Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/0zWDtCfFaeiJ1qnneXnuyttQ0-Y.roa
File: 0zWDtCfFaeiJ1qnneXnuyttQ0-Y.roa (raw, json)
Hash identifier: 3QXgk5xHB1rL/T5/pVl2+O3XjcWmul7E59jELRq2aRE=
Subject key identifier: D3:35:83:B4:27:C5:69:E8:89:D6:A9:E7:79:79:EE:CA:DB:50:D3:E6
Certificate issuer: /CN=63f9d23d74375c138ea563e4cc97f09406ed7906
Certificate serial: 019F23688331D235B6B170647EC98E08FC30
Authority key identifier: 63:F9:D2:3D:74:37:5C:13:8E:A5:63:E4:CC:97:F0:94:06:ED:79:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/0zWDtCfFaeiJ1qnneXnuyttQ0-Y.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25460
IP address blocks: 5.61.120.0/21 maxlen: 21
45.154.208.0/22 maxlen: 22
185.118.28.0/22 maxlen: 22
2a01:5ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:83:31:d2:35:b6:b1:70:64:7e:c9:8e:08:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f9d23d74375c138ea563e4cc97f09406ed7906
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d33583b427c569e889d6a9e77979eecadb50d3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:ef:2e:27:9d:00:51:aa:84:b6:c6:d9:be:
0d:af:5d:fd:94:ba:52:1e:5e:06:05:cf:64:68:95:
e1:39:a2:2d:48:58:1d:7e:2c:ec:27:c2:64:06:84:
e2:da:5f:d6:3d:00:3c:6f:05:1a:d2:33:81:9c:f1:
43:0f:29:76:6b:4e:65:b6:8e:4f:e9:82:f6:17:6e:
d5:f4:e2:6e:38:d0:5d:56:b0:bc:d2:25:42:e9:a2:
bc:bd:61:5a:16:5d:04:0e:d3:83:f6:9a:7a:d5:89:
9a:42:63:3c:d9:14:73:f5:6e:f5:d8:ea:45:2d:f2:
9f:f0:dd:13:bb:67:d9:42:f8:f2:a7:eb:cd:de:cd:
36:23:70:a3:41:25:0f:a9:6b:c4:79:b5:e5:05:e8:
cb:0e:3b:17:3b:c9:3a:38:1a:b3:99:eb:a7:51:00:
53:f3:a6:e9:43:ba:99:6d:60:33:9e:76:54:c7:e1:
9c:5c:27:15:bb:81:eb:35:e0:2b:0b:9f:8f:b8:90:
8e:88:05:5e:fb:6b:94:a4:08:18:76:05:33:9c:13:
4e:18:b9:8c:97:f9:69:9b:7a:9d:6f:3b:62:0e:eb:
14:73:69:65:d7:78:4f:c4:11:aa:0f:da:65:68:a8:
28:d9:cd:c6:b2:8b:92:16:73:c2:80:36:3f:cb:88:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:35:83:B4:27:C5:69:E8:89:D6:A9:E7:79:79:EE:CA:DB:50:D3:E6
X509v3 Authority Key Identifier:
keyid:63:F9:D2:3D:74:37:5C:13:8E:A5:63:E4:CC:97:F0:94:06:ED:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/0zWDtCfFaeiJ1qnneXnuyttQ0-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.120.0/21
45.154.208.0/22
185.118.28.0/22
IPv6:
2a01:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
48:a4:5f:10:3d:9a:19:f2:ad:d2:64:29:2e:fb:86:5b:a8:96:
32:3f:f4:a4:29:63:aa:67:50:7b:4c:bb:34:35:4d:89:65:94:
