Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zusixtc4OANiDx2c538qsa2eyoM.roa
File: zusixtc4OANiDx2c538qsa2eyoM.roa (raw, json)
Hash identifier: J9zM/ue0UpsSywYPNXByLI6WEDsB9iz88MY0Z9y9HZE=
Subject key identifier: CE:EB:22:C6:D7:38:38:03:62:0F:1D:9C:E7:7F:2A:B1:AD:9E:CA:83
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D692624A25D2A257803B60938F303E019
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zusixtc4OANiDx2c538qsa2eyoM.roa
Signing time: Tue 07 Apr 2026 18:13:20 +0000
ROA not before: Tue 07 Apr 2026 18:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213323
IP address blocks: 5.180.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:26:24:a2:5d:2a:25:78:03:b6:09:38:f3:03:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 7 18:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceeb22c6d7383803620f1d9ce77f2ab1ad9eca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:f3:39:fc:f2:01:46:45:91:5f:9b:22:05:
b0:47:71:fc:ed:8f:b9:1b:ac:f2:10:33:36:4d:da:
f0:81:08:c6:3a:e7:8a:95:78:5f:a0:d6:17:d2:2f:
d0:4a:6a:56:23:a8:21:5a:18:59:ea:d0:7a:0a:5e:
87:45:f4:01:8b:cc:af:f3:13:e3:dd:90:f7:fa:db:
ce:fc:74:08:dd:e4:86:5e:f4:30:f6:92:87:22:97:
5d:2d:fc:a9:c0:26:41:49:c2:91:ed:fc:79:2f:dc:
ce:7d:e3:ea:0b:fd:7b:25:90:ac:a0:0a:5e:bf:a8:
bc:40:fa:c2:46:e8:b4:f6:86:02:7f:f3:36:16:68:
47:0e:07:c6:35:6d:0b:59:6b:06:b3:21:96:d2:c7:
0e:e7:02:ea:87:f6:de:78:4e:c0:05:7c:de:8a:dd:
97:c9:12:b5:cd:cb:b7:4d:e4:2b:3d:d4:d1:e7:64:
7d:54:13:e8:53:ba:76:9e:91:ae:60:fb:f1:c1:50:
4b:d3:58:8c:a2:d3:eb:9e:e3:a5:dd:77:38:f9:af:
11:07:d3:95:e1:d1:2d:68:31:7b:2f:09:8b:89:d4:
1d:f9:1f:0b:fa:8b:20:d3:42:ba:8b:9e:8a:b6:00:
b0:7b:ac:60:c8:7f:e0:5f:42:d3:9b:d7:54:9a:b4:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EB:22:C6:D7:38:38:03:62:0F:1D:9C:E7:7F:2A:B1:AD:9E:CA:83
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zusixtc4OANiDx2c538qsa2eyoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:71:0f:df:87:75:e4:7c:87:35:30:0c:30:f5:61:df:6a:63:
f6:dd:53:6a:29:6c:36:f8:64:68:fb:c5:2a:f0:20:c9:83:e4:
f8:98:ba:da:eb:83:ef:0d:76:aa:a6:a7:1d:18:aa:47:9c:cc:
fe:4e:48:27:bc:18:7a:16:15:3e:0b:c6:fe:20:3c:40:39:7d:
cf:b4:a3:3f:3e:95:03:71:ef:66:08:7e:c6:5e:e7:f9:d7:8b:
09:59:15:63:24:98:12:94:5c:7d:e5:e5:84:4e:2d:f3:15:b8:
8a:0b:73:b1:04:7a:c1:f5:fb:0b:6a:75:d6:d4:de:76:6f:96:
6b:57:8a:cf:54:30:77:10:99:6d:62:68:37:33:46:e6:f5:59:
54:10:19:c1:11:45:76:5e:87:d7:1f:ac:7a:01:6a:52:5d:13:
83:0e:3a:e1:e6:13:e6:9c:f8:10:6f:18:d9:55:1e:08:b8:23:
d1:a4:5e:81:fc:80:e0:a0:1f:86:14:8c:68:e7:38:38:73:e3:
82:c0:2c:db:69:5b:14:00:af:32:b8:46:3e:e3:70:e1:b3:2f:
05:cc:dc:d2:84:54:18:5a:6c:85:f6:1b:7b:72:a5:7d:c2:2b:
27:59:a3:63:21:1a:2a:e1:46:78:39:ca:f6:fe:86:e6:8c:49:
9c:44:83:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1pJiSiXSoleAO2CTjzA+AZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwNDA3MTgxMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWViMjJjNmQ3MzgzODAzNjIwZjFkOWNlNzdmMmFiMWFkOWVjYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOzzOfzyAUZFkV+bIgWwR3H87Y+5
G6zyEDM2TdrwgQjGOueKlXhfoNYX0i/QSmpWI6ghWhhZ6tB6Cl6HRfQBi8yv8xPj
3ZD3+tvO/HQI3eSGXvQw9pKHIpddLfypwCZBScKR7fx5L9zOfePqC/17JZCsoApe
v6i8QPrCRui09oYCf/M2FmhHDgfGNW0LWWsGsyGW0scO5wLqh/beeE7ABXzeit2X
yRK1zcu3TeQrPdTR52R9VBPoU7p2npGuYPvxwVBL01iMotPrnuOl3Xc4+a8RB9OV
4dEtaDF7LwmLidQd+R8L+osg00K6i56KtgCwe6xgyH/gX0LTm9dUmrQ+gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7rIsbXODgDYg8dnOd/KrGtnsqDMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvenVzaXh0YzRPQU5pRHgyYzUzOHFzYTJleW9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbQhMA0G
CSqGSIb3DQEBCwUAA4IBAQA/cQ/fh3XkfIc1MAww9WHfamP23VNqKWw2+GRo+8Uq
8CDJg+T4mLra64PvDXaqpqcdGKpHnMz+TkgnvBh6FhU+C8b+IDxAOX3PtKM/PpUD
ce9mCH7GXuf514sJWRVjJJgSlFx95eWETi3zFbiKC3OxBHrB9fsLanXW1N52b5Zr
V4rPVDB3EJltYmg3M0bm9VlUEBnBEUV2XofXH6x6AWpSXRODDjrh5hPmnPgQbxjZ
VR4IuCPRpF6B/IDgoB+GFIxo5zg4c+OCwCzbaVsUAK8yuEY+43Dhsy8FzNzShFQY
WmyF9ht7cqV9wisnWaNjIRoq4UZ4Ocr2/obmjEmcRINl
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:58 2026 by rpki-client