153.0/24 maxlen: 24
45.142.154.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.225.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f7:88:96:56:d0:67:60:99:b2:2c:46:79:34:80:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Sep 18 10:02:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf539456a4eec44ffa66872bf6e5d75fa6bfb132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:91:51:92:7d:0b:70:c9:11:d5:46:9a:19:
b6:e8:86:d7:5a:7e:50:c3:72:01:bd:f0:fa:91:55:
d7:28:2f:0b:dc:46:29:3f:a0:f8:36:f4:92:a3:10:
3a:d2:ee:9e:59:e5:87:27:58:84:55:15:c9:f5:05:
98:a9:09:83:46:e0:c6:3d:fe:33:ce:52:68:b2:43:
fb:b7:e2:7b:f6:10:8a:81:67:88:9d:82:c3:b1:21:
92:4b:9e:60:ff:b1:46:bd:3b:58:7d:22:f1:36:81:
29:d2:9d:40:aa:18:35:9c:1b:6f:fa:e7:eb:70:3a:
be:b6:ad:e3:ad:29:1e:41:c2:3f:21:4e:15:cb:84:
a7:5b:a4:ca:32:4f:b7:b8:20:e3:14:9a:30:2a:0a:
58:41:f8:2c:84:96:84:16:45:e9:7a:70:67:1f:46:
10:e8:11:03:2c:c3:59:c0:6a:8d:90:e1:d8:78:02:
be:f3:f3:ab:88:6c:e6:68:1e:c0:a7:0b:e1:4f:2c:
e9:82:50:4f:27:c4:c6:df:a7:2a:c8:34:37:a6:fc:
70:fc:b0:c9:69:20:23:96:5c:32:36:0b:82:85:54:
55:14:2d:0b:a3:5f:7e:2a:aa:64:41:4d:88:af:0e:
6b:9c:be:b0:9d:2b:36:7b:2d:f3:d2:75:f2:0e:91:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:53:94:56:A4:EE:C4:4F:FA:66:87:2B:F6:E5:D7:5F:A6:BF:B1:32
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/z1OUVqTuxE_6Zocr9uXXX6a_sTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:65:b2:07:42:22:00:28:af:75:66:26:ab:02:bc:21:83:39:
b7:2d:ac:9d:91:b1:46:47:cb:4d:71:1a:8e:37:07:47:56:f3:
7d:66:a1:42:ef:09:03:f8:47:5e:ec:7a:4c:2d:c5:78:b6:e7:
a6:35:e0:8d:e4:86:79:8c:24:e5:42:f1:ea:58:06:3d:dd:8e:
23:5e:00:c3:11:3d:23:e8:7d:0c:ba:27:3d:82:e0:6d:d3:52:
8f:65:2b:19:81:7c:64:a7:e3:b8:08:a9:07:a3:aa:d3:ab:d2:
4c:98:be:29:35:d0:d1:cd:2e:0b:b7:bd:de:22:cc:0a:87:b6:
fd:44:4f:c7:1f:b3:45:28:58:5a:e4:67:b1:1e:02:4a:d7:11:
e9:25:52:9a:3d:d9:90:fd:09:44:8b:66:af:de:b3:ec:c3:db:
6d:c3:30:d3:75:62:16:7e:26:85:19:c8:ed:50:c4:88:70:e3:
0c:c6:9b:1f:92:49:e1:d3:5b:e0:4f:8f:10:17:7c:7c:53:4b:
9d:81:11:7d:b1:80:4c:3b:dd:95:1d:25:26:75:9f:ba:c2:23:
2d:ac:ec:66:dd:41:16:02:94:62:09:a2:0b:05:ff:90:92:fe:
fd:ef:83:0b:9f:e1:8b:6e:b6:75:66:54:8f:aa:ab:0c:09:fa:
d9:79:ae:09
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaCz94iWVtBnYJmyLEZ5NICHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQ1NmUxMWI3N2JmMmU0ODIwZGZiNjk1NDFkNGJlMGVh
OTRlN2MwHhcNMjYwOTE4MTAwMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjUzOTQ1NmE0ZWVjNDRmZmE2Njg3MmJmNmU1ZDc1ZmE2YmZiMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFGRUZJ9C3DJEdVGmhm26IbXWn5Q
w3IBvfD6kVXXKC8L3EYpP6D4NvSSoxA60u6eWeWHJ1iEVRXJ9QWYqQmDRuDGPf4z
zlJoskP7t+J79hCKgWeInYLDsSGSS55g/7FGvTtYfSLxNoEp0p1Aqhg1nBtv+ufr
cDq+tq3jrSkeQcI/IU4Vy4SnW6TKMk+3uCDjFJowKgpYQfgshJaEFkXpenBnH0YQ
6BEDLMNZwGqNkOHYeAK+8/OriGzmaB7ApwvhTyzpglBPJ8TG36cqyDQ3pvxw/LDJ
aSAjllwyNguChVRVFC0Lo19+KqpkQU2Irw5rnL6wnSs2ey3z0nXyDpGa3wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFM9TlFak7sRP+maHK/bl11+mv7EyMB8GA1UdIwQY
MBaAFNNEVuEbd78uSCDftpVB1L4OqU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvejFPVVZxVHV4RV82Wm9jcjl1WFhYNmFfc1RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjuYAwQC
LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7KAwQAwn7XAwQA
wn7bMA0GCSqGSIb3DQEBCwUAA4IBAQAdZbIHQiIAKK91ZiarArwhgzm3LaydkbFG
R8tNcRqONwdHVvN9ZqFC7wkD+Ede7HpMLcV4tuemNeCN5IZ5jCTlQvHqWAY93Y4j
XgDDET0j6H0Muic9guBt01KPZSsZgXxkp+O4CKkHo6rTq9JMmL4pNdDRzS4Lt73e
IswKh7b9RE/HH7NFKFha5GexHgJK1xHpJVKaPdmQ/QlEi2av3rPsw9ttwzDTdWIW
fiaFGcjtUMSIcOMMxpsfkknh01vgT48QF3x8U0udgRF9sYBMO92VHSUmdZ+6wiMt
rOxm3UEWApRiCaILBf+Qkv7974MLn+GLbrZ1ZlSPqqsMCfrZea4J
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:18 2026 by rpki-client