Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/zsQtQXRIMfmAATwnDwSYChB6X74.roa
File: zsQtQXRIMfmAATwnDwSYChB6X74.roa (raw, json)
Hash identifier: Usub4GZLrzPgjoxI/zygWmH+Aj3bFEudCK+rN9RJJeY=
Subject key identifier: CE:C4:2D:41:74:48:31:F9:80:01:3C:27:0F:04:98:0A:10:7A:5F:BE
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019F9E963E83B741113183DA87B307ED3CD2
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/zsQtQXRIMfmAATwnDwSYChB6X74.roa
Signing time: Sun 26 Jul 2026 13:21:14 +0000
ROA not before: Sun 26 Jul 2026 13:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51975
IP address blocks: 46.151.208.0/22 maxlen: 22
46.151.212.0/22 maxlen: 22
185.79.248.0/23 maxlen: 24
185.79.250.0/23 maxlen: 24
2a05:78c0::/29 maxlen: 29
2a05:78c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:96:3e:83:b7:41:11:31:83:da:87:b3:07:ed:3c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Jul 26 13:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cec42d41744831f980013c270f04980a107a5fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:99:9d:47:ae:06:e7:5c:69:eb:10:bb:3a:
73:16:56:94:e7:c5:0c:73:e0:4c:48:aa:36:d1:1a:
50:93:49:90:05:c0:12:ea:50:48:84:bc:4f:68:d0:
a7:05:f0:6c:a6:d3:cf:1a:5f:6c:34:6a:bf:93:75:
ab:38:8f:01:b4:b5:df:19:cd:d0:b3:c2:49:d0:66:
ff:d3:9b:84:d0:2d:e8:49:82:b7:fe:b9:dd:30:0b:
34:68:e4:f4:22:b7:d4:71:a6:09:28:5b:36:70:fe:
73:ba:6e:f9:6e:1e:a1:16:b8:a0:98:4c:a0:2a:92:
ce:61:c2:f5:23:32:c6:60:60:26:f2:3f:76:39:d4:
bc:20:4d:76:77:87:9d:3b:82:81:3d:3b:87:b3:84:
8b:9c:36:59:37:5e:f4:7f:91:81:a0:81:cf:75:7e:
af:03:e7:2a:9d:1c:34:f9:53:cb:e4:82:2f:e3:f6:
2f:f4:e3:9a:e4:f0:79:33:51:45:6b:a3:92:ee:1b:
04:d6:6f:a9:c0:40:65:a0:3e:de:81:0c:6e:4b:30:
0d:55:09:39:07:58:7f:1f:1d:ef:27:85:ac:5e:34:
88:78:d4:63:a0:4f:d0:f8:cd:78:68:4d:f2:c6:ad:
92:7c:df:88:c5:fe:2f:0a:7f:7b:3c:93:7b:84:30:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:2D:41:74:48:31:F9:80:01:3C:27:0F:04:98:0A:10:7A:5F:BE
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/zsQtQXRIMfmAATwnDwSYChB6X74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.208.0/21
185.79.248.0/22
IPv6:
2a05:78c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:67:86:87:16:34:a8:70:75:ae:e1:9c:23:67:56:4a:51:8c:
e3:67:87:7e:2e:4e:a2:47:f4:7d:fa:3e:df:9b:5d:69:d3:73:
cc:9b:d8:35:ce:cb:19:10:5b:47:aa:af:0d:99:9b:05:bc:56:
fc:f5:7f:63:ea:cf:de:3a:32:5d:e9:41:0a:9f:b8:08:c1:38:
99:db:88:f4:08:65:c0:0b:70:ed:de:6e:02:c4:d1:cb:34:3f:
ee:e6:ef:2e:88:3a:9a:a7:bf:9f:a8:1a:e8:48:ea:1c:44:89:
a0:37:77:c3:ff:8e:16:65:c2:45:c3:b5:8d:78:3d:51:9e:40:
7a:2f:74:ca:57:03:c1:2f:4d:a7:da:e3:08:35:eb:60:fe:ed:
2f:e1:5c:2a:fb:00:89:8e:b7:cb:38:f5:1a:50:b5:b7:a0:8f:
b6:f6:3d:f2:26:f8:f8:98:24:c1:64:24:7d:2c:0f:79:7b:74:
aa:38:f8:ea:e1:bd:ab:a7:86:17:60:8b:80:74:44:7a:c7:01:
a2:4c:44:86:e7:94:9e:f4:19:ea:d9:23:a0:42:b5:34:fb:ae:
a6:b2:e2:6d:81:17:27:b1:16:a1:1c:70:e8:ae:33:f3:dc:d6:
47:b5:8f:5d:af:1b:45:e1:95:c0:52:8e:87:d5:5f:7b:23:b0:
b3:b9:94:4a
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ+elj6Dt0ERMYPah7MH7TzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh
Mjg5YjQwHhcNMjYwNzI2MTMyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWM0MmQ0MTc0NDgzMWY5ODAwMTNjMjcwZjA0OTgwYTEwN2E1ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uSZnUeuBudcaesQuzpzFlaU58UM
c+BMSKo20RpQk0mQBcAS6lBIhLxPaNCnBfBsptPPGl9sNGq/k3WrOI8BtLXfGc3Q
s8JJ0Gb/05uE0C3oSYK3/rndMAs0aOT0IrfUcaYJKFs2cP5zum75bh6hFrigmEyg
KpLOYcL1IzLGYGAm8j92OdS8IE12d4edO4KBPTuHs4SLnDZZN170f5GBoIHPdX6v
A+cqnRw0+VPL5IIv4/Yv9OOa5PB5M1FFa6OS7hsE1m+pwEBloD7egQxuSzANVQk5
B1h/Hx3vJ4WsXjSIeNRjoE/Q+M14aE3yxq2SfN+Ixf4vCn97PJN7hDCElwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFM7ELUF0SDH5gAE8Jw8EmAoQel++MB8GA1UdIwQY
MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1
LTAwZmUwNWMyYmZjNi8xL3pzUXRRWFJJTWZtQUFUd25Ed1NZQ2hCNlg3NC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1LTAwZmUwNWMyYmZj
Ni8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAMul9AD
BAK5T/gwDQQCAAIwBwMFAyoFeMAwDQYJKoZIhvcNAQELBQADggEBADlnhocWNKhw
da7hnCNnVkpRjONnh34uTqJH9H36Pt+bXWnTc8yb2DXOyxkQW0eqrw2ZmwW8Vvz1
f2Pqz946Ml3pQQqfuAjBOJnbiPQIZcALcO3ebgLE0cs0P+7m7y6IOpqnv5+oGuhI
6hxEiaA3d8P/jhZlwkXDtY14PVGeQHovdMpXA8EvTafa4wg162D+7S/hXCr7AImO
t8s49RpQtbegj7b2PfIm+PiYJMFkJH0sD3l7dKo4+Orhvaunhhdgi4B0RHrHAaJM
RIbnlJ70GerZI6BCtTT7rqay4m2BFyexFqEccOiuM/Pc1ke1j12vG0XhlcBSjofV
X3sjsLO5lEo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:22 2026 by rpki-client