Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/KzNcXU8khdJ-4K2lsgPpphY3Yk8.roa
File: KzNcXU8khdJ-4K2lsgPpphY3Yk8.roa (raw, json)
Hash identifier: RMrEUtAVveqzCRImZquFrYnaV+fD0aLrh30j7yV4Smo=
Subject key identifier: 2B:33:5C:5D:4F:24:85:D2:7E:E0:AD:A5:B2:03:E9:A6:16:37:62:4F
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019E302D50F58D30DF67B64048F945B184B3
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/KzNcXU8khdJ-4K2lsgPpphY3Yk8.roa
Signing time: Sat 16 May 2026 09:45:36 +0000
ROA not before: Sat 16 May 2026 09:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209723
IP address blocks: 5.183.62.0/23 maxlen: 23
85.209.4.0/23 maxlen: 23
147.78.224.0/23 maxlen: 23
2a09:ac80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:2d:50:f5:8d:30:df:67:b6:40:48:f9:45:b1:84:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: May 16 09:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b335c5d4f2485d27ee0ada5b203e9a61637624f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:05:f0:b9:8b:27:a0:7f:8a:5f:0e:6c:3f:
7b:87:48:17:16:90:6e:14:3d:b6:60:68:05:7d:89:
b3:eb:7f:13:65:40:69:9a:02:9a:47:cf:25:e8:84:
80:1f:bf:d1:75:b7:6d:0f:7d:8c:f7:40:a7:41:f4:
3d:ad:55:a0:4e:23:fd:b0:24:c6:b4:03:15:3f:44:
e7:19:c5:46:49:c4:87:64:5a:3d:32:17:f9:97:9a:
d4:59:94:8e:97:ba:5d:de:ff:f5:3c:0c:4e:59:24:
ac:44:be:21:e5:6c:99:d8:97:3f:d6:a8:5a:c3:0f:
0e:64:37:8c:d3:84:c2:f5:43:54:af:9e:8c:76:0f:
ee:4c:e4:84:48:d0:11:75:ae:17:d0:ba:6e:70:16:
db:38:b4:03:e0:1a:0b:5f:e0:a5:a9:09:c2:86:19:
56:2c:bf:d4:73:05:d1:75:6a:fc:43:a0:fd:ff:27:
44:28:94:3a:79:8d:79:50:5b:bb:30:2a:1d:5c:92:
b7:a7:ce:6b:5e:cd:fc:f9:96:0b:64:27:6b:3a:13:
db:0a:49:38:3c:3a:ff:3a:2a:af:b0:b2:5d:f8:94:
44:25:d2:75:19:bb:ef:af:49:3b:e3:03:8f:9b:97:
5b:d4:70:37:4d:51:62:c7:ab:19:98:3a:a4:c5:e7:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:5C:5D:4F:24:85:D2:7E:E0:AD:A5:B2:03:E9:A6:16:37:62:4F
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/KzNcXU8khdJ-4K2lsgPpphY3Yk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.62.0/23
85.209.4.0/23
147.78.224.0/23
IPv6:
2a09:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
81:b1:90:d8:c8:e0:66:81:11:cc:31:d4:87:9d:f9:c7:d0:35:
7d:ad:bb:cb:33:18:6b:2e:16:0d:6b:1c:2b:f7:9d:75:f7:25:
81:86:9b:e3:4e:e8:ca:4c:b2:ce:b7:db:03:b1:59:11:ab:e9:
f7:75:c1:c7:c0:73:d8:d2:aa:9f:c5:73:60:ba:3c:2c:d0:aa:
46:5e:f4:47:b2:2f:a0:95:27:4d:0b:94:89:0c:c0:f4:6e:42:
c7:68:a6:18:9b:81:eb:94:44:b6:63:be:e0:29:f7:b1:7a:5d:
32:f0:9a:10:a3:0f:5e:5b:b5:a0:c9:bd:81:00:ca:11:13:db:
c4:2b:f1:df:72:2b:28:cf:21:48:31:65:9f:48:2e:fd:ad:c3:
fd:80:0d:89:64:66:82:41:22:c4:92:ca:91:f0:8c:67:c9:20:
a8:ab:32:85:2a:62:30:b1:c6:8c:bf:c9:89:42:01:ab:11:74:
1c:60:bd:03:7b:22:d4:fc:5b:b7:b7:ba:5a:ad:c8:01:32:95:
02:d7:ca:58:10:12:3c:45:36:8e:9f:74:cf:d9:2d:6a:35:49:
2d:43:dd:1e:25:cf:5a:55:27:fa:6e:87:3f:8e:99:1a:f6:ab:
74:39:57:69:a6:a2:4a:6c:2c:b8:cf:e5:bf:4e:92:a7:36:67:
7d:8e:b1:8c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ4wLVD1jTDfZ7ZASPlFsYSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjYwNTE2MDk0NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjMzNWM1ZDRmMjQ4NWQyN2VlMGFkYTViMjAzZTlhNjE2Mzc2MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31UF8LmLJ6B/il8ObD97h0gXFpBu
FD22YGgFfYmz638TZUBpmgKaR88l6ISAH7/RdbdtD32M90CnQfQ9rVWgTiP9sCTG
tAMVP0TnGcVGScSHZFo9Mhf5l5rUWZSOl7pd3v/1PAxOWSSsRL4h5WyZ2Jc/1qha
ww8OZDeM04TC9UNUr56Mdg/uTOSESNARda4X0LpucBbbOLQD4BoLX+ClqQnChhlW
LL/UcwXRdWr8Q6D9/ydEKJQ6eY15UFu7MCodXJK3p85rXs38+ZYLZCdrOhPbCkk4
PDr/OiqvsLJd+JREJdJ1Gbvvr0k74wOPm5db1HA3TVFix6sZmDqkxed+kwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFCszXF1PJIXSfuCtpbID6aYWN2JPMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvS3pOY1hVOGtoZEotNEsybHNnUHBwaFkzWWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBBbc+AwQB
VdEEAwQBk07gMA0EAgACMAcDBQMqCayAMA0GCSqGSIb3DQEBCwUAA4IBAQCBsZDY
yOBmgRHMMdSHnfnH0DV9rbvLMxhrLhYNaxwr95119yWBhpvjTujKTLLOt9sDsVkR
q+n3dcHHwHPY0qqfxXNgujws0KpGXvRHsi+glSdNC5SJDMD0bkLHaKYYm4HrlES2
Y77gKfexel0y8JoQow9eW7Wgyb2BAMoRE9vEK/HfcisozyFIMWWfSC79rcP9gA2J
ZGaCQSLEksqR8IxnySCoqzKFKmIwscaMv8mJQgGrEXQcYL0DeyLU/Fu3t7parcgB
MpUC18pYEBI8RTaOn3TP2S1qNUktQ90eJc9aVSf6boc/jpka9qt0OVdppqJKbCy4
z+W/TpKnNmd9jrGM
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:54 2026 by rpki-client