Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zU_Id1HbXnHmAN1f5_V0yKpnd8Q.roa
File: zU_Id1HbXnHmAN1f5_V0yKpnd8Q.roa (raw, json)
Hash identifier: ZNpBvzqjhC46ywD1/Z5uBLqM20ZqEDRKcWaILPaz5qA=
Subject key identifier: CD:4F:C8:77:51:DB:5E:71:E6:00:DD:5F:E7:F5:74:C8:AA:67:77:C4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D51872D850AF07A579458CC7E1F04544A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zU_Id1HbXnHmAN1f5_V0yKpnd8Q.roa
Signing time: Fri 03 Apr 2026 04:08:26 +0000
ROA not before: Fri 03 Apr 2026 04:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210537
IP address blocks: 94.249.200.0/24 maxlen: 24
217.69.167.0/24 maxlen: 24
2a02:2fc0:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:51:87:2d:85:0a:f0:7a:57:94:58:cc:7e:1f:04:54:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 3 04:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd4fc87751db5e71e600dd5fe7f574c8aa6777c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:7a:d0:35:6d:52:c7:af:f4:f5:49:b9:a4:
49:66:1d:02:5b:2a:13:8c:e6:cb:a3:09:ab:fa:eb:
7f:a7:83:86:4c:b3:a3:42:3c:d7:94:6c:b0:5d:1c:
2d:3e:e6:a7:ba:2c:a6:3f:7b:ce:a8:28:0b:4c:ec:
bb:f2:53:25:72:04:52:21:1c:58:58:33:64:19:b8:
b2:a7:13:57:26:08:bc:66:cb:d4:dd:fa:24:96:71:
cb:d4:cb:77:bf:e8:54:c7:77:14:0f:4d:86:46:d1:
d3:ca:c8:b2:8b:90:68:a4:fc:b7:73:79:fd:48:f4:
f8:a4:f1:5d:79:5a:ab:24:94:82:cc:32:24:2a:fd:
4a:93:e7:6a:f2:e4:4a:ba:ba:ec:b1:14:b1:9c:c3:
83:9b:f9:b7:d9:e1:04:63:37:d2:00:72:93:94:8c:
ff:00:b8:72:62:77:a7:4c:cb:28:df:aa:97:0d:62:
6c:38:41:6d:d3:cf:a3:15:f8:fa:95:c4:66:05:10:
f2:10:81:35:c4:a2:3a:7f:df:dd:65:dd:67:0f:c4:
ac:47:6d:97:2e:b2:75:90:a4:a5:fb:ed:2f:43:25:
78:b1:6b:7d:c1:93:8f:1c:7d:fd:ec:94:b5:fb:c3:
e1:5a:87:c2:c6:8a:b1:56:40:3f:4c:1b:8a:d6:0e:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4F:C8:77:51:DB:5E:71:E6:00:DD:5F:E7:F5:74:C8:AA:67:77:C4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zU_Id1HbXnHmAN1f5_V0yKpnd8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.200.0/24
217.69.167.0/24
IPv6:
2a02:2fc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
85:8e:5e:ce:89:89:e4:d3:09:d8:a2:e2:7f:d1:c2:b0:37:cc:
f0:cf:bd:48:3c:c9:7a:70:11:be:a5:00:50:a0:11:00:44:84:
2f:f6:fd:e2:69:dc:18:24:93:11:59:27:93:b4:de:70:16:62:
ac:7c:9a:fc:e3:0a:9b:9f:55:6b:93:68:bc:ff:29:e8:5d:72:
0e:0c:ae:31:99:8f:dd:ac:d3:ca:ec:b8:33:a3:9d:6b:5b:6b:
cc:7f:24:c5:eb:77:36:6c:16:61:79:01:5a:20:a0:b1:1a:ca:
51:7c:5e:e0:87:d3:87:49:1e:78:0a:8e:d5:70:fb:3c:57:80:
f8:3b:95:a7:89:3e:23:53:16:e9:91:02:af:bd:bc:0e:11:b9:
dc:05:dc:43:c9:8e:1b:1b:b3:56:28:6f:84:31:30:89:64:f7:
67:ab:a2:b9:53:04:b7:90:1e:8c:07:bf:8b:cc:bc:77:1d:58:
df:8e:b2:1a:5a:32:d5:60:b4:65:c4:ff:17:e0:f3:aa:53:fd:
31:42:61:62:2b:f0:02:aa:c4:2f:55:eb:a4:b4:88:e9:9d:53:
1d:2f:e7:99:57:c8:66:2b:17:ed:b7:45:3c:f1:92:91:e6:04:
94:7f:b4:1c:6d:f1:f0:bc:6e:3f:7c:eb:dc:77:6c:09:09:6f:
aa:69:1c:5e
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1Rhy2FCvB6V5RYzH4fBFRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDAzMDQwODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDRmYzg3NzUxZGI1ZTcxZTYwMGRkNWZlN2Y1NzRjOGFhNjc3N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJN60DVtUsev9PVJuaRJZh0CWyoT
jObLowmr+ut/p4OGTLOjQjzXlGywXRwtPuanuiymP3vOqCgLTOy78lMlcgRSIRxY
WDNkGbiypxNXJgi8ZsvU3foklnHL1Mt3v+hUx3cUD02GRtHTysiyi5BopPy3c3n9
SPT4pPFdeVqrJJSCzDIkKv1Kk+dq8uRKurrssRSxnMODm/m32eEEYzfSAHKTlIz/
ALhyYnenTMso36qXDWJsOEFt08+jFfj6lcRmBRDyEIE1xKI6f9/dZd1nD8SsR22X
LrJ1kKSl++0vQyV4sWt9wZOPHH397JS1+8PhWofCxoqxVkA/TBuK1g6l4QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFM1PyHdR215x5gDdX+f1dMiqZ3fEMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvelVfSWQxSGJYbkhtQU4xZjVfVjB5S3BuZDhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAXvnIAwQA
2UWnMA8EAgACMAkDBwAqAi/AAB0wDQYJKoZIhvcNAQELBQADggEBAIWOXs6JieTT
Cdii4n/RwrA3zPDPvUg8yXpwEb6lAFCgEQBEhC/2/eJp3BgkkxFZJ5O03nAWYqx8
mvzjCpufVWuTaLz/Kehdcg4MrjGZj92s08rsuDOjnWtba8x/JMXrdzZsFmF5AVog
oLEaylF8XuCH04dJHngKjtVw+zxXgPg7laeJPiNTFumRAq+9vA4RudwF3EPJjhsb
s1Yob4QxMIlk92erorlTBLeQHowHv4vMvHcdWN+OshpaMtVgtGXE/xfg86pT/TFC
YWIr8AKqxC9V66S0iOmdUx0v55lXyGYrF+23RTzxkpHmBJR/tBxt8fC8bj9869x3
bAkJb6ppHF4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:53 2026 by rpki-client