Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/ZinyZPpVeHGSMZyj0JENYkN07C0.roa
File: ZinyZPpVeHGSMZyj0JENYkN07C0.roa (raw, json)
Hash identifier: AOp+ZUksRu2AG543bLwd+Phap+cocLV8HayDdD5LWeA=
Subject key identifier: 66:29:F2:64:FA:55:78:71:92:31:9C:A3:D0:91:0D:62:43:74:EC:2D
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 01A0E8452B501A30C9D8BCB72F93FC031D0E
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/ZinyZPpVeHGSMZyj0JENYkN07C0.roa
Signing time: Mon 28 Sep 2026 13:47:22 +0000
ROA not before: Mon 28 Sep 2026 13:47:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209510
IP address blocks: 152.89.172.0/23 maxlen: 23
152.89.174.0/23 maxlen: 23
2a09:35c0::/32 maxlen: 32
2a09:35c0:100::/40 maxlen: 40
2a09:35c0:200::/40 maxlen: 40
2a09:35c0:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:45:2b:50:1a:30:c9:d8:bc:b7:2f:93:fc:03:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Sep 28 13:47:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6629f264fa55787192319ca3d0910d624374ec2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:be:b8:c0:2a:49:a6:9b:79:07:61:26:0f:
80:2c:fd:f9:4d:86:a7:23:09:79:7b:3a:1a:64:54:
59:f3:3f:f9:6f:f7:fd:0d:2d:ec:84:d9:a1:4f:bb:
bf:3c:c1:73:5d:17:21:32:4d:a9:7b:cc:2e:ff:eb:
6a:f4:93:0d:74:02:33:c5:f4:4a:91:17:f6:aa:79:
77:c0:99:6a:ce:03:40:59:21:9c:bb:7a:ed:32:62:
9d:8b:a9:fb:04:59:e1:e0:8d:58:1f:2d:81:d1:f8:
19:e1:64:dd:3d:d6:70:26:b2:e0:4d:2a:05:90:96:
bc:77:8c:f8:7a:79:c1:57:1f:44:ec:77:f6:2f:aa:
85:ab:c0:4e:ba:9b:83:af:30:f3:4f:65:eb:9d:81:
64:95:2c:e7:16:ea:7b:09:a9:d3:0f:7f:c8:d8:b0:
73:2f:6d:c3:28:ab:b8:f5:50:d7:5c:6f:8f:6f:85:
4b:00:6a:fd:d0:3e:4d:f3:b0:f8:a3:31:36:f5:de:
e8:d0:65:49:ac:27:3a:fa:64:bf:3a:ae:12:9a:92:
fb:5c:2a:cf:e3:df:4e:8f:70:7a:48:fe:55:38:1a:
f9:9c:3c:15:e4:2f:05:74:ae:89:54:43:1c:29:e5:
70:0a:26:eb:4d:d6:dd:29:16:b1:d6:44:f7:8c:bf:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:F2:64:FA:55:78:71:92:31:9C:A3:D0:91:0D:62:43:74:EC:2D
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/ZinyZPpVeHGSMZyj0JENYkN07C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.172.0/22
IPv6:
2a09:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:3c:ec:5d:59:b3:c7:2d:5f:42:21:26:83:cf:1f:26:f8:4c:
a1:0e:99:c3:f8:a9:c6:5e:6a:32:fd:39:b8:27:31:00:c2:47:
56:cc:db:56:dd:38:6b:cd:25:ca:f9:6c:e9:56:d2:a8:0d:04:
3b:05:c6:ce:4d:48:48:47:c8:a4:49:39:4d:72:87:a9:e1:11:
6d:6a:17:35:99:6d:04:9c:72:42:b7:a2:44:37:87:dd:c8:c4:
24:13:44:14:a9:ca:67:a9:7b:0c:43:aa:b9:42:7b:0d:31:18:
65:19:c4:ab:2f:a9:f3:74:3d:45:bd:97:14:21:43:26:c1:48:
b2:07:d9:a8:c1:a1:14:d1:50:d9:d4:6c:ea:77:a9:7f:6d:4b:
b3:89:cc:4f:11:fb:ac:5a:54:71:c2:3d:76:89:47:c8:9b:ab:
e0:e5:ea:cf:94:8c:2f:09:45:42:db:19:e2:77:72:7d:78:53:
92:96:42:c2:2d:a3:47:2a:b1:70:d5:42:ee:47:af:cd:ec:5d:
f4:03:39:21:2b:24:80:71:d6:90:53:2c:78:b7:c1:00:10:02:
87:34:63:ae:58:6b:b3:a9:6c:17:21:52:0b:79:8f:47:d5:93:
8f:48:52:3f:43:37:72:ed:87:2d:e7:0c:36:4b:1a:4d:0e:74:
d2:e2:58:0c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaDoRStQGjDJ2Ly3L5P8Ax0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjYwOTI4MTM0NzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjI5ZjI2NGZhNTU3ODcxOTIzMTljYTNkMDkxMGQ2MjQzNzRlYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13S+uMAqSaabeQdhJg+ALP35TYan
Iwl5ezoaZFRZ8z/5b/f9DS3shNmhT7u/PMFzXRchMk2pe8wu/+tq9JMNdAIzxfRK
kRf2qnl3wJlqzgNAWSGcu3rtMmKdi6n7BFnh4I1YHy2B0fgZ4WTdPdZwJrLgTSoF
kJa8d4z4ennBVx9E7Hf2L6qFq8BOupuDrzDzT2XrnYFklSznFup7CanTD3/I2LBz
L23DKKu49VDXXG+Pb4VLAGr90D5N87D4ozE29d7o0GVJrCc6+mS/Oq4SmpL7XCrP
499Oj3B6SP5VOBr5nDwV5C8FdK6JVEMcKeVwCibrTdbdKRax1kT3jL+BAQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGYp8mT6VXhxkjGco9CRDWJDdOwtMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvWmlueVpQcFZlSEdTTVp5ajBKRU5Za04wN0MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCmFmsMA0E
AgACMAcDBQAqCTXAMA0GCSqGSIb3DQEBCwUAA4IBAQBrPOxdWbPHLV9CISaDzx8m
+EyhDpnD+KnGXmoy/Tm4JzEAwkdWzNtW3ThrzSXK+WzpVtKoDQQ7BcbOTUhIR8ik
STlNcoep4RFtahc1mW0EnHJCt6JEN4fdyMQkE0QUqcpnqXsMQ6q5QnsNMRhlGcSr
L6nzdD1FvZcUIUMmwUiyB9mowaEU0VDZ1Gzqd6l/bUuzicxPEfusWlRxwj12iUfI
m6vg5erPlIwvCUVC2xnid3J9eFOSlkLCLaNHKrFw1ULuR6/N7F30AzkhKySAcdaQ
Uyx4t8EAEAKHNGOuWGuzqWwXIVILeY9H1ZOPSFI/Qzdy7Yct5ww2SxpNDnTS4lgM
-----END CERTIFICATE-----
Generated at Mon Oct 12 13:36:57 2026 by rpki-client