Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Zpz3Xb2sYj2rqtyI9OR2EBCxkU4.roa
File: Zpz3Xb2sYj2rqtyI9OR2EBCxkU4.roa (raw, json)
Hash identifier: Y14OZAVDGlBj9HoOBL6NeodaRQR1bHjZjQ44Nbxgfz0=
Subject key identifier: 66:9C:F7:5D:BD:AC:62:3D:AB:AA:DC:88:F4:E4:76:10:10:B1:91:4E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0EBBBE6DE80FAD3C1AA79B258D6D39611
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Zpz3Xb2sYj2rqtyI9OR2EBCxkU4.roa
Signing time: Tue 29 Sep 2026 05:55:55 +0000
ROA not before: Tue 29 Sep 2026 05:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 92.71.160.0/19 maxlen: 19
194.122.83.0/24 maxlen: 24
212.189.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:bb:e6:de:80:fa:d3:c1:aa:79:b2:58:d6:d3:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 29 05:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=669cf75dbdac623dabaadc88f4e4761010b1914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:a0:74:ac:ef:ca:95:e9:d1:8a:8d:22:f9:
53:6d:84:e7:49:b2:b2:a0:a0:a8:84:3f:9e:3f:6b:
f7:62:c4:8b:da:a9:8b:23:ef:af:74:df:0d:e8:07:
47:8b:f5:f8:e9:9a:aa:e8:dd:e0:ce:c6:ba:f0:da:
2c:6e:56:41:d2:24:0b:dd:71:3f:06:59:ae:46:68:
5f:66:53:90:2a:ca:4f:f0:ba:04:2b:f1:1f:b4:a8:
55:6b:98:38:60:0c:3e:0f:dd:67:8f:4d:44:33:c4:
88:1f:41:35:9f:56:60:76:e8:1b:e5:13:ee:6a:e1:
bb:3d:23:c0:08:04:88:7b:4a:c4:3f:99:b6:70:18:
33:15:2e:85:22:e7:f9:5d:36:4f:67:6e:62:4b:03:
a5:f4:4d:58:66:6d:e5:39:5f:08:d1:a1:17:6d:ec:
28:ea:fc:5b:9c:3f:a1:0c:87:32:49:48:9c:64:26:
5b:05:f4:42:0b:48:58:df:8e:32:54:73:aa:0b:e7:
41:8a:7d:64:9a:52:f8:73:bc:93:1f:9d:b5:66:a5:
24:e8:e6:cb:d9:7f:38:67:40:15:0d:ff:77:e4:f8:
40:04:83:28:21:38:cf:0d:49:ff:f8:82:e5:f3:36:
49:b9:f6:07:7d:34:00:8f:53:34:29:91:60:eb:b0:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9C:F7:5D:BD:AC:62:3D:AB:AA:DC:88:F4:E4:76:10:10:B1:91:4E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Zpz3Xb2sYj2rqtyI9OR2EBCxkU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.160.0/19
194.122.83.0/24
212.189.26.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9e:2e:64:89:23:81:d9:48:9e:34:49:73:ef:aa:47:9c:6c:
c2:7b:cb:eb:65:6d:09:6d:36:00:c5:57:8e:06:02:40:36:75:
e2:32:7d:97:01:76:13:c0:91:4f:ee:83:eb:7c:7b:6c:34:1a:
20:05:3f:9c:9a:27:17:9d:8c:50:80:b6:62:19:bc:a9:67:c3:
48:f7:b9:c5:e5:d9:56:c3:93:78:ee:7f:34:73:1a:0d:4c:11:
bb:ad:ba:f0:35:eb:6e:01:00:3e:e7:e9:8f:33:dd:ce:08:26:
b8:a9:bb:57:3b:2f:4f:40:f4:15:ec:ed:6d:08:91:85:8e:d6:
fd:99:02:19:55:f9:9b:0a:ef:b7:82:96:ef:a9:d7:4c:24:de:
11:08:2b:ca:a2:a6:3d:66:56:be:e7:b6:ae:ea:21:f4:41:9d:
aa:b4:64:57:ad:ad:ea:31:b4:a2:f2:1b:7f:0c:a9:7d:2b:00:
3b:13:f1:ad:be:71:ea:fe:a7:b1:a0:2f:77:7e:20:d9:67:32:
bf:c9:b2:2e:ae:eb:f9:d7:25:99:8d:03:0f:bd:36:e3:97:53:
93:9a:0a:b3:29:25:54:3a:d0:cd:50:63:ae:6b:de:14:9e:fc:
98:3c:1e:dc:94:1c:da:3f:c4:3b:fe:49:78:33:2c:87:23:6d:
9f:bb:cd:f4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDru+begPrTwap5sljW05YRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTI5MDU1NTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjljZjc1ZGJkYWM2MjNkYWJhYWRjODhmNGU0NzYxMDEwYjE5MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZSgdKzvypXp0YqNIvlTbYTnSbKy
oKCohD+eP2v3YsSL2qmLI++vdN8N6AdHi/X46Zqq6N3gzsa68NosblZB0iQL3XE/
BlmuRmhfZlOQKspP8LoEK/EftKhVa5g4YAw+D91nj01EM8SIH0E1n1Zgdugb5RPu
auG7PSPACASIe0rEP5m2cBgzFS6FIuf5XTZPZ25iSwOl9E1YZm3lOV8I0aEXbewo
6vxbnD+hDIcySUicZCZbBfRCC0hY344yVHOqC+dBin1kmlL4c7yTH521ZqUk6ObL
2X84Z0AVDf935PhABIMoITjPDUn/+ILl8zZJufYHfTQAj1M0KZFg67D5QwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGac9129rGI9q6rciPTkdhAQsZFOMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvWnB6M1hiMnNZajJycXR5STlPUjJFQkN4a1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFXEegAwQA
wnpTAwQA1L0aMA0GCSqGSIb3DQEBCwUAA4IBAQCVni5kiSOB2UieNElz76pHnGzC
e8vrZW0JbTYAxVeOBgJANnXiMn2XAXYTwJFP7oPrfHtsNBogBT+cmicXnYxQgLZi
GbypZ8NI97nF5dlWw5N47n80cxoNTBG7rbrwNetuAQA+5+mPM93OCCa4qbtXOy9P
QPQV7O1tCJGFjtb9mQIZVfmbCu+3gpbvqddMJN4RCCvKoqY9Zla+57au6iH0QZ2q
tGRXra3qMbSi8ht/DKl9KwA7E/GtvnHq/qexoC93fiDZZzK/ybIuruv51yWZjQMP
vTbjl1OTmgqzKSVUOtDNUGOua94UnvyYPB7clBzaP8Q7/kl4MyyHI22fu830
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:16:53 2026 by rpki-client