Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zZ71CbnXRwNiM-821nhJzxHZ6WI.roa
File: zZ71CbnXRwNiM-821nhJzxHZ6WI.roa (raw, json)
Hash identifier: fBSSCff9glRMWUvBhBw8/vKeqkyzQwnk99ONebygoQw=
Subject key identifier: CD:9E:F5:09:B9:D7:47:03:62:33:EF:36:D6:78:49:CF:11:D9:E9:62
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E98368835A34CA7641FD6F299EE6FE174
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zZ71CbnXRwNiM-821nhJzxHZ6WI.roa
Signing time: Fri 05 Jun 2026 14:36:11 +0000
ROA not before: Fri 05 Jun 2026 14:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 77.93.136.0/24 maxlen: 24
81.168.68.0/24 maxlen: 24
81.168.76.0/24 maxlen: 24
81.168.87.0/24 maxlen: 24
81.168.96.0/24 maxlen: 24
81.168.122.0/24 maxlen: 24
82.152.59.0/24 maxlen: 24
82.153.182.0/24 maxlen: 24
82.153.213.0/24 maxlen: 24
89.213.202.0/23 maxlen: 24
217.144.145.0/24 maxlen: 24
217.144.153.0/24 maxlen: 24
217.144.156.0/24 maxlen: 24
217.145.73.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
217.145.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:36:88:35:a3:4c:a7:64:1f:d6:f2:99:ee:6f:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 5 14:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd9ef509b9d747036233ef36d67849cf11d9e962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:0d:84:34:71:34:d5:d0:cd:96:3f:63:a2:
a5:f3:7e:52:a7:68:be:be:19:1f:0b:78:59:f3:35:
ca:db:9b:b8:42:0d:42:38:9b:51:ec:6e:2c:02:7f:
af:23:52:ff:3e:6e:05:d6:99:4b:17:bd:a1:c5:30:
f1:f9:98:85:f0:f0:63:e9:17:14:16:5d:87:95:1a:
47:2d:3d:a7:e9:5d:7b:0b:da:87:69:7d:b2:f4:fc:
b6:b7:28:2b:43:59:0c:f7:31:fd:67:48:29:a3:87:
66:9f:25:d3:34:60:5d:13:d1:0f:92:86:83:cc:3a:
f3:c3:a0:42:d1:d0:ac:a0:72:27:b1:38:fb:0f:86:
a1:48:75:fa:ce:d8:dc:db:e9:a2:ba:13:c5:d1:a3:
fb:2f:4a:08:25:c8:92:f5:de:45:41:55:eb:8a:e8:
97:20:f4:02:f8:63:c8:bd:31:a2:a6:ff:33:d2:32:
55:1a:ba:9c:1c:40:40:ea:fc:86:e5:72:bc:9c:20:
94:e9:76:c7:aa:c1:40:bc:54:c4:5d:e3:74:42:9e:
f3:00:12:0d:48:aa:e2:6e:79:3e:fb:6e:b8:fa:42:
3d:4d:d7:8e:99:0b:34:e5:1d:96:1f:41:b1:68:db:
0a:f0:4f:4e:29:af:21:b9:71:ee:8e:53:15:8a:8d:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:F5:09:B9:D7:47:03:62:33:EF:36:D6:78:49:CF:11:D9:E9:62
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zZ71CbnXRwNiM-821nhJzxHZ6WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.136.0/24
81.168.68.0/24
81.168.76.0/24
81.168.87.0/24
81.168.96.0/24
81.168.122.0/24
82.152.59.0/24
82.153.182.0/24
82.153.213.0/24
89.213.202.0/23
217.144.145.0/24
217.144.153.0/24
217.144.156.0/24
217.145.73.0/24
217.145.75.0-217.145.76.255
Signature Algorithm: sha256WithRSAEncryption
07:05:31:92:5b:29:ac:96:b7:72:1c:e9:b5:d8:6c:f4:9a:18:
1c:2b:77:03:a3:7c:39:a9:25:6b:f1:6d:a0:dd:43:d6:40:14:
f6:83:95:32:33:c3:38:33:7e:45:a1:35:df:8a:1e:d2:69:a1:
0b:75:c4:40:11:0f:21:6f:4d:20:8a:39:6a:b7:1f:77:f7:7b:
7a:c1:24:9e:64:06:5c:3a:31:f1:3e:80:77:05:91:f1:6f:e4:
71:af:d3:43:15:b3:b1:ad:c9:f3:da:68:72:00:42:fb:22:55:
28:a0:de:8f:8b:29:a8:1c:bc:44:b6:11:98:08:ea:93:b2:27:
ea:19:32:22:07:bd:89:27:11:20:b6:3c:e8:09:a6:3a:fd:33:
76:a3:fc:5c:11:da:10:3c:12:e2:7f:13:c1:22:69:5c:9d:29:
b5:2b:33:0b:b3:32:ee:bd:f7:1b:b7:6c:a9:cd:67:5e:fd:08:
b1:54:8b:dd:5b:dd:e6:7f:89:c8:94:00:96:22:68:a5:1c:91:
06:86:df:70:79:bd:e5:9d:04:85:d5:a8:cb:1b:08:0b:05:ef:
c3:5d:6f:8c:85:2c:4d:bb:aa:7a:e5:d0:b3:0f:33:9d:16:ee:
06:0a:dd:72:2a:d9:e1:f0:08:06:b3:b0:d6:e3:cd:1b:2f:7d:
2c:12:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:57 2026 by rpki-client