Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZJ29NCOpH0sJCKhwxBKMVzKs3Ww.roa
File: ZJ29NCOpH0sJCKhwxBKMVzKs3Ww.roa (raw, json)
Hash identifier: 9sspYFM77eZQb1GowzYiLoirHeaYs8hoQK7PfJVnI0U=
Subject key identifier: 64:9D:BD:34:23:A9:1F:4B:09:08:A8:70:C4:12:8C:57:32:AC:DD:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A082C5ADEA3054F431959F605C23A2910F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZJ29NCOpH0sJCKhwxBKMVzKs3Ww.roa
Signing time: Tue 08 Sep 2026 20:46:28 +0000
ROA not before: Tue 08 Sep 2026 20:46:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214556
IP address blocks: 94.249.215.0/24 maxlen: 24
2a02:2fc0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:c5:ad:ea:30:54:f4:31:95:9f:60:5c:23:a2:91:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 8 20:46:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=649dbd3423a91f4b0908a870c4128c5732acdd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:40:1d:4b:62:40:2f:c9:53:5d:34:0e:5c:
80:e6:a1:99:ce:12:a7:10:72:c1:f1:68:94:65:7d:
e8:53:a3:44:11:ca:7b:b6:2b:a6:7c:ad:e7:8b:7a:
28:a1:c4:ff:d5:1f:75:7e:45:07:31:44:57:08:4f:
f9:5e:46:b8:04:b0:88:2c:81:89:f6:b8:63:53:b9:
49:5e:06:e3:17:eb:77:46:69:1b:b6:70:ad:24:85:
51:7f:cc:47:ec:74:27:54:7e:3e:05:60:d5:93:35:
93:eb:35:df:a3:12:49:de:70:b3:6e:4c:af:a5:50:
d4:6b:6a:e2:86:95:a0:41:85:44:bd:19:8e:f5:0d:
0b:23:bb:d5:17:7e:0f:70:4d:7c:cf:63:87:f6:69:
de:0b:ad:d8:6f:74:ac:96:a7:e4:72:25:83:5f:f9:
c7:b3:e5:af:02:c8:4e:94:4d:3a:fa:2f:3e:4a:8d:
f7:16:19:7a:ef:b5:c2:90:34:3a:8d:ea:e8:f3:30:
c8:7d:a3:f7:59:d1:a0:0d:bc:8c:5e:57:61:ec:78:
1c:98:eb:6d:0e:80:5e:08:76:91:7f:43:b6:65:e7:
aa:7b:94:d3:16:3f:ba:ef:a6:46:e3:14:aa:6b:ab:
71:0a:33:03:44:13:bd:2f:09:7f:0e:af:1c:fe:d5:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:BD:34:23:A9:1F:4B:09:08:A8:70:C4:12:8C:57:32:AC:DD:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZJ29NCOpH0sJCKhwxBKMVzKs3Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.215.0/24
IPv6:
2a02:2fc0:10::/48
Signature Algorithm: sha256WithRSAEncryption
7c:1a:74:97:09:31:ea:35:28:d5:27:df:94:02:c2:c5:45:b5:
d7:d0:2c:b2:08:01:40:8f:57:1c:a7:ad:34:21:ba:4c:c9:f7:
98:63:4e:71:75:33:56:6d:0e:8d:96:03:2e:1a:ad:1e:5b:75:
98:4b:75:13:8c:39:31:90:cd:a0:a6:7d:e0:5e:66:29:8e:15:
99:c5:b7:8c:1e:66:97:c5:3e:51:c9:66:47:78:3c:47:ac:d8:
81:e6:2c:c2:6a:f1:7c:e3:8f:f6:fb:7a:5c:6c:2d:53:7b:2a:
4f:fa:38:30:b6:b8:7a:70:6d:ad:6f:78:3c:9a:da:5b:ce:ad:
b9:81:6c:12:35:ea:b8:ec:97:e9:26:f1:31:c7:38:06:39:75:
b1:d8:30:4d:e1:d5:bb:d5:c2:4f:95:00:c6:55:84:a4:4d:59:
5c:70:eb:f8:e3:60:8c:c7:11:8c:6e:ca:34:5e:56:7a:43:85:
96:79:0a:7a:4c:29:48:41:0d:66:c1:6f:d5:06:60:2f:f4:a0:
c7:2a:13:62:36:7f:32:79:60:52:b9:4b:1d:eb:b2:d1:b8:1a:
a7:ed:f5:9f:50:8b:37:d1:7d:32:10:d0:4b:68:f4:19:57:1a:
6b:2e:fc:05:02:7a:1b:63:dc:05:2c:40:aa:0d:43:ea:4d:52:
c7:62:40:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaCCxa3qMFT0MZWfYFwjopEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTA4MjA0NjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDlkYmQzNDIzYTkxZjRiMDkwOGE4NzBjNDEyOGM1NzMyYWNkZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5FAHUtiQC/JU100DlyA5qGZzhKn
EHLB8WiUZX3oU6NEEcp7tiumfK3ni3ooocT/1R91fkUHMURXCE/5Xka4BLCILIGJ
9rhjU7lJXgbjF+t3RmkbtnCtJIVRf8xH7HQnVH4+BWDVkzWT6zXfoxJJ3nCzbkyv
pVDUa2rihpWgQYVEvRmO9Q0LI7vVF34PcE18z2OH9mneC63Yb3SslqfkciWDX/nH
s+WvAshOlE06+i8+So33Fhl677XCkDQ6jero8zDIfaP3WdGgDbyMXldh7HgcmOtt
DoBeCHaRf0O2Zeeqe5TTFj+676ZG4xSqa6txCjMDRBO9Lwl/Dq8c/tUDtQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGSdvTQjqR9LCQiocMQSjFcyrN1sMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWkoyOU5DT3BIMHNKQ0tod3hCS01WektzM1d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXvnXMA8E
AgACMAkDBwAqAi/AABAwDQYJKoZIhvcNAQELBQADggEBAHwadJcJMeo1KNUn35QC
wsVFtdfQLLIIAUCPVxynrTQhukzJ95hjTnF1M1ZtDo2WAy4arR5bdZhLdROMOTGQ
zaCmfeBeZimOFZnFt4weZpfFPlHJZkd4PEes2IHmLMJq8Xzjj/b7elxsLVN7Kk/6
ODC2uHpwba1veDya2lvOrbmBbBI16rjsl+km8THHOAY5dbHYME3h1bvVwk+VAMZV
hKRNWVxw6/jjYIzHEYxuyjReVnpDhZZ5CnpMKUhBDWbBb9UGYC/0oMcqE2I2fzJ5
YFK5Sx3rstG4Gqft9Z9QizfRfTIQ0Eto9BlXGmsu/AUCehtj3AUsQKoNQ+pNUsdi
QC4=
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:17 2026 by rpki-client