Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/ZgrVoB1Wz6mny7wzSyt-ncOnX-s.roa
File: ZgrVoB1Wz6mny7wzSyt-ncOnX-s.roa (raw, json)
Hash identifier: pPHicEIizRCimEFs1IEl8Pv0RkfkVNW4hyUZC1BFM4w=
Subject key identifier: 66:0A:D5:A0:1D:56:CF:A9:A7:CB:BC:33:4B:2B:7E:9D:C3:A7:5F:EB
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 019B7BA3F040A712312483B1B595B3FF5564
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/ZgrVoB1Wz6mny7wzSyt-ncOnX-s.roa
Signing time: Thu 01 Jan 2026 22:18:19 +0000
ROA not before: Thu 01 Jan 2026 22:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206952
IP address blocks: 185.168.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:f0:40:a7:12:31:24:83:b1:b5:95:b3:ff:55:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Jan 1 22:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=660ad5a01d56cfa9a7cbbc334b2b7e9dc3a75feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:d2:76:52:27:61:a3:01:50:81:d0:67:31:
c9:79:60:b8:f8:ec:28:ed:47:e6:a4:4d:a9:62:05:
2b:53:61:21:d2:53:1a:cc:50:46:f3:e6:56:fc:de:
84:09:84:02:28:e3:54:1c:26:b3:38:a0:ab:f9:9c:
b6:f7:ed:52:3d:8e:45:1f:c7:cc:b2:46:00:71:9f:
fb:7e:14:0e:49:55:75:15:60:f0:a9:73:49:42:10:
71:92:2a:75:18:07:74:f0:5d:85:b8:1e:5e:da:ea:
fe:85:da:1a:09:ac:fd:db:b9:c4:31:85:f2:58:1a:
23:82:89:85:09:e4:cd:fc:a3:8c:57:a6:2a:e7:89:
c9:40:1d:c5:47:d5:25:e9:fa:10:34:84:22:c9:b4:
16:f3:96:d0:b9:da:10:68:0e:1b:ce:d0:ac:4b:73:
30:b5:2f:1d:7f:cd:42:53:e5:65:26:7e:f3:94:b9:
10:74:14:7c:37:de:c6:5e:dc:79:09:50:07:98:6a:
47:52:f7:cc:6d:ab:d6:28:3a:34:33:97:ac:6f:4b:
f8:26:ba:b4:69:c2:03:da:2b:54:4a:90:cc:24:5b:
7a:cb:47:a5:49:27:df:33:d0:2f:6e:08:95:eb:a4:
42:f5:e2:51:38:0d:f0:87:2f:42:8c:a8:61:db:46:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0A:D5:A0:1D:56:CF:A9:A7:CB:BC:33:4B:2B:7E:9D:C3:A7:5F:EB
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/ZgrVoB1Wz6mny7wzSyt-ncOnX-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.76.0/22
Signature Algorithm: sha256WithRSAEncryption
51:7e:b5:c3:26:25:d5:eb:c6:7b:0b:5a:5d:00:a1:8b:ed:51:
da:3f:df:fb:3b:60:89:43:a0:77:5a:45:f9:bf:99:da:92:07:
2f:01:3b:ea:79:c3:44:87:66:b4:d0:22:3e:27:f7:bd:24:73:
45:79:6c:68:a7:1e:05:54:19:6a:6a:8a:16:7e:db:ad:80:f0:
fc:cd:ae:06:00:95:17:a2:70:38:6e:b4:17:74:bf:c1:bc:d6:
63:34:69:f9:78:74:51:2c:4d:6c:2b:5f:ec:46:6c:f5:be:b2:
4b:8a:98:55:67:2c:89:4b:03:b7:d7:85:72:4a:01:46:b5:27:
48:1a:f3:c3:30:d6:88:a8:70:33:f0:0d:10:fe:96:c4:23:0a:
52:7c:87:4c:9a:1a:1d:54:2f:50:0c:e2:d4:4d:bb:06:c5:f1:
cd:61:47:6d:2e:00:d7:5f:e0:4a:50:08:5b:dc:e3:f5:3e:6d:
95:28:62:69:af:13:04:09:64:a9:45:d5:21:3d:c2:ee:85:a9:
c2:a1:7d:5a:6b:27:02:ed:36:39:45:c5:08:d4:d7:0a:6d:68:
0c:c1:bb:91:38:42:3e:ca:76:85:95:7a:57:82:da:7b:e2:90:
83:51:be:87:04:be:4b:a2:30:37:68:2e:73:26:98:4c:c6:34:
4a:e9:47:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o/BApxIxJIOxtZWz/1VkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZGFjZjcwMzY3ZDBhYzMwNWE1YWMxYWJiYWYyMzk4YjI2
ZDkzNTUwHhcNMjYwMTAxMjIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjBhZDVhMDFkNTZjZmE5YTdjYmJjMzM0YjJiN2U5ZGMzYTc1ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKbSdlInYaMBUIHQZzHJeWC4+Owo
7UfmpE2pYgUrU2Eh0lMazFBG8+ZW/N6ECYQCKONUHCazOKCr+Zy29+1SPY5FH8fM
skYAcZ/7fhQOSVV1FWDwqXNJQhBxkip1GAd08F2FuB5e2ur+hdoaCaz927nEMYXy
WBojgomFCeTN/KOMV6Yq54nJQB3FR9Ul6foQNIQiybQW85bQudoQaA4bztCsS3Mw
tS8df81CU+VlJn7zlLkQdBR8N97GXtx5CVAHmGpHUvfMbavWKDo0M5esb0v4Jrq0
acID2itUSpDMJFt6y0elSSffM9AvbgiV66RC9eJROA3why9CjKhh20ZaawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYK1aAdVs+pp8u8M0srfp3Dp1/rMB8GA1UdIwQY
MBaAFDXaz3A2fQrDBaWsGruvI5iybZNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAt
ZmQzZmQxODAzMjk0LzEvWmdyVm9CMVd6Nm1ueTd3elN5dC1uY09uWC1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAtZmQzZmQxODAzMjk0
LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuahMMA0G
CSqGSIb3DQEBCwUAA4IBAQBRfrXDJiXV68Z7C1pdAKGL7VHaP9/7O2CJQ6B3WkX5
v5nakgcvATvqecNEh2a00CI+J/e9JHNFeWxopx4FVBlqaooWftutgPD8za4GAJUX
onA4brQXdL/BvNZjNGn5eHRRLE1sK1/sRmz1vrJLiphVZyyJSwO314VySgFGtSdI
GvPDMNaIqHAz8A0Q/pbEIwpSfIdMmhodVC9QDOLUTbsGxfHNYUdtLgDXX+BKUAhb
3OP1Pm2VKGJprxMECWSpRdUhPcLuhanCoX1aaycC7TY5RcUI1NcKbWgMwbuROEI+
ynaFlXpXgtp74pCDUb6HBL5LojA3aC5zJphMxjRK6UeO
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:29:16 2026 by rpki-client