Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/Z5IU5MhqmWjxF4nkysr3k4T-KrE.roa
File: Z5IU5MhqmWjxF4nkysr3k4T-KrE.roa (raw, json)
Hash identifier: 8DiyaKtpWsV0dNQVL7eyaXkaCW97wcgzwHmqQeOZ9Ew=
Subject key identifier: 67:92:14:E4:C8:6A:99:68:F1:17:89:E4:CA:CA:F7:93:84:FE:2A:B1
Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial: 01A0D947C476DE3E80BD0FF690C1475EFEFB
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/Z5IU5MhqmWjxF4nkysr3k4T-KrE.roa
Signing time: Fri 25 Sep 2026 15:55:54 +0000
ROA not before: Fri 25 Sep 2026 15:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213095
IP address blocks: 91.239.56.0/24 maxlen: 24
95.175.153.0/24 maxlen: 24
163.114.159.0/24 maxlen: 24
185.21.130.0/24 maxlen: 24
2a07:fb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:47:c4:76:de:3e:80:bd:0f:f6:90:c1:47:5e:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Validity
Not Before: Sep 25 15:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=679214e4c86a9968f11789e4cacaf79384fe2ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:e7:37:d5:3e:b3:72:d9:c4:c9:2e:be:45:
64:d8:75:76:5e:0a:3d:ca:7c:23:70:14:4a:bf:b1:
7e:64:fa:65:b2:4c:c9:6f:2e:20:57:65:5f:e7:07:
8e:9a:9e:66:f6:d2:b9:42:7f:56:05:56:3a:36:a1:
1f:8d:dc:31:5f:f5:91:5f:ca:be:ff:73:5b:e5:bf:
21:21:8a:d1:4a:e4:d1:fa:06:75:d0:6f:76:df:59:
7c:93:e9:46:60:f3:21:05:ca:a1:e8:99:11:7c:90:
dd:09:6f:eb:3c:0a:89:ea:6b:62:13:ef:53:0b:dd:
b3:d2:5f:d7:79:f9:5e:15:ab:12:f7:60:58:e8:28:
d4:72:68:b0:81:e1:5d:d7:9d:48:6d:6c:56:7d:18:
93:25:b6:cb:55:85:64:58:95:c7:03:8e:1d:ff:2b:
54:ab:ab:3a:ef:28:2d:8a:db:9a:6e:81:8e:45:d5:
aa:5f:12:0c:ea:9e:36:71:d8:ea:0a:ef:5f:71:ef:
0b:d7:2f:78:83:86:f6:97:0a:92:b8:f2:8f:8c:56:
d2:2f:85:c5:e4:b1:ff:8c:6c:08:6e:bb:59:0e:de:
f2:04:47:d7:8f:3c:b3:2c:bb:15:7f:9a:42:d0:3f:
93:7a:39:2a:54:de:66:a6:a2:0c:e9:b0:5a:1a:fd:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:14:E4:C8:6A:99:68:F1:17:89:E4:CA:CA:F7:93:84:FE:2A:B1
X509v3 Authority Key Identifier:
keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/Z5IU5MhqmWjxF4nkysr3k4T-KrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.56.0/24
95.175.153.0/24
163.114.159.0/24
185.21.130.0/24
IPv6:
2a07:fb40::/29
Signature Algorithm: sha256WithRSAEncryption
11:d4:9c:81:36:a2:7c:9a:67:62:3c:ca:0d:53:18:89:2b:7c:
15:bf:16:d4:38:be:6f:de:64:73:68:31:79:f7:a6:c2:b8:a4:
88:3c:bc:a9:1d:32:68:ea:b8:1d:5d:c4:68:45:98:31:b2:04:
1f:ce:87:20:09:22:c9:d2:fa:17:8e:32:d2:0f:b1:03:1b:79:
45:2b:59:ef:4e:84:8e:36:74:3d:79:84:ce:7f:5a:b7:61:89:
5e:52:11:aa:fd:3a:2d:11:3c:3a:1e:69:ce:b0:da:bb:40:c7:
ae:d0:21:b7:82:8a:cc:4c:f8:f7:e9:cc:06:a3:6d:db:06:19:
4e:78:19:38:1a:b0:5f:55:7b:64:89:90:52:30:01:12:fd:6e:
2d:23:72:d3:a9:57:26:ed:2e:50:67:6f:2a:54:31:8f:3d:3e:
db:5d:c6:e6:42:d8:2a:b6:2d:61:0d:1c:46:88:27:69:b4:82:
5b:09:21:7c:d9:85:b3:8d:bc:d5:6b:bb:22:70:06:7a:b8:8d:
e5:72:2e:89:55:7f:29:4a:bd:d4:30:bd:1a:b0:72:cd:2b:f0:
e1:22:3f:13:97:fd:08:91:fc:40:27:1e:31:32:2f:52:29:53:
45:44:5f:81:f2:bd:ec:e2:10:94:e6:e6:cc:85:6b:7a:69:3c:
23:e5:83:5e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaDZR8R23j6AvQ/2kMFHXv77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZWJjODZkODUzZjdlM2E5MjAxNTNmMWZiMGIxOWY3YjBl
NDFhN2YwHhcNMjYwOTI1MTU1NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzkyMTRlNGM4NmE5OTY4ZjExNzg5ZTRjYWNhZjc5Mzg0ZmUyYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqnnN9U+s3LZxMkuvkVk2HV2Xgo9
ynwjcBRKv7F+ZPplskzJby4gV2Vf5weOmp5m9tK5Qn9WBVY6NqEfjdwxX/WRX8q+
/3Nb5b8hIYrRSuTR+gZ10G9231l8k+lGYPMhBcqh6JkRfJDdCW/rPAqJ6mtiE+9T
C92z0l/XefleFasS92BY6CjUcmiwgeFd151IbWxWfRiTJbbLVYVkWJXHA44d/ytU
q6s67ygtituaboGORdWqXxIM6p42cdjqCu9fce8L1y94g4b2lwqSuPKPjFbSL4XF
5LH/jGwIbrtZDt7yBEfXjzyzLLsVf5pC0D+TejkqVN5mpqIM6bBaGv2/lQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFGeSFOTIaplo8ReJ5MrK95OE/iqxMB8GA1UdIwQY
MBaAFBfryG2FP346kgFT8fsLGfew5Bp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTIt
Zjc1NjE4YmU2MmQ3LzEvWjVJVTVNaHFtV2p4RjRua3lzcjNrNFQtS3JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTItZjc1NjE4YmU2MmQ3
LzEvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW+84AwQA
X6+ZAwQAo3KfAwQAuRWCMA0EAgACMAcDBQMqB/tAMA0GCSqGSIb3DQEBCwUAA4IB
AQAR1JyBNqJ8mmdiPMoNUxiJK3wVvxbUOL5v3mRzaDF596bCuKSIPLypHTJo6rgd
XcRoRZgxsgQfzocgCSLJ0voXjjLSD7EDG3lFK1nvToSONnQ9eYTOf1q3YYleUhGq
/TotETw6HmnOsNq7QMeu0CG3gorMTPj36cwGo23bBhlOeBk4GrBfVXtkiZBSMAES
/W4tI3LTqVcm7S5QZ28qVDGPPT7bXcbmQtgqti1hDRxGiCdptIJbCSF82YWzjbzV
a7sicAZ6uI3lci6JVX8pSr3UML0asHLNK/DhIj8Tl/0IkfxAJx4xMi9SKVNFRF+B
8r3s4hCU5ubMhWt6aTwj5YNe
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:01:11 2026 by rpki-client