Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/zUx63CcUp4baA3iUErZSKlbOHRc.roa
File: zUx63CcUp4baA3iUErZSKlbOHRc.roa (raw, json)
Hash identifier: heT/cGlUMpfy9RzMb4tH36LoY9pPNQCq8//toyP8e8w=
Subject key identifier: CD:4C:7A:DC:27:14:A7:86:DA:03:78:94:12:B6:52:2A:56:CE:1D:17
Certificate issuer: /CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
Certificate serial: 019F2368A342E59657F4C7F16DB30FE8563D
Authority key identifier: 07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/zUx63CcUp4baA3iUErZSKlbOHRc.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12826
IP address blocks: 91.151.64.0/20 maxlen: 20
91.151.64.0/24 maxlen: 24
91.151.65.0/24 maxlen: 24
91.151.66.0/24 maxlen: 24
91.151.67.0/24 maxlen: 24
91.151.68.0/24 maxlen: 24
91.151.69.0/24 maxlen: 24
91.151.70.0/23 maxlen: 23
91.151.72.0/23 maxlen: 23
91.151.74.0/24 maxlen: 24
91.151.76.0/24 maxlen: 24
91.151.77.0/24 maxlen: 24
185.55.164.0/22 maxlen: 22
2a00:ef60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a3:42:e5:96:57:f4:c7:f1:6d:b3:0f:e8:56:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd4c7adc2714a786da03789412b6522a56ce1d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:10:d3:e5:66:09:5a:fb:24:c7:62:bc:69:
da:6f:87:55:40:e9:73:05:19:67:a8:74:e5:14:97:
16:e3:98:24:d7:eb:66:42:b3:c5:3a:01:7d:51:8d:
90:b2:6f:61:6f:28:27:c8:0f:4f:fc:8c:ae:0d:bb:
94:a6:e4:a4:52:6f:c0:26:66:86:2b:79:dc:07:8f:
9d:e7:b1:6d:dc:13:4c:1f:2f:51:b2:c7:04:1c:6d:
4c:c2:39:5f:a1:98:ee:a4:ec:92:9e:8f:a6:a2:16:
68:34:96:50:ba:fc:c1:17:de:00:0c:cc:54:3d:2b:
2d:73:fd:5f:e8:3c:38:f2:a2:16:57:89:b5:f5:a3:
e9:c7:c7:bd:eb:f7:2b:bd:25:f8:29:5f:6a:ea:14:
12:03:4b:2c:47:b2:37:b2:73:b4:78:be:95:98:d0:
c6:bc:d3:35:85:e4:7c:56:07:b1:22:6f:4b:1c:89:
fe:eb:09:2c:bd:c7:31:2b:d0:ee:e7:dd:8f:b5:e5:
da:ef:77:5b:0a:b3:77:d3:d4:ea:8c:7d:4e:c1:34:
61:b8:80:7a:77:76:db:32:77:42:4b:38:44:69:0a:
20:4a:a3:51:94:35:c3:ff:0f:16:a6:58:1d:fc:de:
bc:8d:30:cc:c8:ee:aa:86:60:1e:fe:a8:7b:af:b8:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:7A:DC:27:14:A7:86:DA:03:78:94:12:B6:52:2A:56:CE:1D:17
X509v3 Authority Key Identifier:
keyid:07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/zUx63CcUp4baA3iUErZSKlbOHRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.64.0/20
185.55.164.0/22
IPv6:
2a00:ef60::/32
Signature Algorithm: sha256WithRSAEncryption
83:81:b4:44:81:71:7b:c1:12:79:87:06:95:37:c6:20:73:d7:
