Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/zGEr5fEqz6RkjKnWIEcvCDq3-IQ.roa
File: zGEr5fEqz6RkjKnWIEcvCDq3-IQ.roa (raw, json)
Hash identifier: kIqOQiOgFlHvbyCS3PuGJtN+6np/Op863FpjkLwsVgs=
Subject key identifier: CC:61:2B:E5:F1:2A:CF:A4:64:8C:A9:D6:20:47:2F:08:3A:B7:F8:84
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 019B7E3805ED435B8CF495D6BB1E8C29FCF5
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/zGEr5fEqz6RkjKnWIEcvCDq3-IQ.roa
Signing time: Fri 02 Jan 2026 10:19:19 +0000
ROA not before: Fri 02 Jan 2026 10:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59824
IP address blocks: 195.170.160.0/24 maxlen: 24
2001:67c:71c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:05:ed:43:5b:8c:f4:95:d6:bb:1e:8c:29:fc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Jan 2 10:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc612be5f12acfa4648ca9d620472f083ab7f884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:07:d1:4e:8f:56:2b:dc:a9:31:0f:7a:3f:
95:61:c1:62:91:32:82:d9:67:ca:bd:c6:bc:21:7b:
77:b4:fc:a0:b2:bb:42:5e:59:3e:f2:9e:a5:60:dd:
9e:83:3c:05:40:28:bd:ac:ef:fa:62:ef:d0:ea:b3:
36:b1:f0:6f:7b:f0:fd:34:ea:3b:22:be:ae:fd:bd:
d8:8f:c1:22:66:a3:24:5b:49:a3:48:4c:0d:7f:2a:
8d:46:8a:ab:a3:0d:d2:df:68:1c:9b:20:76:c1:55:
70:92:f1:64:5a:ed:ed:d9:25:4c:a4:ee:79:6f:e8:
a3:89:97:96:e0:67:e1:16:c9:ac:d2:5e:cf:28:33:
64:73:b1:2f:b6:00:eb:ca:70:de:e5:82:b2:50:39:
72:f9:91:ce:29:65:3d:5d:26:5e:fa:a4:ba:23:00:
18:18:da:4b:fa:e5:a5:7c:9a:58:91:dd:d6:b0:1e:
c1:2a:40:04:44:06:12:a4:71:55:c7:0e:3a:a2:5b:
28:0b:a8:76:be:03:9e:90:3d:62:91:55:7e:60:d2:
16:f2:bd:df:9c:3e:ce:c1:a7:83:e7:70:01:ff:60:
ed:d0:af:a5:04:03:f6:01:86:5b:67:9e:1d:30:70:
07:51:c1:3f:ab:2b:cb:bd:ff:3d:ff:39:1d:63:60:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:61:2B:E5:F1:2A:CF:A4:64:8C:A9:D6:20:47:2F:08:3A:B7:F8:84
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/zGEr5fEqz6RkjKnWIEcvCDq3-IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.160.0/24
IPv6:
2001:67c:71c::/48
Signature Algorithm: sha256WithRSAEncryption
34:c5:0f:df:7f:d7:71:df:1c:f4:96:63:f0:60:a2:43:b3:49:
8e:4f:be:c9:2e:53:1c:5c:02:4d:66:64:42:da:a7:8e:8a:d4:
37:11:33:c9:d8:52:de:55:8b:d9:b7:56:72:42:22:76:15:9d:
5f:99:93:a9:75:0f:c0:e3:66:42:c9:e1:1a:b7:a3:cd:57:d6:
09:63:80:a1:d9:f4:53:b4:6c:00:fd:2d:ac:35:e0:6d:45:a1:
18:2b:4e:42:02:e2:f4:85:6d:0e:2a:91:90:92:e6:0c:33:be:
8b:a8:06:ff:36:42:4a:a7:91:38:37:27:f9:c5:65:f8:6c:1d:
ff:7a:3d:90:5f:9c:ef:26:55:0f:04:58:b5:35:2c:0b:5f:53:
d1:b8:94:4b:e2:d8:c1:ca:9a:04:bc:8e:21:00:28:33:11:44:
ae:c2:27:1a:f4:9c:d9:f9:8d:ad:97:3d:c6:22:dc:d3:81:44:
6e:f0:ce:98:ef:ed:4c:7d:9a:a9:68:81:c5:be:75:77:5c:50:
5b:d1:0d:6f:d6:f8:a0:70:40:47:d9:22:8f:09:04:58:c7:4c:
22:ba:79:00:f7:54:4b:b0:6d:b9:87:51:ed:ea:59:f8:a1:e5:
c5:d6:61:c5:54:b8:9b:b9:ac:cb:00:02:cb:15:ea:c6:64:30:
2c:54:6b:6a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt+OAXtQ1uM9JXWux6MKfz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2FiM2I2ZGNmY2JkYWZkNzYzMTEwZjg2NmE4MjgxNWRl
YTQ0NjMwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzYxMmJlNWYxMmFjZmE0NjQ4Y2E5ZDYyMDQ3MmYwODNhYjdmODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB8H0U6PVivcqTEPej+VYcFikTKC
2WfKvca8IXt3tPygsrtCXlk+8p6lYN2egzwFQCi9rO/6Yu/Q6rM2sfBve/D9NOo7
Ir6u/b3Yj8EiZqMkW0mjSEwNfyqNRoqrow3S32gcmyB2wVVwkvFkWu3t2SVMpO55
b+ijiZeW4GfhFsms0l7PKDNkc7EvtgDrynDe5YKyUDly+ZHOKWU9XSZe+qS6IwAY
GNpL+uWlfJpYkd3WsB7BKkAERAYSpHFVxw46olsoC6h2vgOekD1ikVV+YNIW8r3f
nD7OwaeD53AB/2Dt0K+lBAP2AYZbZ54dMHAHUcE/qyvLvf89/zkdY2AGGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMxhK+XxKs+kZIyp1iBHLwg6t/iEMB8GA1UdIwQY
MBaAFIvKs7bc/L2v12MRD4ZqgoFd6kRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAt
ZjJjODkyYzJkYzdkLzEvekdFcjVmRXF6NlJraktuV0lFY3ZDRHEzLUlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAtZjJjODkyYzJkYzdk
LzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw6qgMA8E
AgACMAkDBwAgAQZ8BxwwDQYJKoZIhvcNAQELBQADggEBADTFD99/13HfHPSWY/Bg
okOzSY5PvskuUxxcAk1mZELap46K1DcRM8nYUt5Vi9m3VnJCInYVnV+Zk6l1D8Dj
ZkLJ4Rq3o81X1gljgKHZ9FO0bAD9Law14G1FoRgrTkIC4vSFbQ4qkZCS5gwzvouo
Bv82QkqnkTg3J/nFZfhsHf96PZBfnO8mVQ8EWLU1LAtfU9G4lEvi2MHKmgS8jiEA
KDMRRK7CJxr0nNn5ja2XPcYi3NOBRG7wzpjv7Ux9mqlogcW+dXdcUFvRDW/W+KBw
QEfZIo8JBFjHTCK6eQD3VEuwbbmHUe3qWfih5cXWYcVUuJu5rMsAAssV6sZkMCxU
a2o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:50 2026 by rpki-client