Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/1ZFzpY9gqaxllEXCBRcpbFZtvSI.roa
File: 1ZFzpY9gqaxllEXCBRcpbFZtvSI.roa (raw, json)
Hash identifier: 5BFrURuD3slP3IWW2XdDULNhAMP/7M8VYqXagPl/wDQ=
Subject key identifier: D5:91:73:A5:8F:60:A9:AC:65:94:45:C2:05:17:29:6C:56:6D:BD:22
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019D50279AF4E7D72F914F2E06C8C49D5664
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/1ZFzpY9gqaxllEXCBRcpbFZtvSI.roa
Signing time: Thu 02 Apr 2026 21:44:25 +0000
ROA not before: Thu 02 Apr 2026 21:44:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59729
IP address blocks: 82.118.18.0/24 maxlen: 24
185.82.216.0/22 maxlen: 22
195.123.224.0/21 maxlen: 21
217.12.202.0/23 maxlen: 23
2a02:27aa::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:50:27:9a:f4:e7:d7:2f:91:4f:2e:06:c8:c4:9d:56:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Apr 2 21:44:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59173a58f60a9ac659445c20517296c566dbd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:3c:ed:bb:6e:05:2f:ee:e0:11:0e:3c:d4:
21:64:de:6e:07:3a:85:08:b2:57:76:a2:cf:7e:16:
f4:c6:e6:74:43:42:8c:f9:69:ac:89:3f:ce:7d:d4:
36:e0:10:4f:56:1f:fd:57:b8:29:8f:de:ff:98:1b:
92:96:76:40:df:b8:7a:34:e8:f8:47:49:4a:97:e8:
54:7e:6f:f1:49:0e:3f:01:96:d1:1b:0e:26:1a:81:
2a:88:bb:01:f0:f5:bb:98:cd:e8:de:d6:1e:a3:ec:
f1:04:63:42:2c:00:bf:27:fb:32:3a:6e:93:ed:7e:
9e:48:67:0d:ae:d2:4d:51:b8:0e:02:42:e1:e5:b1:
8f:5e:e5:b2:98:9d:2e:b3:b5:73:e3:a5:68:87:3b:
fa:65:b7:46:e0:f0:e2:10:4c:3e:92:75:02:93:32:
b6:93:10:d3:6d:25:3b:d2:57:79:53:b7:dd:ad:83:
18:5d:5f:13:ec:ec:42:91:6a:14:00:0d:71:50:98:
b7:85:7e:c3:05:30:2a:f0:c2:8f:c7:de:ba:a8:4a:
80:08:a5:70:d7:4d:a1:5b:eb:cd:65:14:24:9f:47:
59:c9:07:0a:7d:78:21:f8:0b:76:09:e6:c8:6b:59:
f6:30:cf:90:ed:7b:bc:36:d2:0f:5a:e1:7a:b2:75:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:73:A5:8F:60:A9:AC:65:94:45:C2:05:17:29:6C:56:6D:BD:22
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/1ZFzpY9gqaxllEXCBRcpbFZtvSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.18.0/24
185.82.216.0/22
195.123.224.0/21
217.12.202.0/23
IPv6:
2a02:27aa::/32
Signature Algorithm: sha256WithRSAEncryption
30:1d:c1:4f:7c:4c:d0:13:62:36:7c:f3:91:da:a6:a4:a5:e5:
78:36:cf:99:c9:ee:34:3b:76:c2:87:d7:87:b3:e9:84:8a:f8:
18:27:96:ce:7b:90:ed:c9:7d:85:b9:c2:50:ab:cb:78:51:13:
f5:f4:12:11:e7:81:e5:94:d4:7b:37:ea:1b:e7:76:40:f8:c1:
50:0f:9c:70:e8:9e:59:14:c9:12:8d:03:b6:8a:5d:98:44:78:
cd:42:17:21:75:ea:cd:b1:9b:19:e0:dc:c7:ed:83:56:fb:da:
3c:95:61:0e:51:8e:7d:45:3f:9f:b6:6b:31:40:a8:eb:01:06:
e2:90:b7:a2:6a:13:cc:0a:e9:25:95:7c:80:ac:a5:39:1c:c2:
dd:71:41:a5:89:9e:d1:6a:8b:76:d7:6a:28:c5:ba:aa:33:af:
79:ad:4a:f5:60:43:d6:fd:e3:eb:99:2a:7b:99:a5:5d:59:8f:
f4:93:b3:95:fc:c9:88:4d:2c:57:76:98:b1:cc:70:60:00:74:
91:7b:62:2e:8f:da:cb:9b:9c:f3:0d:1f:e5:65:ea:5b:2a:d1:
ed:85:44:8b:f9:3c:e5:d3:d2:e4:5b:c5:a1:08:a4:9b:c8:16:
b0:06:f0:36:34:2b:03:43:c5:49:c3:b5:c9:0c:da:da:e1:78:
28:f1:d1:3e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ1QJ5r059cvkU8uBsjEnVZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh
MzRmNWUwHhcNMjYwNDAyMjE0NDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTkxNzNhNThmNjBhOWFjNjU5NDQ1YzIwNTE3Mjk2YzU2NmRiZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vw87btuBS/u4BEOPNQhZN5uBzqF
CLJXdqLPfhb0xuZ0Q0KM+WmsiT/OfdQ24BBPVh/9V7gpj97/mBuSlnZA37h6NOj4
R0lKl+hUfm/xSQ4/AZbRGw4mGoEqiLsB8PW7mM3o3tYeo+zxBGNCLAC/J/syOm6T
7X6eSGcNrtJNUbgOAkLh5bGPXuWymJ0us7Vz46Vohzv6ZbdG4PDiEEw+knUCkzK2
kxDTbSU70ld5U7fdrYMYXV8T7OxCkWoUAA1xUJi3hX7DBTAq8MKPx966qEqACKVw
102hW+vNZRQkn0dZyQcKfXgh+At2CebIa1n2MM+Q7Xu8NtIPWuF6snUG/QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNWRc6WPYKmsZZRFwgUXKWxWbb0iMB8GA1UdIwQY
MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt
ODdkMTdkZjc0YzdlLzEvMVpGenBZOWdxYXhsbEVYQ0JSY3BiRlp0dlNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl
LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAUnYSAwQC
uVLYAwQDw3vgAwQB2QzKMA0EAgACMAcDBQAqAieqMA0GCSqGSIb3DQEBCwUAA4IB
AQAwHcFPfEzQE2I2fPOR2qakpeV4Ns+Zye40O3bCh9eHs+mEivgYJ5bOe5DtyX2F
ucJQq8t4URP19BIR54HllNR7N+ob53ZA+MFQD5xw6J5ZFMkSjQO2il2YRHjNQhch
derNsZsZ4NzH7YNW+9o8lWEOUY59RT+ftmsxQKjrAQbikLeiahPMCukllXyArKU5
HMLdcUGliZ7Raot212ooxbqqM695rUr1YEPW/ePrmSp7maVdWY/0k7OV/MmITSxX
dpixzHBgAHSRe2Iuj9rLm5zzDR/lZepbKtHthUSL+Tzl09LkW8WhCKSbyBawBvA2
NCsDQ8VJw7XJDNra4Xgo8dE+
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:09:42 2026 by rpki-client