eb:01:ed:4a:4c:38:9f:4c:2b:ff:3a:25:07:c2:a6:fd:b6:9f:
c6:0c:73:9b:81:43:f3:b3:31:a6:c1:dc:42:2e:e5:48:49:a0:
f5:0f:c8:0f:3e:c2:79:7d:ec:08:87:84:c0:52:c5:75:24:d8:
58:bc:52:f4:61:a6:96:0b:76:e9:d3:33:91:c6:e0:ff:9b:b7:
d7:38:29:fd:98:f9:e3:32:d1:31:b3:ea:92:ff:51:87:78:25:
a6:f2:90:b3:7b:7b:73:f2:75:dd:68:9f:47:7e:ca:c0:9b:f7:
f0:6d:a3:49:a6:f3:79:cc:51:64:95:bc:2e:b1:72:8b:96:22:
d3:36:fb:98:79:37:ce:27:db:ca:78:fe:89:d1:7d:e6:f7:60:
2a:46:be:c4:11:1d:4e:0c:34:7c:04:f8:a3:3e:d0:84:52:68:
b6:42:c1:79:81:b3:bc:6c:34:61:c2:1a:22:e4:96:1e:15:11:
79:94:88:0c:67:47:e5:ac:48:ae:9d:fb:2c:97:b3:1d:c4:fa:
b8:9a:09:5d:1d:90:d8:24:21:7d:28:41:1d:3a:73:94:45:5a:
81:c7:38:e4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ8jaIMx0jW2sXBkfsmOCPwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjlkMjNkNzQzNzVjMTM4ZWE1NjNlNGNjOTdmMDk0MDZl
ZDc5MDYwHhcNMjYwNzAyMTUxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzM1ODNiNDI3YzU2OWU4ODlkNmE5ZTc3OTc5ZWVjYWRiNTBkM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmrvLiedAFGqhLbG2b4Nr139lLpS
Hl4GBc9kaJXhOaItSFgdfizsJ8JkBoTi2l/WPQA8bwUa0jOBnPFDDyl2a05lto5P
6YL2F27V9OJuONBdVrC80iVC6aK8vWFaFl0EDtOD9pp61YmaQmM82RRz9W712OpF
LfKf8N0Tu2fZQvjyp+vN3s02I3CjQSUPqWvEebXlBejLDjsXO8k6OBqzmeunUQBT
86bpQ7qZbWAznnZUx+GcXCcVu4HrNeArC5+PuJCOiAVe+2uUpAgYdgUznBNOGLmM
l/lpm3qdbztiDusUc2ll13hPxBGqD9plaKgo2c3GsouSFnPCgDY/y4jstwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNM1g7QnxWnoidap53l57srbUNPmMB8GA1UdIwQY
MBaAFGP50j10N1wTjqVj5MyX8JQG7XkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9uU1BYUTNYQk9PcFdQa3pKZndsQWJ0ZVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjct
ZWRmN2JiNjUzZjEzLzEvMHpXRHRDZkZhZWlKMXFubmVYbnV5dHRRMC1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjctZWRmN2JiNjUzZjEz
LzEvWV9uU1BYUTNYQk9PcFdQa3pKZndsQWJ0ZVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT14AwQC
LZrQAwQCuXYcMA0EAgACMAcDBQAqAVrAMA0GCSqGSIb3DQEBCwUAA4IBAQBIpF8Q
PZoZ8q3SZCku+4ZbqJYyP/SkKWOqZ1B7TLs0NU2JZZTrAe1KTDifTCv/OiUHwqb9
tp/GDHObgUPzszGmwdxCLuVISaD1D8gPPsJ5fewIh4TAUsV1JNhYvFL0YaaWC3bp
0zORxuD/m7fXOCn9mPnjMtExs+qS/1GHeCWm8pCze3tz8nXdaJ9HfsrAm/fwbaNJ
pvN5zFFklbwusXKLliLTNvuYeTfOJ9vKeP6J0X3m92AqRr7EER1ODDR8BPijPtCE
Umi2QsF5gbO8bDRhwhoi5JYeFRF5lIgMZ0flrEiunfssl7MdxPq4mgldHZDYJCF9
KEEdOnOURVqBxzjk
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:59 2026 by rpki-client