Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/zaVs9YzUVysUYaexNejfTqGVfFw.roa
File: zaVs9YzUVysUYaexNejfTqGVfFw.roa (raw, json)
Hash identifier: uOJwc8f/FfK5TomDt99yMxTIgRXKVgwpxiLh5BIgn0E=
Subject key identifier: CD:A5:6C:F5:8C:D4:57:2B:14:61:A7:B1:35:E8:DF:4E:A1:95:7C:5C
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 01A09A610EFA3449FFEE388FFDC5A609A972
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/zaVs9YzUVysUYaexNejfTqGVfFw.roa
Signing time: Sun 13 Sep 2026 10:47:27 +0000
ROA not before: Sun 13 Sep 2026 10:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150758
IP address blocks: 185.62.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:61:0e:fa:34:49:ff:ee:38:8f:fd:c5:a6:09:a9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Sep 13 10:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cda56cf58cd4572b1461a7b135e8df4ea1957c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:6e:a4:db:d8:70:80:b9:9a:32:0f:ae:5b:
7a:6e:16:1a:50:98:3a:57:fa:b2:7d:be:2d:9e:f8:
c2:56:55:c1:02:e4:9e:5c:90:f5:98:e4:f8:35:25:
54:3d:b8:28:5b:c9:3f:63:ae:b5:54:52:a9:32:fd:
a5:a4:30:7f:1a:8f:f8:e0:9a:57:c3:2d:66:9f:0e:
06:a1:80:03:20:1d:6a:81:36:fc:7a:b2:c5:e6:e5:
0d:4e:26:e5:d2:c7:c4:41:e0:ff:20:89:22:93:61:
c2:73:49:03:77:19:f8:47:4b:72:46:11:d5:c8:8d:
57:b1:56:05:97:f5:54:da:71:1e:94:5d:4f:5e:72:
ed:e4:73:7a:87:37:99:23:1a:91:38:9e:ac:c0:fb:
36:d1:d9:f8:fb:74:ef:33:65:63:60:2e:9a:dc:16:
ea:9b:e9:eb:f6:d6:23:10:ea:20:49:7d:9d:0b:09:
fa:ab:38:9e:54:5f:44:1b:9f:01:36:0e:0b:3c:ab:
65:3d:a5:89:bf:f2:1f:6e:71:88:44:05:71:81:c9:
55:82:35:e3:39:f1:14:06:e8:c1:48:0b:b4:00:c9:
b0:2d:a8:e5:5e:d2:61:14:5d:38:1f:f9:3f:af:de:
61:20:a8:46:12:72:8a:8a:b8:a6:95:5a:8c:6d:30:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A5:6C:F5:8C:D4:57:2B:14:61:A7:B1:35:E8:DF:4E:A1:95:7C:5C
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/zaVs9YzUVysUYaexNejfTqGVfFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.10.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e4:ed:1e:0b:1c:d3:70:50:9f:f4:24:04:75:fb:4e:4d:28:
fb:cc:e4:06:8d:0f:b8:ca:a4:86:f1:20:c8:57:26:61:e3:67:
60:88:7a:92:d3:b2:7c:7f:8b:0a:0f:5d:3a:04:03:29:db:67:
8e:68:bb:5f:90:0c:ef:0b:93:22:e8:92:07:5d:48:16:a8:37:
0f:a5:c1:77:13:7a:8a:b6:ef:47:c7:22:5e:6f:1f:1a:9e:db:
32:d8:d8:27:c2:49:1f:74:d5:e8:02:00:42:d0:27:ee:e1:6f:
18:29:84:ca:f9:e7:8f:e7:91:a9:72:b7:e0:f2:dc:7c:38:5b:
55:e6:33:75:0c:95:80:3b:2f:7e:ca:36:95:64:2e:9f:5e:ab:
1f:b1:5a:f6:38:6a:32:17:78:c6:57:35:ea:0b:2e:69:62:5a:
4b:2c:37:c7:25:12:6d:ea:ff:2e:d4:76:fc:c2:23:2c:09:3a:
7e:90:f4:e1:3e:9f:4b:c6:24:19:6d:23:b8:98:a0:d5:74:1d:
f7:e3:e3:27:a3:98:f0:cf:86:87:97:98:93:1b:5c:ef:bf:79:
f9:c6:60:ec:dc:ae:79:ce:ea:d4:51:ca:f4:65:d6:21:ab:c1:
ae:83:0e:41:c0:3f:b8:3c:8e:84:c5:2a:0a:93:e4:a7:cb:29:
07:ea:37:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCaYQ76NEn/7jiP/cWmCalyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmNhN2E1ODNiMjQ5N2MzNjdlOWU4NmRlYjc5Y2I3YTcz
NzVhNDcwHhcNMjYwOTEzMTA0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGE1NmNmNThjZDQ1NzJiMTQ2MWE3YjEzNWU4ZGY0ZWExOTU3YzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskZupNvYcIC5mjIPrlt6bhYaUJg6
V/qyfb4tnvjCVlXBAuSeXJD1mOT4NSVUPbgoW8k/Y661VFKpMv2lpDB/Go/44JpX
wy1mnw4GoYADIB1qgTb8erLF5uUNTibl0sfEQeD/IIkik2HCc0kDdxn4R0tyRhHV
yI1XsVYFl/VU2nEelF1PXnLt5HN6hzeZIxqROJ6swPs20dn4+3TvM2VjYC6a3Bbq
m+nr9tYjEOogSX2dCwn6qzieVF9EG58BNg4LPKtlPaWJv/IfbnGIRAVxgclVgjXj
OfEUBujBSAu0AMmwLajlXtJhFF04H/k/r95hIKhGEnKKirimlVqMbTDLUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM2lbPWM1FcrFGGnsTXo306hlXxcMB8GA1UdIwQY
MBaAFBosp6WDskl8Nn6eht63nLenN1pHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAt
ODRjNjViMTkzNzU4LzEvemFWczlZelVWeXNVWWFleE5lamZUcUdWZkZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAtODRjNjViMTkzNzU4
LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT4KMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ5O0eCxzTcFCf9CQEdftOTSj7zOQGjQ+4yqSG8SDI
VyZh42dgiHqS07J8f4sKD106BAMp22eOaLtfkAzvC5Mi6JIHXUgWqDcPpcF3E3qK
tu9HxyJebx8antsy2NgnwkkfdNXoAgBC0Cfu4W8YKYTK+eeP55Gpcrfg8tx8OFtV
5jN1DJWAOy9+yjaVZC6fXqsfsVr2OGoyF3jGVzXqCy5pYlpLLDfHJRJt6v8u1Hb8
wiMsCTp+kPThPp9LxiQZbSO4mKDVdB334+Mno5jwz4aHl5iTG1zvv3n5xmDs3K55
zurUUcr0ZdYhq8Gugw5BwD+4PI6ExSoKk+SnyykH6jef
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:24 2026 by rpki-client