Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/ZMVggC6fnvi5QFfWX49Stx3sedU.roa
File: ZMVggC6fnvi5QFfWX49Stx3sedU.roa (raw, json)
Hash identifier: 2N+/qv1zdtOS6klaheqYn3TqcaLDARy95PnzfT7lVJg=
Subject key identifier: 64:C5:60:80:2E:9F:9E:F8:B9:40:57:D6:5F:8F:52:B7:1D:EC:79:D5
Certificate issuer: /CN=458f985b2a46434942b9b2d91cf12870752e46fb
Certificate serial: 019F23682AB1908770081A680A8CEADFBAC9
Authority key identifier: 45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/ZMVggC6fnvi5QFfWX49Stx3sedU.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39257
IP address blocks: 78.31.200.0/22 maxlen: 22
87.238.184.0/21 maxlen: 21
87.238.187.0/24 maxlen: 24
87.238.190.0/24 maxlen: 24
91.212.106.0/24 maxlen: 24
91.214.127.0/24 maxlen: 24
185.26.200.0/22 maxlen: 22
2a02:8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:b1:90:87:70:08:1a:68:0a:8c:ea:df:ba:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458f985b2a46434942b9b2d91cf12870752e46fb
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64c560802e9f9ef8b94057d65f8f52b71dec79d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:18:a3:67:32:31:a5:d3:16:0d:8e:9b:c4:
53:ea:f3:3d:a0:a4:2a:6d:5d:84:6c:a2:83:02:62:
55:90:55:f3:fb:ef:74:7c:90:d0:0b:ce:a0:fd:9d:
79:66:1f:e0:b1:60:b7:e5:e4:2e:c4:06:98:9d:bf:
d4:0e:16:dc:1f:a4:fc:fc:fc:48:d7:ee:3b:68:1e:
87:f9:e5:ca:99:d6:2f:51:10:4b:f7:f5:87:a7:d1:
7b:35:6e:98:99:be:45:59:1c:20:d8:fc:68:73:a6:
ec:ad:a8:7b:10:a8:a9:f0:d2:51:f2:58:4b:a7:0c:
2e:16:2b:0f:32:f2:fb:ad:ba:f6:fa:cc:f5:9a:0b:
b6:26:64:93:40:f7:5f:08:cb:21:3d:7c:3c:39:5d:
25:ef:49:a2:67:14:07:f0:0f:0f:e4:19:25:29:2e:
43:4d:10:2c:4e:9c:26:6a:2f:5f:3f:24:ab:48:2a:
ee:b3:a0:35:4c:95:af:91:d2:5c:19:57:01:f1:ef:
77:90:18:13:68:99:97:1c:98:a9:19:f6:54:c6:1c:
ed:2f:d1:0b:88:68:29:b1:bd:09:5e:03:9b:8d:6a:
50:c2:57:92:8e:ce:61:29:ff:e8:d9:ed:22:2e:37:
25:90:08:41:e0:ea:81:77:5b:81:23:ed:fa:22:c1:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C5:60:80:2E:9F:9E:F8:B9:40:57:D6:5F:8F:52:B7:1D:EC:79:D5
X509v3 Authority Key Identifier:
keyid:45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/ZMVggC6fnvi5QFfWX49Stx3sedU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.200.0/22
87.238.184.0/21
91.212.106.0/24
91.214.127.0/24
185.26.200.0/22
IPv6:
2a02:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
10:49:74:04:c0:0d:16:37:1f:4a:94:24:c1:0e:66:77:b6:8d:
5c:0d:c5:9f:54:b7:50:dc:12:8a:1b:6d:2b:f1:25:94:35:ab:
b6:49:e6:4b:09:08:e2:6e:6d:b4:80:87:c1:93:05:13:64:a9:
54:be:13:ea:15:d0:c3:61:96:66:4b:32:b1:37:ac:2c:3a:b5:
9f:0d:53:45:45:07:4e:de:6e:df:8a:f6:b2:75:eb:2e:bf:68:
e8:1b:10:a2:a6:0e:44:f5:70:06:b0:18:6f:93:4d:f0:8a:4c:
9b:c4:2e:af:3a:1c:aa:88:0e:58:79:22:77:d8:07:8d:a6:d8:
f6:22:aa:61:5a:78:90:e8:b1:72:07:1d:cd:c3:5f:74:c4:26:
88:8b:5c:07:72:46:47:2a:56:60:32:45:ba:8c:37:e5:3a:46:
9f:1a:48:b0:f8:c5:f6:da:83:6a:f9:0e:75:9a:eb:72:50:27:
78:19:a4:ee:03:4b:e0:8b:1c:c7:aa:58:c6:8e:e5:cf:02:3b:
08:90:cd:eb:1b:5d:93:3d:59:47:0f:d8:d8:59:e9:fc:52:e1:
77:45:cc:8d:b2:8f:0d:80:f6:51:75:1b:6c:1f:53:13:99:44:
92:55:64:5c:a9:90:95:0c:8f:f5:cf:42:0e:f4:ad:e8:ca:66:
e6:4c:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:09 2026 by rpki-client