Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ZsQ9lmRCQ--4PszinpRM3-Zgb2Q.roa
File: ZsQ9lmRCQ--4PszinpRM3-Zgb2Q.roa (raw, json)
Hash identifier: gLbW2t41nzvj/YP55Vnr5cnIfKklQY/CBVxBOEbb3ls=
Subject key identifier: 66:C4:3D:96:64:42:43:EF:B8:3E:CC:E2:9E:94:4C:DF:E6:60:6F:64
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01A06758AF5AA3CE0646E078F37AA043EB82
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ZsQ9lmRCQ--4PszinpRM3-Zgb2Q.roa
Signing time: Thu 03 Sep 2026 12:57:40 +0000
ROA not before: Thu 03 Sep 2026 12:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58126
IP address blocks: 178.157.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:58:af:5a:a3:ce:06:46:e0:78:f3:7a:a0:43:eb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Sep 3 12:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66c43d96644243efb83ecce29e944cdfe6606f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:2f:10:8b:ae:a4:68:6b:ce:e1:7d:e3:b4:
4b:75:8c:68:d6:c7:c9:6c:ce:01:91:f0:dc:9e:9a:
c5:14:a4:84:ed:7d:44:a5:32:22:ea:25:36:02:b5:
35:66:25:45:e3:3e:3f:18:a4:84:c3:99:70:62:00:
09:b8:8c:77:f8:ef:d0:de:70:ea:88:0e:25:68:86:
d1:52:b6:2d:e0:a4:1a:e0:6e:a6:13:f6:ca:e5:70:
33:65:6d:8e:03:a7:42:b4:5a:4f:c7:31:17:3f:fb:
96:e5:9d:8c:ad:83:ad:b5:d1:c2:bf:99:50:88:17:
6d:7e:53:1a:2a:d0:64:16:1a:2b:d9:8f:77:71:5b:
d1:f3:6d:a7:e1:18:b0:37:bc:b9:4c:8f:8d:b0:09:
d2:11:99:2b:19:0e:cb:e0:bf:90:60:b7:29:0a:fb:
16:2e:4a:87:bd:cc:11:86:21:0c:76:00:1d:dd:ef:
ae:a6:ec:96:0a:e2:0a:7b:11:a8:9a:16:97:62:51:
d3:e9:51:7f:5c:a5:79:db:da:be:83:85:83:d3:a8:
7e:c4:a0:04:45:89:e8:e8:1b:8e:de:a1:53:fd:1c:
be:03:cb:06:5f:0b:6b:67:46:4d:fd:3a:89:b9:7e:
1d:2f:f4:95:42:de:6c:f1:86:98:9c:b9:2b:92:6e:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:3D:96:64:42:43:EF:B8:3E:CC:E2:9E:94:4C:DF:E6:60:6F:64
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ZsQ9lmRCQ--4PszinpRM3-Zgb2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.77.0/24
Signature Algorithm: sha256WithRSAEncryption
98:59:1f:fc:56:9d:b0:2f:68:c6:d5:e7:f7:61:3f:c3:c2:9f:
0e:85:a0:e0:d3:f2:5c:d7:b3:95:5a:a9:13:14:d4:e7:0f:d4:
e9:61:39:1f:ae:37:aa:91:32:53:a8:4a:73:ea:31:0f:d6:a3:
00:8c:a9:29:37:43:55:4e:65:66:ff:66:1e:41:13:9c:32:be:
d0:e8:7e:a2:4d:80:7f:66:ef:df:eb:53:10:18:e0:8c:67:d6:
ab:f1:3c:fa:e4:d5:93:e3:53:7f:67:78:67:01:89:49:56:72:
1f:c1:76:7d:63:16:28:df:c4:a9:cb:bb:af:51:3e:d2:16:d7:
73:35:da:2b:b5:61:da:5e:21:32:c2:fd:77:09:bf:3c:75:78:
f0:55:49:f5:d8:3f:4f:a1:cc:7f:a3:ea:fb:3d:41:3a:9a:b4:
bc:1d:48:43:9c:3f:70:27:fe:96:93:28:14:5a:c6:9c:77:b8:
93:ae:bb:03:a5:ac:bb:49:ed:4d:68:f0:b9:d4:da:36:95:33:
05:2b:43:c6:c8:7d:cf:1e:f1:34:aa:ce:6a:84:56:c9:09:e9:
23:7b:5d:50:6c:70:3c:34:17:fb:b2:b0:5c:93:c2:c6:98:77:
f9:21:5f:c5:bf:b8:dd:83:23:e2:7f:11:5a:cf:a4:e3:37:ee:
50:1a:b8:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBnWK9ao84GRuB483qgQ+uCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjYwOTAzMTI1NzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM0M2Q5NjY0NDI0M2VmYjgzZWNjZTI5ZTk0NGNkZmU2NjA2ZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnQvEIuupGhrzuF947RLdYxo1sfJ
bM4BkfDcnprFFKSE7X1EpTIi6iU2ArU1ZiVF4z4/GKSEw5lwYgAJuIx3+O/Q3nDq
iA4laIbRUrYt4KQa4G6mE/bK5XAzZW2OA6dCtFpPxzEXP/uW5Z2MrYOttdHCv5lQ
iBdtflMaKtBkFhor2Y93cVvR822n4RiwN7y5TI+NsAnSEZkrGQ7L4L+QYLcpCvsW
LkqHvcwRhiEMdgAd3e+upuyWCuIKexGomhaXYlHT6VF/XKV529q+g4WD06h+xKAE
RYno6BuO3qFT/Ry+A8sGXwtrZ0ZN/TqJuX4dL/SVQt5s8YaYnLkrkm6q5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbEPZZkQkPvuD7M4p6UTN/mYG9kMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvWnNROWxtUkNRLS00UHN6aW5wUk0zLVpnYjJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsp1NMA0G
CSqGSIb3DQEBCwUAA4IBAQCYWR/8Vp2wL2jG1ef3YT/Dwp8OhaDg0/Jc17OVWqkT
FNTnD9TpYTkfrjeqkTJTqEpz6jEP1qMAjKkpN0NVTmVm/2YeQROcMr7Q6H6iTYB/
Zu/f61MQGOCMZ9ar8Tz65NWT41N/Z3hnAYlJVnIfwXZ9YxYo38Spy7uvUT7SFtdz
NdortWHaXiEywv13Cb88dXjwVUn12D9Pocx/o+r7PUE6mrS8HUhDnD9wJ/6WkygU
Wsacd7iTrrsDpay7Se1NaPC51No2lTMFK0PGyH3PHvE0qs5qhFbJCekje11QbHA8
NBf7srBck8LGmHf5IV/Fv7jdgyPifxFaz6TjN+5QGrii
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:32 2026 by rpki-client