Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Z8U18VjP2jheYsmpFvIL4ZhX5ag.roa
File: Z8U18VjP2jheYsmpFvIL4ZhX5ag.roa (raw, json)
Hash identifier: EIS4Fsu5aDAQ/C0gb0S3uY6FJjVXAoKB3sfNrEgpbFo=
Subject key identifier: 67:C5:35:F1:58:CF:DA:38:5E:62:C9:A9:16:F2:0B:E1:98:57:E5:A8
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01A0B04A32F5F0E7E3D771125961597A4EC4
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Z8U18VjP2jheYsmpFvIL4ZhX5ag.roa
Signing time: Thu 17 Sep 2026 16:54:07 +0000
ROA not before: Thu 17 Sep 2026 16:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 178.236.32.0/24 maxlen: 24
185.49.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:4a:32:f5:f0:e7:e3:d7:71:12:59:61:59:7a:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Sep 17 16:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67c535f158cfda385e62c9a916f20be19857e5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:f4:c8:02:99:c4:b6:b2:20:5b:cc:b8:e4:
f7:ac:86:d5:0d:3e:4b:1d:0f:0f:3b:f2:16:db:7c:
db:50:1d:d3:9e:39:e8:26:df:25:66:57:67:02:79:
ec:81:91:26:84:99:ab:37:7c:8e:1d:2d:7d:d3:a3:
db:07:40:17:68:21:78:77:82:6c:5b:8f:b9:fc:9e:
27:02:94:34:c9:30:13:e9:ca:fa:d1:c5:99:a2:51:
19:b6:e7:0b:50:78:b1:52:dd:9d:3d:9c:e9:24:71:
e1:ec:a5:24:39:13:64:88:77:f0:58:4d:00:b3:59:
9c:05:76:c9:62:9d:be:f6:eb:5b:aa:0b:31:c0:7f:
de:d1:33:70:db:98:8b:bc:14:d9:91:fb:9d:7a:61:
e2:88:fe:fd:0c:6f:87:8a:56:7f:7c:a0:98:bc:17:
94:f8:b6:ff:92:2c:d0:13:29:ec:60:ee:2b:32:ce:
76:e1:6a:21:0e:e3:ae:89:fe:1e:c7:35:20:23:b6:
fd:ee:5b:03:cc:88:66:50:9b:b4:2b:c8:7d:29:39:
85:3a:d6:73:7e:6c:b8:c4:e0:a9:fb:7b:a7:94:7c:
fc:e6:91:54:95:4a:81:90:73:30:40:37:e5:f7:b4:
4b:89:65:dc:b6:43:87:19:52:82:a5:4f:bb:e5:6a:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:35:F1:58:CF:DA:38:5E:62:C9:A9:16:F2:0B:E1:98:57:E5:A8
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Z8U18VjP2jheYsmpFvIL4ZhX5ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.32.0/24
185.49.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:02:0c:80:81:68:19:d8:5d:ba:c7:74:a7:f2:da:75:7f:77:
f2:35:ce:6f:ea:99:81:9c:8d:d8:73:fe:a2:6f:f1:8e:71:d2:
43:26:d4:9d:04:0b:62:c2:25:ed:ba:3c:c2:80:ff:22:c7:d1:
2f:5b:f3:6e:42:ef:0b:af:ca:52:0c:ad:75:1b:f8:aa:40:c1:
1e:65:a1:31:db:5b:4b:26:21:76:c1:52:68:77:df:8a:34:4a:
60:16:d7:c9:91:6f:ae:47:f7:0d:1b:2a:9b:c0:f2:93:5e:6c:
10:23:65:e1:5d:07:10:01:ac:24:72:f7:b3:4a:d9:e7:f1:9a:
0e:c1:e0:67:f6:8b:6c:e8:5e:92:52:70:0e:ac:82:13:e7:52:
de:82:98:c8:cb:51:0a:6d:94:e3:5c:98:5a:a5:a0:1a:4c:0c:
5d:95:32:56:9b:5c:9e:a1:4e:1a:02:73:c3:b5:8d:05:48:0c:
c7:fe:36:c8:f5:f9:8c:ec:f1:a2:a1:c0:5b:aa:d8:87:01:5c:
7c:24:6e:eb:63:b4:fc:8e:f6:dd:33:cd:06:fd:80:d0:bf:d1:
26:91:73:53:03:72:18:dd:cb:9f:7d:eb:4d:5e:1f:b0:21:5f:
d8:cc:7a:70:8e:a6:2a:e9:d3:13:05:56:18:10:cc:02:a7:53:
ba:7f:9e:6f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaCwSjL18Ofj13ESWWFZek7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjYwOTE3MTY1NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2M1MzVmMTU4Y2ZkYTM4NWU2MmM5YTkxNmYyMGJlMTk4NTdlNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKH0yAKZxLayIFvMuOT3rIbVDT5L
HQ8PO/IW23zbUB3TnjnoJt8lZldnAnnsgZEmhJmrN3yOHS1906PbB0AXaCF4d4Js
W4+5/J4nApQ0yTAT6cr60cWZolEZtucLUHixUt2dPZzpJHHh7KUkORNkiHfwWE0A
s1mcBXbJYp2+9utbqgsxwH/e0TNw25iLvBTZkfudemHiiP79DG+HilZ/fKCYvBeU
+Lb/kizQEynsYO4rMs524WohDuOuif4exzUgI7b97lsDzIhmUJu0K8h9KTmFOtZz
fmy4xOCp+3unlHz85pFUlUqBkHMwQDfl97RLiWXctkOHGVKCpU+75WpCYwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGfFNfFYz9o4XmLJqRbyC+GYV+WoMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL1o4VTE4VmpQMmpoZVlzbXBGdklMNFpoWDVhZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACy7CAD
BAC5MWgwDQYJKoZIhvcNAQELBQADggEBAFwCDICBaBnYXbrHdKfy2nV/d/I1zm/q
mYGcjdhz/qJv8Y5x0kMm1J0EC2LCJe26PMKA/yLH0S9b825C7wuvylIMrXUb+KpA
wR5loTHbW0smIXbBUmh334o0SmAW18mRb65H9w0bKpvA8pNebBAjZeFdBxABrCRy
97NK2efxmg7B4Gf2i2zoXpJScA6sghPnUt6CmMjLUQptlONcmFqloBpMDF2VMlab
XJ6hThoCc8O1jQVIDMf+Nsj1+Yzs8aKhwFuq2IcBXHwkbutjtPyO9t0zzQb9gNC/
0SaRc1MDchjdy599601eH7AhX9jMenCOpirp0xMFVhgQzAKnU7p/nm8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:36 2026 by rpki-client