Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/zDoDIolFg0JKPwCIqrLrAOPkZQo.roa
File: zDoDIolFg0JKPwCIqrLrAOPkZQo.roa (raw, json)
Hash identifier: ZsTfoeAu1NxW8OmIAo7/6rJw8rErTQOyw0xE4hTfaUc=
Subject key identifier: CC:3A:03:22:89:45:83:42:4A:3F:00:88:AA:B2:EB:00:E3:E4:65:0A
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01A1B5E5F3114CB0B1F84D39CBA6CF40DB34
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/zDoDIolFg0JKPwCIqrLrAOPkZQo.roa
Signing time: Sat 07 Nov 2026 12:05:08 +0000
ROA not before: Sat 07 Nov 2026 12:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 78.136.255.0/24 maxlen: 24
80.173.144.0/24 maxlen: 24
80.173.145.0/24 maxlen: 24
80.173.146.0/24 maxlen: 24
80.173.147.0/24 maxlen: 24
194.76.192.0/24 maxlen: 24
194.76.218.0/24 maxlen: 24
194.76.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b5:e5:f3:11:4c:b0:b1:f8:4d:39:cb:a6:cf:40:db:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Nov 7 12:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc3a0322894583424a3f0088aab2eb00e3e4650a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:8c:74:29:16:47:8c:ab:72:57:f8:2a:5a:
e3:96:f9:34:c1:1b:30:56:70:b8:b4:53:bf:25:47:
6d:02:08:43:38:82:93:79:e0:fa:fe:08:78:e2:ab:
47:93:07:94:57:02:c7:db:f7:65:c2:73:33:db:fb:
13:92:9b:22:d1:e4:72:05:cd:ba:30:d6:bb:02:23:
21:ce:cb:3f:15:8f:c3:61:b0:bc:8e:47:0e:14:96:
56:9e:d1:86:6d:bd:68:f0:66:f3:eb:71:25:13:81:
bd:4e:e4:94:68:fa:12:5e:4f:a7:14:21:27:d7:af:
2a:18:b1:b8:51:07:7e:4d:20:84:54:1e:05:ef:b6:
19:6d:74:4b:31:d2:c8:91:25:09:91:71:72:a7:3d:
5b:1d:eb:ab:98:d0:1e:b7:61:59:8d:fa:a2:5d:f1:
98:0d:65:53:7e:35:d4:08:94:b8:4b:e4:25:10:26:
20:5a:93:1c:65:9d:11:6a:b2:ab:f4:81:1f:2d:32:
2f:f6:ef:75:46:6f:7f:3e:8b:8e:e3:8b:ac:b5:70:
49:f2:82:a3:dd:9e:d7:cc:f7:41:07:53:6d:ba:84:
9a:04:72:fc:4d:04:25:76:f4:b8:66:6e:ee:48:92:
a6:9f:68:73:86:f4:d2:ea:76:4d:3b:98:0f:a1:57:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:03:22:89:45:83:42:4A:3F:00:88:AA:B2:EB:00:E3:E4:65:0A
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/zDoDIolFg0JKPwCIqrLrAOPkZQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.255.0/24
80.173.144.0/22
194.76.192.0/24
194.76.218.0/24
194.76.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:59:2f:1f:91:22:94:47:4b:d7:91:50:a6:6b:20:bd:09:13:
a5:9d:60:c0:62:54:12:6d:28:78:29:1a:fe:39:a2:83:95:d9:
48:51:20:48:b2:d1:20:29:04:fb:8d:e1:7c:68:e3:fd:7c:9b:
cb:43:fa:82:44:82:59:cf:0f:08:d3:48:63:d8:3f:1a:34:84:
96:e1:e1:0d:ec:17:ed:a5:33:6a:a3:b3:67:2c:de:00:e0:23:
77:96:70:0b:4e:72:c2:3c:46:30:54:61:26:5a:92:08:92:1c:
5b:5e:77:ee:f2:df:1c:45:4b:cf:94:05:c8:65:b9:20:49:43:
76:bc:b9:78:39:fd:4d:ca:4d:aa:32:f5:39:c7:a4:20:c4:f2:
79:7b:ca:5f:85:42:5d:fa:cb:5a:d0:5a:c9:db:df:b5:03:ec:
a9:be:12:1b:be:b3:7c:5f:11:e5:e0:1a:ac:44:d4:1f:86:49:
14:8e:7b:2d:00:91:89:89:2c:00:a4:f7:a4:c1:b3:6a:cb:40:
6b:df:da:08:20:7f:d6:29:cf:45:21:0a:c0:9b:16:49:4d:1e:
02:7d:6f:dd:4a:e9:b3:de:e1:77:1a:40:c8:5b:92:ba:f9:60:
98:c8:0a:c1:7d:21:1b:17:91:59:ca:09:ed:b3:78:7f:11:ab:
5e:8b:2f:9c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaG15fMRTLCx+E05y6bPQNs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4
NTAxMTMwHhcNMjYxMTA3MTIwNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzNhMDMyMjg5NDU4MzQyNGEzZjAwODhhYWIyZWIwMGUzZTQ2NTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xmMdCkWR4yrclf4Klrjlvk0wRsw
VnC4tFO/JUdtAghDOIKTeeD6/gh44qtHkweUVwLH2/dlwnMz2/sTkpsi0eRyBc26
MNa7AiMhzss/FY/DYbC8jkcOFJZWntGGbb1o8Gbz63ElE4G9TuSUaPoSXk+nFCEn
168qGLG4UQd+TSCEVB4F77YZbXRLMdLIkSUJkXFypz1bHeurmNAet2FZjfqiXfGY
DWVTfjXUCJS4S+QlECYgWpMcZZ0RarKr9IEfLTIv9u91Rm9/PouO44ustXBJ8oKj
3Z7XzPdBB1NtuoSaBHL8TQQldvS4Zm7uSJKmn2hzhvTS6nZNO5gPoVeJnwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMw6AyKJRYNCSj8AiKqy6wDj5GUKMB8GA1UdIwQY
MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt
M2Q4YmM4OWI0NDI3LzEvekRvRElvbEZnMEpLUHdDSXFyTHJBT1BrWlFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3
LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAToj/AwQC
UK2QAwQAwkzAAwQAwkzaAwQAwkzuMA0GCSqGSIb3DQEBCwUAA4IBAQA+WS8fkSKU
R0vXkVCmayC9CROlnWDAYlQSbSh4KRr+OaKDldlIUSBIstEgKQT7jeF8aOP9fJvL
Q/qCRIJZzw8I00hj2D8aNISW4eEN7BftpTNqo7NnLN4A4CN3lnALTnLCPEYwVGEm
WpIIkhxbXnfu8t8cRUvPlAXIZbkgSUN2vLl4Of1Nyk2qMvU5x6QgxPJ5e8pfhUJd
+sta0FrJ29+1A+ypvhIbvrN8XxHl4BqsRNQfhkkUjnstAJGJiSwApPekwbNqy0Br
39oIIH/WKc9FIQrAmxZJTR4CfW/dSumz3uF3GkDIW5K6+WCYyArBfSEbF5FZygnt
s3h/Eateiy+c
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:29 2026 by rpki-client