Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/Z33J-rBD7SOTEmIb_eXTJ1-LaRY.roa
File: Z33J-rBD7SOTEmIb_eXTJ1-LaRY.roa (raw, json)
Hash identifier: klxLaLJRe/p4fV22qW+zJTTxCBMy1xczkItxrxoNHkw=
Subject key identifier: 67:7D:C9:FA:B0:43:ED:23:93:12:62:1B:FD:E5:D3:27:5F:8B:69:16
Certificate issuer: /CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Certificate serial: 019EBAFEF51182893986815B3D633C87812A
Authority key identifier: C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/Z33J-rBD7SOTEmIb_eXTJ1-LaRY.roa
Signing time: Fri 12 Jun 2026 08:42:11 +0000
ROA not before: Fri 12 Jun 2026 08:42:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 195.62.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:fe:f5:11:82:89:39:86:81:5b:3d:63:3c:87:81:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Validity
Not Before: Jun 12 08:42:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=677dc9fab043ed239312621bfde5d3275f8b6916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:b5:02:98:e7:63:d9:38:59:6b:ce:ca:db:
1e:6c:af:0b:e5:c5:d3:78:72:b6:65:72:bf:21:2d:
0c:c5:61:d3:58:20:20:fa:14:b5:02:8e:a6:f6:28:
93:2e:ee:35:f4:9f:60:7c:b7:c6:7e:be:1e:55:43:
10:19:a9:0e:d8:49:92:e9:9b:25:75:42:95:71:ac:
5e:b9:08:0d:98:e8:3f:e9:6f:4d:ce:e4:b8:52:b7:
62:5e:e1:bb:63:41:63:37:10:92:79:8f:2d:d8:c8:
df:8e:98:2c:36:a7:46:67:7e:9d:ef:98:e5:91:5c:
86:1c:5a:a4:23:17:98:5f:b3:c6:31:e7:cf:60:2c:
0d:68:84:eb:1c:1d:a3:89:1b:1a:88:18:b3:6c:8c:
11:d3:33:4f:bb:cc:19:81:66:9c:ef:8c:c1:c3:1d:
ad:20:89:5e:ac:cd:6b:39:2e:16:cb:75:b3:57:85:
c5:8d:f7:29:01:c9:1b:11:21:1a:7c:88:f3:41:d1:
f1:04:de:6c:83:16:80:e3:85:ce:32:9a:08:52:e4:
5b:e5:f6:4b:66:18:12:8e:bc:3d:ad:5f:8d:7d:08:
f4:5b:60:34:06:98:d8:b3:ed:5f:9c:49:45:eb:bf:
d8:d8:3c:7f:4a:7b:b8:f7:9c:0a:9b:3c:2b:58:6e:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:C9:FA:B0:43:ED:23:93:12:62:1B:FD:E5:D3:27:5F:8B:69:16
X509v3 Authority Key Identifier:
keyid:C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/Z33J-rBD7SOTEmIb_eXTJ1-LaRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.31.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6e:d2:51:b9:39:22:69:c0:f2:1a:21:ba:47:53:97:c9:8c:
18:2e:a5:a2:4e:ae:d4:c6:e6:cf:8b:8e:1e:86:63:f7:76:76:
b4:26:5d:99:32:24:5f:59:60:6e:9f:f0:0e:a6:c9:e2:bb:5d:
a2:a0:3e:c4:6e:28:9f:1f:38:f6:cc:7c:98:2e:bc:78:21:10:
88:37:b0:10:78:ff:c8:60:fa:51:91:81:27:7d:87:e6:2e:3e:
57:75:41:cc:46:61:df:51:e2:db:e8:b6:7d:a3:eb:5c:34:1b:
bc:8e:e5:54:18:35:7c:8a:fb:d5:09:f6:05:a7:d0:df:d7:89:
ba:ab:38:9f:04:84:96:e4:05:65:64:49:da:1c:1b:45:37:79:
be:83:6e:10:f9:35:e3:83:be:e5:ba:d8:a2:14:00:0d:12:2f:
4b:2f:7f:26:43:9c:9f:5d:d8:f8:4b:02:42:3e:26:74:fa:bb:
53:ec:3b:b1:5d:5b:76:a8:fe:80:94:de:f2:55:dd:f6:5a:5b:
eb:5f:67:b3:7a:aa:49:4e:7d:24:5b:73:b3:26:b9:49:34:11:
08:05:1e:9d:6c:d8:a1:e5:03:05:60:46:5d:27:bd:92:33:a9:
da:b2:b6:4d:28:cb:41:4d:28:42:32:00:54:ef:9d:33:29:66:
45:ec:76:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ66/vURgok5hoFbPWM8h4EqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmExZTE4MTI4NmVjZGNmNzRkYzk0YmMzM2YxOTk0OTcx
M2IzOTEwHhcNMjYwNjEyMDg0MjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzdkYzlmYWIwNDNlZDIzOTMxMjYyMWJmZGU1ZDMyNzVmOGI2OTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJm1ApjnY9k4WWvOytsebK8L5cXT
eHK2ZXK/IS0MxWHTWCAg+hS1Ao6m9iiTLu419J9gfLfGfr4eVUMQGakO2EmS6Zsl
dUKVcaxeuQgNmOg/6W9NzuS4UrdiXuG7Y0FjNxCSeY8t2MjfjpgsNqdGZ36d75jl
kVyGHFqkIxeYX7PGMefPYCwNaITrHB2jiRsaiBizbIwR0zNPu8wZgWac74zBwx2t
IIlerM1rOS4Wy3WzV4XFjfcpAckbESEafIjzQdHxBN5sgxaA44XOMpoIUuRb5fZL
ZhgSjrw9rV+NfQj0W2A0BpjYs+1fnElF67/Y2Dx/Snu495wKmzwrWG7PwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGd9yfqwQ+0jkxJiG/3l0ydfi2kWMB8GA1UdIwQY
MBaAFMi6HhgShuzc903JS8M/GZSXE7ORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUxvZUdCS0c3TnozVGNsTHd6OFpsSmNUczVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lYzFmZGQtMTA4MC00MTY3LTk1NWIt
MjA1ZmZhZjg0YzAyLzEvWjMzSi1yQkQ3U09URW1JYl9lWFRKMS1MYVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lYzFmZGQtMTA4MC00MTY3LTk1NWItMjA1ZmZhZjg0YzAy
LzEveUxvZUdCS0c3TnozVGNsTHd6OFpsSmNUczVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4fMA0G
CSqGSIb3DQEBCwUAA4IBAQB3btJRuTkiacDyGiG6R1OXyYwYLqWiTq7UxubPi44e
hmP3dna0Jl2ZMiRfWWBun/AOpsniu12ioD7EbiifHzj2zHyYLrx4IRCIN7AQeP/I
YPpRkYEnfYfmLj5XdUHMRmHfUeLb6LZ9o+tcNBu8juVUGDV8ivvVCfYFp9Df14m6
qzifBISW5AVlZEnaHBtFN3m+g24Q+TXjg77lutiiFAANEi9LL38mQ5yfXdj4SwJC
PiZ0+rtT7DuxXVt2qP6AlN7yVd32WlvrX2ezeqpJTn0kW3OzJrlJNBEIBR6dbNih
5QMFYEZdJ72SM6nasrZNKMtBTShCMgBU750zKWZF7HZS
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:41:07 2026 by rpki-client