Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/ZqYzCDCmVsVTTCyeFflSULa4N2I.roa
File: ZqYzCDCmVsVTTCyeFflSULa4N2I.roa (raw, json)
Hash identifier: YAPh/IC/x/zKufis8zjDU8HnpS9BvHxooPhJb6s+2a4=
Subject key identifier: 66:A6:33:08:30:A6:56:C5:53:4C:2C:9E:15:F9:52:50:B6:B8:37:62
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 019F47B3F49A721A37CC07636CD41CC0D272
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/ZqYzCDCmVsVTTCyeFflSULa4N2I.roa
Signing time: Thu 09 Jul 2026 16:26:43 +0000
ROA not before: Thu 09 Jul 2026 16:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56718
IP address blocks: 5.252.36.0/22 maxlen: 24
5.252.37.0/24 maxlen: 24
5.252.38.0/23 maxlen: 24
192.166.137.0/24 maxlen: 24
192.166.138.0/23 maxlen: 23
192.166.138.0/24 maxlen: 24
2a0f:cac0:6::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:b3:f4:9a:72:1a:37:cc:07:63:6c:d4:1c:c0:d2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Jul 9 16:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66a6330830a656c5534c2c9e15f95250b6b83762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:a8:d9:83:2f:77:ae:5f:7c:a5:91:64:07:
40:18:eb:bf:e0:79:c1:0f:f5:d6:9b:ff:4c:30:f3:
72:a9:97:be:ae:91:c9:18:f1:c2:4c:49:bb:c6:a2:
29:3a:9c:bb:ce:f3:4b:64:cb:1f:2f:db:bb:30:e6:
70:87:c2:3c:68:ff:33:63:d0:d9:63:7a:34:eb:34:
10:3d:25:ff:4a:42:26:dd:28:bb:3c:6f:34:3d:c2:
33:99:8c:f5:8b:b8:63:86:8f:0d:36:a5:f9:78:06:
9e:d9:b5:67:c4:99:2a:12:15:f8:65:48:4f:12:06:
48:c1:0e:de:17:cb:c8:c3:39:d5:8c:15:4c:a7:ab:
07:b8:65:bb:dd:83:c6:2f:3f:ba:a0:65:b1:6b:fa:
d3:af:7e:89:2b:1f:6c:da:3a:cd:1d:87:87:01:46:
33:d0:91:d0:e8:15:7b:47:72:fc:81:2e:22:67:63:
fc:d9:37:d4:8f:03:78:65:a2:39:9c:d0:81:91:36:
12:9a:a0:88:7c:3c:07:67:a8:a2:b9:45:00:84:a4:
8e:27:e7:fd:39:54:c7:cd:1b:2d:1c:bc:69:ef:f3:
e3:38:15:55:66:62:c3:98:78:d6:78:76:bc:7e:08:
7a:42:45:1f:2a:f7:dc:11:67:e5:a5:b7:ca:f0:68:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A6:33:08:30:A6:56:C5:53:4C:2C:9E:15:F9:52:50:B6:B8:37:62
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/ZqYzCDCmVsVTTCyeFflSULa4N2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.36.0/22
192.166.137.0-192.166.139.255
IPv6:
2a0f:cac0:6::/47
Signature Algorithm: sha256WithRSAEncryption
92:66:c6:94:7f:90:3c:76:ba:38:67:9b:25:8e:56:52:f0:82:
ab:24:c9:0c:cd:cc:00:d3:59:f2:ec:0c:b3:2b:41:fd:f3:da:
b1:9e:8e:2c:20:4a:ac:cc:23:53:52:39:07:43:95:90:60:61:
ff:0d:6c:cb:19:af:f1:62:e6:20:62:f6:26:bf:ab:1d:a8:30:
68:77:8a:b1:e4:2d:a1:e1:54:37:6d:44:6c:98:70:e4:0b:ca:
6f:77:ec:a7:d9:30:da:3e:b9:b5:6d:1f:93:17:d9:81:09:87:
ec:93:ae:06:6f:29:a6:b9:f0:e7:fa:5f:91:67:2e:d0:21:88:
00:d3:80:05:95:ab:95:4e:12:b4:49:cd:45:11:fc:c9:a2:1c:
eb:73:13:8e:ab:58:93:45:64:ad:9d:17:93:65:f5:5f:8e:c8:
97:27:f8:4b:b2:d7:a4:ef:20:e6:25:df:2c:77:0a:16:ef:eb:
6d:69:0f:de:fd:6a:16:16:23:ca:42:a1:af:c9:31:d3:8b:2c:
ea:11:36:a2:7c:e4:30:fe:09:0c:b2:82:db:9d:57:ff:75:f8:
79:3b:48:2b:41:f1:0a:61:f5:08:ec:a5:7c:3e:77:9d:11:cf:
8c:bd:57:7d:e8:e4:2b:8d:3a:51:a5:20:b1:0f:e0:ef:da:52:
24:5f:15:5c
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZ9Hs/Sacho3zAdjbNQcwNJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Mjk3OTJlM2ZmMjFmYzM1ODI3ZjY4YTc4YzgwNTAwMTVj
NjZhNzIwHhcNMjYwNzA5MTYyNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmE2MzMwODMwYTY1NmM1NTM0YzJjOWUxNWY5NTI1MGI2YjgzNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WCo2YMvd65ffKWRZAdAGOu/4HnB
D/XWm/9MMPNyqZe+rpHJGPHCTEm7xqIpOpy7zvNLZMsfL9u7MOZwh8I8aP8zY9DZ
Y3o06zQQPSX/SkIm3Si7PG80PcIzmYz1i7hjho8NNqX5eAae2bVnxJkqEhX4ZUhP
EgZIwQ7eF8vIwznVjBVMp6sHuGW73YPGLz+6oGWxa/rTr36JKx9s2jrNHYeHAUYz
0JHQ6BV7R3L8gS4iZ2P82TfUjwN4ZaI5nNCBkTYSmqCIfDwHZ6iiuUUAhKSOJ+f9
OVTHzRstHLxp7/PjOBVVZmLDmHjWeHa8fgh6QkUfKvfcEWflpbfK8GhaVwIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFGamMwgwplbFU0wsnhX5UlC2uDdiMB8GA1UdIwQY
MBaAFIgpeS4/8h/DWCf2injIBQAVxmpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmIt
MTg4MmY0YzI3NmNkLzEvWnFZekNEQ21Wc1ZUVEN5ZUZmbFNVTGE0TjJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmItMTg4MmY0YzI3NmNk
LzEvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQCBfwkMAwD
BADApokDBALApogwDwQCAAIwCQMHASoPysAABjANBgkqhkiG9w0BAQsFAAOCAQEA
kmbGlH+QPHa6OGebJY5WUvCCqyTJDM3MANNZ8uwMsytB/fPasZ6OLCBKrMwjU1I5
B0OVkGBh/w1syxmv8WLmIGL2Jr+rHagwaHeKseQtoeFUN21EbJhw5AvKb3fsp9kw
2j65tW0fkxfZgQmH7JOuBm8pprnw5/pfkWcu0CGIANOABZWrlU4StEnNRRH8yaIc
63MTjqtYk0VkrZ0Xk2X1X47Ilyf4S7LXpO8g5iXfLHcKFu/rbWkP3v1qFhYjykKh
r8kx04ss6hE2onzkMP4JDLKC251X/3X4eTtIK0HxCmH1COylfD53nRHPjL1Xfejk
K406UaUgsQ/g79pSJF8VXA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:02 2026 by rpki-client