Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZsQJSOaN1OOT-UUG51FYa1I_xL4.roa
File: ZsQJSOaN1OOT-UUG51FYa1I_xL4.roa (raw, json)
Hash identifier: ebvhaLhmgKTiPvOKK+bZy+ARcuy6m/BV6K1apwU9AoI=
Subject key identifier: 66:C4:09:48:E6:8D:D4:E3:93:F9:45:06:E7:51:58:6B:52:3F:C4:BE
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019C8F99CD1B65DB6B13E9D4E7D6470F7063
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZsQJSOaN1OOT-UUG51FYa1I_xL4.roa
Signing time: Tue 24 Feb 2026 12:22:27 +0000
ROA not before: Tue 24 Feb 2026 12:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24877
IP address blocks: 84.55.24.0/21 maxlen: 24
84.55.38.0/23 maxlen: 23
84.55.40.0/21 maxlen: 21
84.55.40.0/22 maxlen: 22
84.55.44.0/23 maxlen: 23
84.55.46.0/23 maxlen: 23
88.222.0.0/17 maxlen: 17
88.222.128.0/18 maxlen: 18
88.222.192.0/20 maxlen: 20
88.222.216.0/24 maxlen: 24
88.222.224.0/20 maxlen: 20
88.222.248.0/22 maxlen: 22
88.223.64.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.223.72.0/21 maxlen: 21
88.223.100.0/22 maxlen: 22
88.223.132.0/22 maxlen: 22
88.223.136.0/23 maxlen: 23
88.223.136.0/24 maxlen: 24
88.223.139.0/24 maxlen: 24
88.223.140.0/22 maxlen: 22
88.223.156.0/22 maxlen: 22
88.223.179.0/24 maxlen: 24
88.223.182.0/24 maxlen: 24
213.164.112.0/22 maxlen: 22
217.147.32.0/23 maxlen: 24
217.147.32.0/24 maxlen: 24
217.147.33.0/24 maxlen: 24
217.147.39.0/24 maxlen: 24
217.147.42.0/23 maxlen: 23
2a01:7c80:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:99:cd:1b:65:db:6b:13:e9:d4:e7:d6:47:0f:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Feb 24 12:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66c40948e68dd4e393f94506e751586b523fc4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:c5:14:d9:1f:5e:af:ff:ca:d8:fe:90:ae:
31:0b:84:84:47:07:d8:5b:a4:fd:95:2c:a0:b3:7d:
e0:3e:e1:b2:34:d6:55:01:29:af:97:2a:55:46:7a:
ae:d6:d0:5b:d6:c3:48:37:df:f3:1f:0b:99:2f:10:
f6:27:c5:b6:cf:a6:ca:e9:95:98:5e:47:bb:b4:52:
ae:48:82:60:4d:ce:a5:dd:40:7f:e2:57:10:2d:a8:
84:b3:58:3d:8a:48:9c:77:cd:5c:b0:5e:14:e5:65:
d8:1d:59:50:28:4c:bc:39:93:37:1f:f5:d4:e7:76:
1b:b1:f2:34:67:f9:90:3f:00:b8:b7:c3:bf:31:8e:
86:ea:b1:7f:8f:12:21:01:94:2d:15:a6:45:6e:02:
bc:ce:3c:04:c8:87:90:17:7c:30:fd:be:24:d0:5a:
71:87:f2:f8:ef:f9:4d:43:06:e7:b1:59:de:c0:dd:
89:07:cd:b5:e5:5b:3f:c2:f4:30:f3:77:20:f1:b3:
be:38:0f:9d:4e:f4:5f:ee:b5:32:59:6a:c1:b6:1f:
6d:89:1e:b0:fa:da:82:af:57:24:b4:66:20:ff:01:
85:c7:e2:18:23:03:76:a4:05:90:c5:8b:ef:f9:f5:
d3:88:ab:bb:f4:d5:c6:c5:8c:41:87:2a:43:48:b9:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:09:48:E6:8D:D4:E3:93:F9:45:06:E7:51:58:6B:52:3F:C4:BE
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZsQJSOaN1OOT-UUG51FYa1I_xL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.24.0/21
84.55.38.0-84.55.47.255
88.222.0.0-88.222.207.255
88.222.216.0/24
88.222.224.0/20
88.222.248.0/22
88.223.64.0/20
88.223.100.0/22
88.223.132.0-88.223.137.255
88.223.139.0-88.223.143.255
88.223.156.0/22
88.223.179.0/24
88.223.182.0/24
213.164.112.0/22
217.147.32.0/23
217.147.39.0/24
217.147.42.0/23
IPv6:
2a01:7c80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
13:34:84:d4:67:bd:14:f0:0a:01:bb:74:d6:4d:1f:bf:97:11:
4c:80:64:72:07:80:b7:6f:8e:36:f8:00:dc:08:9e:bb:c1:cf:
56:2f:94:26:39:b6:e3:f1:57:03:57:19:8d:13:4f:d8:12:38:
c4:d7:2d:6a:b6:01:57:21:71:e9:62:52:13:26:6d:09:8b:25:
2d:b6:28:a3:7f:78:b9:7d:e9:26:c2:32:65:7a:09:7d:55:19:
66:0e:1b:a1:d1:7f:f6:fb:c8:26:da:77:ef:ec:b8:14:df:1e:
44:1b:fe:70:9d:0c:97:c3:fd:46:9b:bc:81:47:eb:71:81:bc:
19:05:80:12:2c:1c:96:70:c1:29:ac:1d:fa:20:92:d0:b3:50:
fa:8c:08:74:fc:b6:c5:54:c9:7d:19:85:9a:41:61:b1:3c:7d:
25:2c:c4:8b:43:32:ee:6f:37:b8:56:a6:49:22:03:b4:9f:41:
0f:0e:2d:ba:2e:e2:74:87:7f:c4:17:68:c2:08:23:75:6d:b4:
b4:79:dd:c3:4c:cd:09:b1:a6:b1:01:fd:fd:e3:13:21:14:0a:
0d:9e:f3:ac:3d:0d:bd:c4:71:98:ed:f2:58:fa:d8:c8:d5:58:
3b:ae:b3:f3:6b:ea:3f:f0:a0:5d:a5:4c:fd:83:93:e9:00:90:
2b:e9:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:10 2026 by rpki-client