Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa
File: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (raw, json)
Hash identifier: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=
Subject key identifier: 66:CE:EF:D4:D0:F1:EB:78:56:68:FD:2B:A8:2F:49:80:DE:2F:8A:E4
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019F41B5C72B989A3CE548477AB2C8C1FCB6
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa
Signing time: Wed 08 Jul 2026 12:30:59 +0000
ROA not before: Wed 08 Jul 2026 12:30:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51346
IP address blocks: 89.104.121.0/24 maxlen: 24
91.218.160.0/22 maxlen: 22
91.218.160.0/24 maxlen: 24
91.218.161.0/24 maxlen: 24
91.218.162.0/24 maxlen: 24
91.218.163.0/24 maxlen: 24
185.177.0.0/22 maxlen: 24
185.177.0.0/24 maxlen: 24
185.177.1.0/24 maxlen: 24
185.177.2.0/24 maxlen: 24
185.177.3.0/24 maxlen: 24
2a0a:2980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:b5:c7:2b:98:9a:3c:e5:48:47:7a:b2:c8:c1:fc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Jul 8 12:30:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66ceefd4d0f1eb785668fd2ba82f4980de2f8ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:f5:b1:47:83:39:6e:37:17:81:57:90:ac:
7a:8c:ce:ca:b3:11:11:49:88:65:6b:39:1f:d0:58:
19:34:27:eb:8e:71:24:81:1f:50:07:75:b9:0e:a3:
85:6a:3d:fc:41:2d:fe:ef:7d:af:ba:2f:a2:44:11:
e8:52:88:be:0b:36:04:ef:fc:06:1e:1e:8b:57:6a:
09:b8:75:b3:02:2a:e8:09:a9:cb:a2:0d:90:bd:88:
c9:68:d2:76:bc:4f:d7:0c:47:b6:f1:53:2e:1b:bb:
3a:ca:3c:87:2c:d6:e5:d0:13:7b:d7:f0:b6:c8:8b:
f9:eb:8f:a9:01:28:9f:5b:1b:d2:5a:7c:ef:1a:63:
76:f0:8e:27:b3:f2:b1:3f:6c:41:e0:fe:e3:b3:d2:
f8:28:95:14:6f:10:0a:90:97:e4:b9:43:77:a3:c7:
e1:8f:40:f1:cf:58:f7:a2:3e:fb:0a:d4:9d:eb:f5:
a0:42:75:7e:23:d3:ea:3d:a8:61:6c:d0:e6:18:bf:
75:c1:bc:09:21:d2:46:bd:d0:16:d7:21:e9:13:c7:
8d:e3:e6:6a:3e:ed:e8:8d:38:eb:8e:60:76:31:75:
4c:c5:be:96:4d:42:35:ff:76:10:bc:3b:25:3a:ec:
fd:0d:ae:85:16:05:76:35:a1:af:1c:a0:69:b1:2e:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:EF:D4:D0:F1:EB:78:56:68:FD:2B:A8:2F:49:80:DE:2F:8A:E4
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.121.0/24
91.218.160.0/22
185.177.0.0/22
IPv6:
2a0a:2980::/29
Signature Algorithm: sha256WithRSAEncryption
24:02:09:87:75:9f:d9:c4:16:f4:aa:49:9e:8a:0f:db:f8:34:
e3:fc:2f:d2:7d:1e:27:1c:fe:28:0f:3c:71:50:8f:e2:7a:73:
94:15:fa:11:ea:39:5c:14:c0:ba:5d:b0:b2:a6:eb:26:ff:f8:
8e:ea:1a:34:3b:03:1f:0a:21:68:63:d4:c3:39:fd:94:1d:9e:
ef:8b:99:e3:22:4d:fe:0b:50:a1:7e:bd:77:3d:7d:f5:ae:e8:
23:a8:80:f5:c7:b9:90:5e:a8:b3:8a:b0:0a:9a:47:a9:09:2a:
c0:bb:fc:9a:de:bb:54:a7:15:ff:07:f0:6f:2d:48:88:c8:db:
fa:28:e4:68:c7:02:72:46:5c:48:f7:0b:ed:e4:bb:4f:db:f9:
6c:4c:70:00:77:e3:d1:25:9c:63:3f:5a:40:26:c7:1e:63:b9:
88:ef:1f:98:e9:92:b3:3d:cc:b7:31:16:8c:00:0f:8e:b2:0b:
05:97:93:e0:34:fe:48:c8:7d:6c:b7:a3:e1:d2:80:20:ad:80:
e4:46:97:70:83:3e:2c:1e:64:d7:6e:57:d3:71:e4:2c:bf:d1:
e6:58:9b:26:3e:40:f3:d1:77:4e:bb:09:96:86:85:25:81:11:
40:c8:40:09:fc:29:8a:ed:ae:75:c9:77:71:69:2c:75:3d:c8:
45:5d:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:12 2026 by rpki-client