Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/ZQC4nFbuilGWlajQvrZa4A30c4w.roa
File: ZQC4nFbuilGWlajQvrZa4A30c4w.roa (raw, json)
Hash identifier: 0llZ1MmgltxEgZO+1Q95nsmuakNJpLm9qN73g2AwDqo=
Subject key identifier: 65:00:B8:9C:56:EE:8A:51:96:95:A8:D0:BE:B6:5A:E0:0D:F4:73:8C
Certificate issuer: /CN=803f61ebe557059db44d495705ac86453399549a
Certificate serial: 01A0C3C5FC2474EBB295E2925D34058F1DCE
Authority key identifier: 80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/ZQC4nFbuilGWlajQvrZa4A30c4w.roa
Signing time: Mon 21 Sep 2026 11:42:07 +0000
ROA not before: Mon 21 Sep 2026 11:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212220
IP address blocks: 195.190.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:c5:fc:24:74:eb:b2:95:e2:92:5d:34:05:8f:1d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f61ebe557059db44d495705ac86453399549a
Validity
Not Before: Sep 21 11:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6500b89c56ee8a519695a8d0beb65ae00df4738c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:bb:6f:89:46:e8:35:af:2e:08:a2:b9:6a:
9c:0d:24:bf:34:6a:1e:92:55:f6:76:eb:e0:76:d1:
56:88:88:22:fe:17:cc:57:e2:66:36:86:6b:4b:92:
1e:af:65:c4:d2:d5:b5:c2:25:88:6a:ba:f4:a6:1e:
7b:bf:38:ce:8e:64:10:95:e5:76:45:1d:18:56:c7:
37:21:73:75:90:71:4e:f1:66:9f:1b:9d:3a:49:ce:
c4:3d:6d:a8:cf:d1:86:89:c6:a6:d3:01:c2:4e:5b:
cc:04:28:5d:c2:62:aa:08:14:73:9f:27:9e:39:70:
a9:bb:a8:a7:90:58:d4:2a:a8:be:b4:9a:2e:9e:db:
42:2d:eb:3a:2e:60:95:09:26:a4:20:ff:c8:3e:9b:
46:98:be:9e:08:0a:c7:b5:7d:64:f1:58:20:91:98:
2b:a6:05:0f:ba:cf:40:57:6d:47:21:cd:5a:ee:0b:
ec:aa:7e:44:e3:4b:be:ee:a3:f0:fd:98:60:df:4b:
5c:77:0a:7e:43:ac:50:0c:3f:b8:9a:68:43:32:72:
79:27:be:cb:e3:bf:62:70:67:07:94:bf:a6:3d:ea:
9e:30:73:bc:7f:14:57:64:40:f1:f9:d7:48:50:0d:
b3:46:97:37:1d:6c:17:04:75:6c:0c:2e:d4:90:70:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:B8:9C:56:EE:8A:51:96:95:A8:D0:BE:B6:5A:E0:0D:F4:73:8C
X509v3 Authority Key Identifier:
keyid:80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/ZQC4nFbuilGWlajQvrZa4A30c4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:57:69:49:43:3a:b9:dc:78:67:ad:d0:9e:51:24:e1:25:25:
a5:f7:b1:97:09:0d:2c:94:db:eb:2d:8b:69:75:c7:92:22:ea:
72:00:cf:c9:69:8a:a6:e4:0c:0a:0e:97:85:57:db:d8:af:52:
cb:c9:08:47:00:25:53:46:96:f0:f6:e2:7e:b2:ef:fc:76:38:
cb:9e:da:61:bd:89:fb:28:1a:82:9d:44:cb:29:46:b9:83:76:
2f:7b:75:fa:0b:18:84:1b:68:83:f7:a9:cc:5e:bc:28:0f:f7:
f2:b3:09:4a:02:98:d3:5f:55:ed:fc:7d:e3:ec:59:de:b0:16:
65:93:29:4e:f7:7c:a5:df:8f:ab:df:a8:65:c5:ff:94:fa:9e:
4e:e9:da:6e:be:be:64:31:1b:fb:2e:62:65:5b:23:8f:74:05:
a4:ee:25:27:41:a3:01:0e:75:ca:28:98:47:ed:a5:ac:99:02:
7f:fe:80:b9:c7:f9:40:4b:24:28:22:69:31:70:3f:6e:1c:19:
61:aa:93:6b:f7:4b:de:84:84:88:a4:0d:c1:46:52:65:d8:19:
78:a6:4b:a6:36:70:c3:ab:c6:0d:bf:f4:94:41:0a:98:df:f3:
f2:22:93:b6:01:e3:58:44:9b:cf:8b:e4:01:80:00:22:02:dc:
50:1c:e7:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDDxfwkdOuyleKSXTQFjx3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwM2Y2MWViZTU1NzA1OWRiNDRkNDk1NzA1YWM4NjQ1MzM5
OTU0OWEwHhcNMjYwOTIxMTE0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTAwYjg5YzU2ZWU4YTUxOTY5NWE4ZDBiZWI2NWFlMDBkZjQ3MzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc+7b4lG6DWvLgiiuWqcDSS/NGoe
klX2duvgdtFWiIgi/hfMV+JmNoZrS5Ier2XE0tW1wiWIarr0ph57vzjOjmQQleV2
RR0YVsc3IXN1kHFO8WafG506Sc7EPW2oz9GGicam0wHCTlvMBChdwmKqCBRznyee
OXCpu6inkFjUKqi+tJounttCLes6LmCVCSakIP/IPptGmL6eCArHtX1k8VggkZgr
pgUPus9AV21HIc1a7gvsqn5E40u+7qPw/Zhg30tcdwp+Q6xQDD+4mmhDMnJ5J77L
479icGcHlL+mPeqeMHO8fxRXZEDx+ddIUA2zRpc3HWwXBHVsDC7UkHD0awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUAuJxW7opRlpWo0L62WuAN9HOMMB8GA1UdIwQY
MBaAFIA/YevlVwWdtE1JVwWshkUzmVSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ODRiNWYtZWZmYy00NWM1LWIxZWIt
NzAzZTc2MDNkOWY5LzEvWlFDNG5GYnVpbEdXbGFqUXZyWmE0QTMwYzR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85ODRiNWYtZWZmYy00NWM1LWIxZWItNzAzZTc2MDNkOWY5
LzEvZ0Q5aDYtVlhCWjIwVFVsWEJheUdSVE9aVkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw74TMA0G
CSqGSIb3DQEBCwUAA4IBAQAvV2lJQzq53HhnrdCeUSThJSWl97GXCQ0slNvrLYtp
dceSIupyAM/JaYqm5AwKDpeFV9vYr1LLyQhHACVTRpbw9uJ+su/8djjLntphvYn7
KBqCnUTLKUa5g3Yve3X6CxiEG2iD96nMXrwoD/fyswlKApjTX1Xt/H3j7FnesBZl
kylO93yl34+r36hlxf+U+p5O6dpuvr5kMRv7LmJlWyOPdAWk7iUnQaMBDnXKKJhH
7aWsmQJ//oC5x/lASyQoImkxcD9uHBlhqpNr90vehISIpA3BRlJl2Bl4pkumNnDD
q8YNv/SUQQqY3/PyIpO2AeNYRJvPi+QBgAAiAtxQHOec
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:46:05 2026 by rpki-client