Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa
File: Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa (raw, json)
Hash identifier: ZpFZAg5yMmp7pt8GhVXTe2VRCnPpM+w4LENgMbW56sU=
Subject key identifier: 67:88:0E:CC:18:F2:C6:18:0E:CB:3A:7C:4C:AF:D3:CB:E3:56:C5:BF
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019B79110F60D6E1886FAD98B4A2C019B294
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa
Signing time: Thu 01 Jan 2026 10:18:39 +0000
ROA not before: Thu 01 Jan 2026 10:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203263
IP address blocks: 185.168.124.0/23 maxlen: 23
185.168.126.0/24 maxlen: 24
217.65.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:0f:60:d6:e1:88:6f:ad:98:b4:a2:c0:19:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jan 1 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67880ecc18f2c6180ecb3a7c4cafd3cbe356c5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:f5:9c:49:64:09:11:87:bb:18:30:50:14:
1e:09:b5:94:1d:c1:29:5c:d9:3e:df:3b:9c:e5:b0:
bc:55:e0:32:af:4b:98:a2:d0:d1:e9:2d:37:09:6a:
1f:b7:c2:9f:e6:59:5b:a1:f4:3d:e2:cb:0d:82:a9:
9e:1c:0a:94:69:6c:ee:0d:49:76:e2:9e:34:5e:41:
a0:ea:df:c4:27:c4:08:2b:38:ce:71:d7:b7:db:14:
4e:0e:6a:10:76:67:b2:a5:23:88:36:56:2e:86:ff:
9c:8f:5f:10:86:e5:24:3f:87:2f:85:a7:2e:6e:2b:
2d:17:2e:44:fc:81:2e:ef:18:5e:3d:1a:72:2e:65:
59:61:a5:43:36:88:06:e4:d4:72:87:31:37:27:d6:
cf:ff:d4:51:dc:4e:1a:aa:66:6a:9a:eb:0e:dd:a7:
e0:39:1d:f5:7e:42:98:2b:76:15:d6:bc:91:96:4e:
af:e5:e4:10:33:42:d9:38:38:f3:02:e9:48:db:7a:
c4:89:d5:bc:29:0e:90:f9:f7:0b:90:93:e2:17:80:
ea:3c:3a:f7:45:4b:45:7f:23:d1:ba:c5:5d:bd:84:
2f:12:a6:5f:91:f8:d6:95:67:da:0f:98:11:21:aa:
46:1c:85:da:56:9e:a7:18:e6:02:d6:dc:1b:ae:a8:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:0E:CC:18:F2:C6:18:0E:CB:3A:7C:4C:AF:D3:CB:E3:56:C5:BF
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/Z4gOzBjyxhgOyzp8TK_Ty-NWxb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.124.0-185.168.126.255
217.65.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b3:62:d5:ea:3f:78:5a:a4:92:03:71:10:ab:a5:cf:35:c1:
42:65:64:f8:14:94:ca:7f:e0:10:15:b0:dd:46:b5:f9:68:e8:
cc:6c:a3:d4:5a:e1:ba:69:3c:3c:74:ae:42:77:ba:99:31:2a:
b1:98:72:4f:a8:60:7f:f0:f1:8a:e9:ca:60:3e:dc:2a:29:72:
5f:29:d0:61:f4:6d:f1:ed:4d:11:0f:c4:16:fa:8a:2a:05:52:
c4:b8:7a:20:d7:35:30:5e:92:58:46:f9:44:cd:8c:0b:05:26:
53:1e:50:b9:dc:7b:cd:ee:4b:d1:0f:1e:fd:f1:1e:7f:c9:b0:
04:88:11:00:24:56:47:f1:f2:65:ed:f9:86:a3:c3:7e:0a:27:
47:d8:59:b5:57:cc:a5:59:d6:3c:74:32:ec:d2:df:5b:30:c9:
35:db:74:ea:36:50:77:6c:ae:c9:b3:d4:83:be:d6:0a:02:9d:
e6:71:32:09:00:dc:b2:7a:b2:cc:3f:a2:b1:e5:42:9d:e2:8d:
e8:60:cf:af:1e:70:f9:4f:c1:29:f1:9c:aa:18:38:81:8b:df:
c2:54:89:7b:50:55:e0:46:35:e9:b9:60:0b:b0:a9:e7:1f:b3:
0c:d1:11:c2:a5:d9:ba:a8:c2:5f:c2:c5:25:6a:bb:f8:0b:bd:
c7:31:7e:e3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZt5EQ9g1uGIb62YtKLAGbKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm
Y2Y1YjUwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Nzg4MGVjYzE4ZjJjNjE4MGVjYjNhN2M0Y2FmZDNjYmUzNTZjNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd/1nElkCRGHuxgwUBQeCbWUHcEp
XNk+3zuc5bC8VeAyr0uYotDR6S03CWoft8Kf5llbofQ94ssNgqmeHAqUaWzuDUl2
4p40XkGg6t/EJ8QIKzjOcde32xRODmoQdmeypSOINlYuhv+cj18QhuUkP4cvhacu
bistFy5E/IEu7xhePRpyLmVZYaVDNogG5NRyhzE3J9bP/9RR3E4aqmZqmusO3afg
OR31fkKYK3YV1ryRlk6v5eQQM0LZODjzAulI23rEidW8KQ6Q+fcLkJPiF4DqPDr3
RUtFfyPRusVdvYQvEqZfkfjWlWfaD5gRIapGHIXaVp6nGOYC1twbrqgaTwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGeIDswY8sYYDss6fEyv08vjVsW/MB8GA1UdIwQY
MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt
MjZhMGI4ZGVmMGMzLzEvWjRnT3pCanl4aGdPeXpwOFRLX1R5LU5XeGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz
LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5qHwD
BAC5qH4DBADZQUcwDQYJKoZIhvcNAQELBQADggEBAF6zYtXqP3hapJIDcRCrpc81
wUJlZPgUlMp/4BAVsN1Gtflo6Mxso9Ra4bppPDx0rkJ3upkxKrGYck+oYH/w8Yrp
ymA+3Copcl8p0GH0bfHtTREPxBb6iioFUsS4eiDXNTBeklhG+UTNjAsFJlMeULnc
e83uS9EPHv3xHn/JsASIEQAkVkfx8mXt+Yajw34KJ0fYWbVXzKVZ1jx0MuzS31sw
yTXbdOo2UHdsrsmz1IO+1goCneZxMgkA3LJ6ssw/orHlQp3ijehgz68ecPlPwSnx
nKoYOIGL38JUiXtQVeBGNem5YAuwqecfswzREcKl2bqowl/CxSVqu/gLvccxfuM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:22 2026 by rpki-client