Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zf2Wh1rQZ7IRX_3fDiQWLa5tl0o.roa
File: Zf2Wh1rQZ7IRX_3fDiQWLa5tl0o.roa (raw, json)
Hash identifier: ryPobVLVh5CqozsYDThyU53jEbrKFJpQlL63FE51uuI=
Subject key identifier: 65:FD:96:87:5A:D0:67:B2:11:5F:FD:DF:0E:24:16:2D:AE:6D:97:4A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D8B7C2135D2FB9D8FCC614A48966471DA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zf2Wh1rQZ7IRX_3fDiQWLa5tl0o.roa
Signing time: Tue 14 Apr 2026 10:14:21 +0000
ROA not before: Tue 14 Apr 2026 10:14:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196609
IP address blocks: 5.83.156.0/24 maxlen: 24
195.110.14.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:7c:21:35:d2:fb:9d:8f:cc:61:4a:48:96:64:71:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 14 10:14:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65fd96875ad067b2115ffddf0e24162dae6d974a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:89:ad:37:12:dd:55:3a:79:c1:d6:48:bc:
fe:25:f0:9c:e0:53:76:4f:25:13:6a:11:40:d6:ee:
41:a3:94:0f:00:1d:fe:6f:14:e1:e9:24:12:dc:39:
ae:fe:98:e6:3d:2a:e0:e8:cd:ca:8c:eb:c2:c9:02:
8b:ae:a7:ce:a1:53:f4:4f:ce:36:fd:18:48:d0:84:
5b:ad:1d:a0:aa:4f:cc:6b:bc:32:ea:a8:e0:2c:4b:
15:c2:ad:2a:59:f2:61:00:e9:bd:64:71:4b:29:91:
84:4d:1b:d1:38:c5:9a:e7:ee:25:62:6b:c0:35:dc:
0a:4a:0a:5b:33:25:b1:4c:c4:35:48:21:82:4c:1a:
9c:ee:b1:e7:67:f6:f1:13:1e:e2:18:05:07:8b:3a:
95:a0:c6:82:98:05:db:07:ea:3b:66:7b:eb:34:d4:
50:8b:38:53:8c:1b:19:d5:70:45:44:5a:25:0e:6f:
5e:1d:b1:02:97:dd:67:2d:23:98:b8:85:78:6a:13:
19:f9:a1:af:c2:ec:ec:0f:fd:f7:80:3d:00:f9:55:
1d:22:33:23:d6:50:60:27:0b:a0:3c:5b:14:ec:23:
ba:fd:a4:e9:49:df:2c:c8:c1:6e:d4:30:2c:2b:b1:
e2:a3:ac:cf:45:fb:95:f0:d4:b5:d3:d5:94:a6:69:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:96:87:5A:D0:67:B2:11:5F:FD:DF:0E:24:16:2D:AE:6D:97:4A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zf2Wh1rQZ7IRX_3fDiQWLa5tl0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.156.0/24
195.110.14.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:96:ba:c1:f4:2c:2f:fb:88:58:02:c0:ef:5c:18:a7:ac:0e:
86:bd:2c:0d:99:23:bd:d9:10:ee:64:d9:9e:18:8c:5e:be:89:
b8:9c:76:ec:79:24:12:f1:2f:c3:5b:da:3f:72:ca:0b:3c:64:
c0:fb:01:7a:26:dd:c7:9e:5b:08:9a:63:9a:4c:0d:52:66:39:
e0:41:a8:f7:22:b8:a0:29:59:09:36:d4:2d:89:09:1c:57:4b:
c0:4e:31:e7:d6:79:9e:d8:16:f0:ae:27:f7:25:3e:0a:7d:4e:
73:53:2f:e8:f7:45:bb:da:c4:9f:a1:99:a0:21:44:26:c3:e9:
a7:cd:78:1f:dc:88:99:f8:8c:12:b0:a9:1b:f0:e3:45:fa:19:
ae:19:ba:53:20:1a:9a:56:d8:d1:9e:31:26:f5:1d:2b:4a:f9:
99:44:dd:b2:8a:c6:27:d7:49:ea:23:fa:3f:07:bf:84:e5:85:
09:4d:99:66:3a:95:c2:36:da:47:d7:82:81:44:32:9c:ce:3b:
9e:e7:98:cb:40:f9:92:40:09:93:5b:ed:14:53:ec:a1:d4:9c:
16:ca:fe:ea:2e:ea:5d:3c:16:6d:fc:b0:70:e5:31:31:4e:74:
a3:e2:e9:2e:7c:6a:e8:20:8b:d6:b7:6c:a8:10:86:c5:fe:af:
39:a3:52:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2LfCE10vudj8xhSkiWZHHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDE0MTAxNDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWZkOTY4NzVhZDA2N2IyMTE1ZmZkZGYwZTI0MTYyZGFlNmQ5NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowCJrTcS3VU6ecHWSLz+JfCc4FN2
TyUTahFA1u5Bo5QPAB3+bxTh6SQS3Dmu/pjmPSrg6M3KjOvCyQKLrqfOoVP0T842
/RhI0IRbrR2gqk/Ma7wy6qjgLEsVwq0qWfJhAOm9ZHFLKZGETRvROMWa5+4lYmvA
NdwKSgpbMyWxTMQ1SCGCTBqc7rHnZ/bxEx7iGAUHizqVoMaCmAXbB+o7ZnvrNNRQ
izhTjBsZ1XBFRFolDm9eHbECl91nLSOYuIV4ahMZ+aGvwuzsD/33gD0A+VUdIjMj
1lBgJwugPFsU7CO6/aTpSd8syMFu1DAsK7Hio6zPRfuV8NS109WUpmk+0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGX9loda0GeyEV/93w4kFi2ubZdKMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWmYyV2gxclFaN0lSWF8zZkRpUVdMYTV0bDBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOcAwQB
w24OMA0GCSqGSIb3DQEBCwUAA4IBAQDHlrrB9Cwv+4hYAsDvXBinrA6GvSwNmSO9
2RDuZNmeGIxevom4nHbseSQS8S/DW9o/csoLPGTA+wF6Jt3HnlsImmOaTA1SZjng
Qaj3IrigKVkJNtQtiQkcV0vATjHn1nme2Bbwrif3JT4KfU5zUy/o90W72sSfoZmg
IUQmw+mnzXgf3IiZ+IwSsKkb8ONF+hmuGbpTIBqaVtjRnjEm9R0rSvmZRN2yisYn
10nqI/o/B7+E5YUJTZlmOpXCNtpH14KBRDKczjue55jLQPmSQAmTW+0UU+yh1JwW
yv7qLupdPBZt/LBw5TExTnSj4ukufGroIIvWt2yoEIbF/q85o1I9
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:19 2026 by rpki-client