Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/ZmvGPOp_1qrvVkC55KMPvnEbYj8.roa
File: ZmvGPOp_1qrvVkC55KMPvnEbYj8.roa (raw, json)
Hash identifier: PAyaFkNXlsk7gSyWBxSONv2o7kwM1R1bojPLp2ngilE=
Subject key identifier: 66:6B:C6:3C:EA:7F:D6:AA:EF:56:40:B9:E4:A3:0F:BE:71:1B:62:3F
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 019C216235B568E660EBE26A6C7C980FD5F9
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/ZmvGPOp_1qrvVkC55KMPvnEbYj8.roa
Signing time: Tue 03 Feb 2026 02:43:30 +0000
ROA not before: Tue 03 Feb 2026 02:43:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35673
IP address blocks: 82.115.36.0/24 maxlen: 24
82.115.37.0/24 maxlen: 24
194.187.244.0/24 maxlen: 24
194.187.245.0/24 maxlen: 24
194.187.246.0/24 maxlen: 24
194.187.247.0/24 maxlen: 24
2a11:aa80::/48 maxlen: 48
2a11:aa80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:21:62:35:b5:68:e6:60:eb:e2:6a:6c:7c:98:0f:d5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Feb 3 02:43:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=666bc63cea7fd6aaef5640b9e4a30fbe711b623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:df:18:97:e7:37:c5:f9:b1:1a:52:69:c3:
bf:e0:92:ba:d6:f7:1a:65:91:d3:4c:92:e6:f6:ea:
db:4c:01:8b:78:f4:84:43:30:43:7c:9c:ee:9b:4a:
75:b4:d6:b5:ac:56:5c:1e:4b:11:1b:e1:8c:80:91:
1c:38:ef:30:7c:40:9d:85:09:f8:06:7a:bd:42:88:
75:6e:91:f5:74:42:92:69:fe:fc:50:bb:a6:48:f6:
6f:ff:a2:d7:9f:6a:6f:3b:c2:2e:7a:b2:e6:6a:0d:
fa:8a:ca:21:39:c5:fc:b5:7f:11:5f:92:59:9b:c3:
07:2c:1b:4d:42:dc:b0:7b:58:33:f9:a9:4b:fa:a5:
5d:6e:74:f5:a1:e4:ec:d8:f0:46:4d:50:ee:55:c8:
48:ac:a7:f0:0d:9a:6b:9b:01:24:ac:53:6d:e9:d1:
c5:bf:b5:98:11:ac:ca:78:79:03:0a:07:f3:03:0d:
ac:fe:f1:e9:df:05:a5:50:61:0d:6c:e9:ba:16:af:
ea:db:8a:88:21:4d:94:76:9d:49:29:e8:11:5d:b7:
fa:75:89:31:23:e1:ee:87:6e:14:a4:a3:15:1b:25:
3a:db:2b:68:a6:9e:49:6d:8a:00:4d:c4:21:85:89:
64:0f:15:6d:b0:65:af:87:32:e0:aa:7a:16:bd:e9:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:C6:3C:EA:7F:D6:AA:EF:56:40:B9:E4:A3:0F:BE:71:1B:62:3F
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/ZmvGPOp_1qrvVkC55KMPvnEbYj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.36.0/23
194.187.244.0/22
IPv6:
2a11:aa80::/47
Signature Algorithm: sha256WithRSAEncryption
ad:aa:fd:6d:ed:df:cf:03:7b:bb:71:ed:f3:48:26:ae:92:fc:
88:56:7c:dc:e9:42:ca:87:90:1c:f1:29:a2:3c:ac:52:57:69:
e2:cd:26:31:b8:c6:4f:88:d0:ee:f6:9a:8c:1d:d9:08:8b:2e:
4b:10:e2:c6:94:07:e2:52:90:2c:23:2a:8d:44:f2:14:f9:b4:
4f:28:7b:e2:50:3e:8c:6f:b3:4c:85:3e:49:80:b8:32:be:d4:
4c:37:6c:fd:57:22:ce:e7:0f:65:e3:0e:ce:30:bc:8a:aa:5d:
05:ca:97:c5:4c:07:d7:8d:f0:28:61:27:fa:cd:ac:6a:e1:a7:
44:28:61:bc:dd:c2:b5:ca:71:e8:de:b6:de:74:24:31:85:f7:
d5:77:c1:83:ef:d8:9d:ec:0f:02:5d:68:b0:80:8f:08:8f:d6:
c2:27:74:05:30:ea:7f:1a:81:c8:5f:cc:69:44:eb:50:fa:35:
90:67:c7:ae:8e:be:dc:97:0e:a7:d0:c1:15:e8:82:6a:da:58:
5e:e8:c0:ed:43:6e:91:a0:c3:cb:59:88:50:37:62:c0:a1:4d:
41:f4:f0:7a:4e:0e:be:6d:b9:b7:56:07:63:b5:b6:f0:e1:71:
8f:1f:2a:7d:53:46:da:94:26:bb:00:16:e0:5a:b0:6b:ef:07:
49:79:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:57:57 2026 by rpki-client