71:d8:83:b2:80:e2:7f:8d:f2:be:61:0f:aa:35:6f:4a:07:4c:
48:a2:65:45:7e:93:1d:9d:5b:37:ec:6e:72:0a:53:4b:a8:12:
3d:a6:ff:01:29:3b:13:70:b5:8f:d3:77:b8:e1:6c:be:1b:83:
dd:26:75:2f:eb:7e:47:b0:82:ef:c2:88:08:16:8d:ef:c2:81:
98:8a:4a:06:5d:86:0a:de:c4:c5:cd:bc:65:2b:04:0f:d9:c7:
ba:4e:d6:7f:e4:a0:60:03:9e:96:54:c7:c1:b4:c7:d1:d9:04:
df:21:46:fe:d0:fa:ee:a1:7b:fe:e8:99:85:de:d3:9c:3f:5a:
76:78:8c:a6:44:5e:00:32:d2:01:53:38:5a:71:e3:c5:00:ea:
45:c3:4e:14:09:57:89:fe:6c:36:66:26:65:37:93:3b:e7:90:
0d:44:f1:14:83:c5:e9:9d:c5:1b:b3:cb:ca:b2:74:54:c9:21:
9c:ad:85:3e:ab:f8:40:9f:6d:9a:7d:45:d1:17:09:29:c1:79:
a6:f4:77:d4:21:b4:08:be:8c:cc:49:ea:66:84:cf:da:89:86:
76:61:d2:1b:6c:ec:cb:79:a2:5d:b1:c7:bf:e3:bf:3c:ec:cb:
5b:59:68:c3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaKNC5ZZX9MfxbbMP6FY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjI0NGI4ZWRkMTE2Y2Y1OGE2NzEzZWY3YjY2ZjVkM2I4
ZjRmZWIwHhcNMjYwNzAyMTUxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDRjN2FkYzI3MTRhNzg2ZGEwMzc4OTQxMmI2NTIyYTU2Y2UxZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOYQ0+VmCVr7JMdivGnab4dVQOlz
BRlnqHTlFJcW45gk1+tmQrPFOgF9UY2Qsm9hbygnyA9P/IyuDbuUpuSkUm/AJmaG
K3ncB4+d57Ft3BNMHy9RsscEHG1MwjlfoZjupOySno+mohZoNJZQuvzBF94ADMxU
PSstc/1f6Dw48qIWV4m19aPpx8e96/crvSX4KV9q6hQSA0ssR7I3snO0eL6VmNDG
vNM1heR8VgexIm9LHIn+6wksvccxK9Du592PteXa73dbCrN309TqjH1OwTRhuIB6
d3bbMndCSzhEaQogSqNRlDXD/w8Wplgd/N68jTDMyO6qhmAe/qh7r7jkMQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFM1MetwnFKeG2gN4lBK2UipWzh0XMB8GA1UdIwQY
MBaAFAciRLjt0RbPWKZxPve2b107j0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlKRXVPM1JGczlZcG5FLTk3WnZYVHVQVC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMt
OTVhYjgxYjc3NjkxLzEvelV4NjNDY1VwNGJhQTNpVUVyWlNLbGJPSFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMtOTVhYjgxYjc3Njkx
LzEvQnlKRXVPM1JGczlZcG5FLTk3WnZYVHVQVC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEW5dAAwQC
uTekMA0EAgACMAcDBQAqAO9gMA0GCSqGSIb3DQEBCwUAA4IBAQCDgbREgXF7wRJ5
hwaVN8Ygc9dx2IOygOJ/jfK+YQ+qNW9KB0xIomVFfpMdnVs37G5yClNLqBI9pv8B
KTsTcLWP03e44Wy+G4PdJnUv635HsILvwogIFo3vwoGYikoGXYYK3sTFzbxlKwQP
2ce6TtZ/5KBgA56WVMfBtMfR2QTfIUb+0PruoXv+6JmF3tOcP1p2eIymRF4AMtIB
UzhacePFAOpFw04UCVeJ/mw2ZiZlN5M755ANRPEUg8XpncUbs8vKsnRUySGcrYU+
q/hAn22afUXRFwkpwXmm9HfUIbQIvozMSepmhM/aiYZ2YdIbbOzLeaJdsce/4788
7MtbWWjD
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:26 2026 by rpki-client