Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/ZVwy0ZfFb9sOAQVJkv6jGWwOzQA.roa
File: ZVwy0ZfFb9sOAQVJkv6jGWwOzQA.roa (raw, json)
Hash identifier: aaY2/fswTLKyyajK0wJbHpj/eHxX7OB2bAMISHRWGRw=
Subject key identifier: 65:5C:32:D1:97:C5:6F:DB:0E:01:05:49:92:FE:A3:19:6C:0E:CD:00
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 019F236883C6595E6F097B8AF415A843E76C
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/ZVwy0ZfFb9sOAQVJkv6jGWwOzQA.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29695
IP address blocks: 5.152.136.0/21 maxlen: 21
5.172.182.0/24 maxlen: 24
45.14.52.0/22 maxlen: 22
79.160.0.0/15 maxlen: 24
80.203.0.0/17 maxlen: 17
81.166.0.0/15 maxlen: 24
84.234.128.0/17 maxlen: 24
89.11.128.0/17 maxlen: 17
92.220.0.0/15 maxlen: 21
109.247.0.0/16 maxlen: 21
141.0.64.0/18 maxlen: 18
213.167.96.0/19 maxlen: 19
2a01:798::/29 maxlen: 32
2a11:5100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:83:c6:59:5e:6f:09:7b:8a:f4:15:a8:43:e7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=655c32d197c56fdb0e01054992fea3196c0ecd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:65:fe:c9:18:ab:93:85:02:f9:1d:03:2e:
f2:c0:6f:92:db:b5:f0:37:cd:c7:40:10:ce:f3:ef:
cd:8e:43:52:91:48:6f:1e:77:05:3e:05:5f:b2:e6:
82:10:17:c4:41:bd:a4:68:54:03:e2:34:f9:7c:4d:
64:66:a2:06:49:e5:46:20:a3:40:22:2f:9a:64:4c:
3b:5d:96:ad:ee:bf:28:26:4d:d2:8d:b0:15:e7:92:
fb:49:df:ff:94:cf:ba:12:62:7a:1a:3c:2a:df:13:
8c:cd:d2:37:17:5d:6c:aa:f3:c0:34:33:56:08:c5:
16:17:e0:e1:a0:4f:76:71:12:a5:78:2c:a6:35:c0:
7a:5d:01:7e:8b:40:2a:8a:06:9b:e4:40:c1:eb:39:
c7:d0:0b:f5:fa:6d:ba:14:54:3e:fe:54:09:da:2c:
94:51:35:d3:50:13:5d:81:19:7a:81:b4:3b:42:67:
2b:e0:d9:71:50:c8:35:1d:2d:0a:43:2e:a8:c9:71:
74:08:bf:ac:85:45:8a:0e:b0:21:e9:29:9c:60:56:
a5:07:40:ce:53:9e:bd:6f:c8:82:8a:58:cb:64:a6:
9a:33:c8:ec:33:5f:d6:46:78:3e:bc:d3:86:40:01:
1f:ed:75:c4:54:8c:33:c5:a1:8b:91:1d:1b:dc:4f:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5C:32:D1:97:C5:6F:DB:0E:01:05:49:92:FE:A3:19:6C:0E:CD:00
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/ZVwy0ZfFb9sOAQVJkv6jGWwOzQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.136.0/21
5.172.182.0/24
45.14.52.0/22
79.160.0.0/15
80.203.0.0/17
81.166.0.0/15
84.234.128.0/17
89.11.128.0/17
92.220.0.0/15
109.247.0.0/16
141.0.64.0/18
213.167.96.0/19
IPv6:
2a01:798::/29
2a11:5100::/29
Signature Algorithm: sha256WithRSAEncryption
30:0e:f1:90:a8:f1:21:03:8b:c7:3e:42:95:bd:2a:aa:cd:57:
9a:24:07:64:2d:90:35:08:9e:86:7f:73:2a:4a:88:f7:50:dd:
13:7f:d6:0e:b3:45:68:63:43:3f:e2:0b:94:ad:45:30:aa:23:
ad:a1:55:32:13:c4:73:f6:cc:21:32:61:22:bc:f0:dd:3e:23:
37:3c:5e:40:c7:f7:8f:f4:6f:59:a3:bb:7f:4f:f8:6b:e1:94:
8b:4d:ca:7e:34:6f:7a:b5:58:42:66:14:36:0b:a5:68:da:62:
2e:ed:2d:c5:fd:7c:18:e2:c1:35:49:51:5b:1a:75:11:e2:21:
f7:b1:06:87:cf:76:2e:dd:79:f9:5a:fd:99:f0:47:ea:10:0a:
30:db:ad:62:17:29:e0:28:c3:03:c7:63:83:51:55:0c:e7:65:
b0:1d:ab:da:53:7b:a5:ef:43:12:d8:4f:1b:66:aa:fc:b1:b7:
a1:9d:ea:4d:51:7c:e9:62:77:48:19:76:7e:fd:ec:49:7e:05:
83:ba:bd:8b:1c:82:5d:89:a7:89:f3:70:87:d3:e8:e9:90:e9:
c6:c9:eb:12:a3:af:ff:60:16:c6:dc:fa:33:45:c9:38:ab:1b:
1a:14:a7:53:67:a4:27:2d:30:ee:51:26:15:cf:63:20:3c:a4:
f5:fc:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:05 2026 by rpki-client