Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/ZV6GoQmFKWprJrgS-BNOZfIs3uw.roa
File: ZV6GoQmFKWprJrgS-BNOZfIs3uw.roa (raw, json)
Hash identifier: rskKuW0jzlm4vvgnrDF3Zit1RKOWw89g0roHWJQez7E=
Subject key identifier: 65:5E:86:A1:09:85:29:6A:6B:26:B8:12:F8:13:4E:65:F2:2C:DE:EC
Certificate issuer: /CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Certificate serial: 01A0C92D587BA200B17C19440360AAFAE58A
Authority key identifier: D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/ZV6GoQmFKWprJrgS-BNOZfIs3uw.roa
Signing time: Tue 22 Sep 2026 12:53:07 +0000
ROA not before: Tue 22 Sep 2026 12:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197754
IP address blocks: 157.173.72.0/24 maxlen: 24
2001:678:1278::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:2d:58:7b:a2:00:b1:7c:19:44:03:60:aa:fa:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Validity
Not Before: Sep 22 12:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=655e86a10985296a6b26b812f8134e65f22cdeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:69:a8:87:1d:9c:81:4e:5b:64:dd:ed:ad:
30:c4:f5:71:2c:9e:88:63:79:85:58:a8:85:79:83:
23:42:a8:c4:7a:a2:a6:96:c0:da:14:d2:d7:ca:4f:
1b:b7:ca:72:4e:77:ca:89:4e:c7:9e:79:7e:9e:ef:
51:cd:a5:43:29:4d:9f:ef:50:7b:b9:48:e9:34:b0:
90:0b:33:73:1c:f8:c2:6e:96:51:d5:f6:4e:cf:94:
e4:09:20:62:81:51:4a:e4:24:de:d1:c8:12:6d:52:
48:6c:77:aa:79:0c:08:ea:5e:98:48:30:21:ac:ac:
24:c2:19:2c:c6:cf:a4:b3:06:0f:6f:ac:45:c2:e4:
79:36:cb:c7:06:57:5f:10:7b:b2:63:29:ad:82:c5:
d8:00:dd:90:6b:bf:49:05:bc:84:ad:4d:4b:d1:7f:
19:f3:9b:10:12:3d:18:c4:d1:d2:22:79:bf:ac:6d:
50:ce:f2:5e:55:4e:18:c7:2f:59:bc:4b:ff:25:74:
e0:24:21:b1:0e:7e:2d:d4:0d:33:7f:11:19:46:04:
8e:b2:9b:6b:b1:cd:c9:04:1a:1f:76:0f:33:7c:14:
28:9e:c7:fd:41:cd:25:db:53:e5:0d:f5:9a:57:e2:
90:36:07:b7:83:a6:51:aa:57:8b:82:30:00:87:62:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5E:86:A1:09:85:29:6A:6B:26:B8:12:F8:13:4E:65:F2:2C:DE:EC
X509v3 Authority Key Identifier:
keyid:D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/ZV6GoQmFKWprJrgS-BNOZfIs3uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.72.0/24
IPv6:
2001:678:1278::/48
Signature Algorithm: sha256WithRSAEncryption
76:2a:bb:34:3b:7b:a6:5f:d8:c7:45:0f:45:88:0f:f8:db:3a:
f0:22:22:18:b9:58:f3:b3:be:9c:a4:87:86:4e:79:38:71:03:
1b:70:7b:7d:09:82:c7:8e:87:76:69:13:40:bd:fd:b2:64:c4:
f2:b0:f3:1e:c7:72:ce:68:85:0b:55:ae:63:cb:aa:07:a4:79:
ec:47:52:71:7e:71:37:bf:4d:18:ab:23:4b:8d:82:0c:74:db:
26:8d:aa:8e:ee:90:90:45:c7:02:6e:4e:3e:60:27:9a:2a:16:
44:3f:19:38:ba:b7:6b:d7:db:39:8d:05:8b:4a:64:d0:1b:d8:
8c:44:fb:79:17:91:49:b9:04:95:44:4f:44:bc:a1:d4:82:3b:
29:9f:41:ce:70:3f:bc:ec:72:29:82:a8:8b:c0:48:3b:de:56:
05:63:d8:5e:47:33:fc:8d:6c:da:70:8e:ba:77:1b:33:f8:d4:
bb:1d:a1:ac:ba:e8:fd:71:4a:18:c4:59:12:c6:9a:ff:28:d2:
11:6b:3b:8a:ee:bb:49:fa:70:b1:e8:98:5e:f0:af:ef:b5:48:
50:e6:f1:a6:e1:dd:86:a2:3e:bc:cc:8a:e4:ea:66:b1:69:87:
50:e3:68:01:07:55:a6:42:0d:f9:e6:46:7f:bc:77:de:66:1b:
35:fc:89:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaDJLVh7ogCxfBlEA2Cq+uWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDI1ZDI1NGRmZmYzZTEyYTk2NzI5MzA4NDNmYzBlOWFi
YzkwNjIwHhcNMjYwOTIyMTI1MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTVlODZhMTA5ODUyOTZhNmIyNmI4MTJmODEzNGU2NWYyMmNkZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRRpqIcdnIFOW2Td7a0wxPVxLJ6I
Y3mFWKiFeYMjQqjEeqKmlsDaFNLXyk8bt8pyTnfKiU7Hnnl+nu9RzaVDKU2f71B7
uUjpNLCQCzNzHPjCbpZR1fZOz5TkCSBigVFK5CTe0cgSbVJIbHeqeQwI6l6YSDAh
rKwkwhksxs+kswYPb6xFwuR5NsvHBldfEHuyYymtgsXYAN2Qa79JBbyErU1L0X8Z
85sQEj0YxNHSInm/rG1QzvJeVU4Yxy9ZvEv/JXTgJCGxDn4t1A0zfxEZRgSOsptr
sc3JBBofdg8zfBQonsf9Qc0l21PlDfWaV+KQNge3g6ZRqleLgjAAh2KCAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGVehqEJhSlqaya4EvgTTmXyLN7sMB8GA1UdIwQY
MBaAFNBCXSVN//PhKpZykwhD/A6avJBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVKZEpVM184LUVxbG5LVENFUDhEcHE4a0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zMTUwZWUtNzBhMy00NTY5LWE3MzIt
NTNiZTczNThlMjUyLzEvWlY2R29RbUZLV3BySnJnUy1CTk9aZklzM3V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8zMTUwZWUtNzBhMy00NTY5LWE3MzItNTNiZTczNThlMjUy
LzEvMEVKZEpVM184LUVxbG5LVENFUDhEcHE4a0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAna1IMA8E
AgACMAkDBwAgAQZ4EngwDQYJKoZIhvcNAQELBQADggEBAHYquzQ7e6Zf2MdFD0WI
D/jbOvAiIhi5WPOzvpykh4ZOeThxAxtwe30JgseOh3ZpE0C9/bJkxPKw8x7Hcs5o
hQtVrmPLqgekeexHUnF+cTe/TRirI0uNggx02yaNqo7ukJBFxwJuTj5gJ5oqFkQ/
GTi6t2vX2zmNBYtKZNAb2IxE+3kXkUm5BJVET0S8odSCOymfQc5wP7zscimCqIvA
SDveVgVj2F5HM/yNbNpwjrp3GzP41Lsdoay66P1xShjEWRLGmv8o0hFrO4ruu0n6
cLHomF7wr++1SFDm8abh3YaiPrzMiuTqZrFph1DjaAEHVaZCDfnmRn+8d95mGzX8
iVM=
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:41 2026 by rpki-client