Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/ZTlU03e2qt__TpF-io4-AEKUOrU.roa
File: ZTlU03e2qt__TpF-io4-AEKUOrU.roa (raw, json)
Hash identifier: Zw2bD+qyXYZT0vDGotQc/HMnILry5JdGYie/nLyOu5Q=
Subject key identifier: 65:39:54:D3:77:B6:AA:DF:FF:4E:91:7E:8A:8E:3E:00:42:94:3A:B5
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 019EAD016A9E7FF449AA013D832E1FA46DCC
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/ZTlU03e2qt__TpF-io4-AEKUOrU.roa
Signing time: Tue 09 Jun 2026 15:30:11 +0000
ROA not before: Tue 09 Jun 2026 15:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 78.235.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:01:6a:9e:7f:f4:49:aa:01:3d:83:2e:1f:a4:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jun 9 15:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=653954d377b6aadfff4e917e8a8e3e0042943ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:ff:2f:5c:e5:47:1b:39:ce:f6:a7:cb:d4:
44:4e:c3:fe:c5:e0:64:84:60:b5:e2:88:5f:1d:29:
8b:7f:df:1e:95:1d:0c:9d:85:57:9c:7c:b0:bc:73:
55:1d:0c:64:69:02:1c:40:6c:be:e7:bc:7f:34:a4:
e4:4d:2f:8a:6f:29:47:3c:f4:fe:e0:2c:da:40:5f:
67:2c:22:d7:4f:e7:c6:13:5b:8e:b6:71:31:67:bc:
3a:15:5e:38:82:44:1b:03:b9:fd:c3:5d:a1:ae:fd:
3d:e4:6d:29:a0:c9:d3:b7:2b:98:07:3b:2e:ed:22:
a8:59:b5:1e:94:8b:f6:74:81:6e:e3:ba:c8:7a:b6:
4d:ad:3d:6d:f9:63:df:7e:d2:4b:e5:34:b5:6f:15:
94:88:0a:44:f2:08:e8:94:04:fd:41:2c:5c:db:15:
8c:b2:53:30:14:82:9f:76:9e:c3:39:b2:c7:63:99:
98:ce:31:16:46:da:97:86:d4:d9:c0:a7:d3:28:b9:
79:ea:8e:67:df:e4:80:a6:03:2a:2d:b3:99:a6:4b:
0c:2a:8a:a2:d4:8f:5a:e6:52:ac:e4:80:b3:ae:21:
fd:97:a7:39:5c:a1:60:e0:46:f0:0e:0d:4f:17:21:
a4:5d:60:d1:14:f1:44:64:ae:e5:8e:bc:00:9f:69:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:54:D3:77:B6:AA:DF:FF:4E:91:7E:8A:8E:3E:00:42:94:3A:B5
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/ZTlU03e2qt__TpF-io4-AEKUOrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.235.0.0/19
Signature Algorithm: sha256WithRSAEncryption
73:6c:f6:e8:8d:3e:4f:c9:65:79:c2:ee:6c:e0:8f:d9:4b:7f:
68:85:d3:f9:c2:ae:24:b7:70:d1:bd:e8:46:47:97:74:ea:85:
01:86:bd:23:48:6b:a8:8f:bb:2a:b4:b0:f2:cf:33:e5:ae:f3:
54:4f:82:47:ce:0d:9b:7d:c3:c3:cc:04:ce:d1:0f:35:1f:e6:
f9:dd:03:ef:7e:40:a1:f2:b8:03:a9:e1:53:74:22:ad:a8:4e:
6a:44:ce:52:b9:76:e5:7b:65:14:61:ef:b4:27:f1:73:f0:45:
3a:4a:b4:00:db:0d:b5:dd:47:a7:3c:36:78:d6:12:e8:04:76:
4c:1d:76:6c:66:05:45:78:1a:92:2e:a5:2b:89:35:5b:60:29:
d5:36:71:4b:7a:8c:4a:56:d6:84:19:1b:48:a8:9e:10:75:bc:
56:75:bc:f9:95:ba:47:f8:c6:e5:33:4c:c0:d2:a8:97:1f:b7:
bb:04:6a:fe:00:d6:48:5d:b1:1d:40:d5:c9:62:8e:90:89:14:
68:10:e7:ed:16:40:5a:79:9a:d1:13:90:7c:48:f9:12:1e:a3:
a5:79:1b:82:87:42:5f:ed:be:e7:3b:50:7f:5a:f8:ae:55:f5:
2d:27:f9:10:13:61:58:f9:d8:2f:e6:7c:5d:de:40:bc:c4:95:
1b:00:a2:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6tAWqef/RJqgE9gy4fpG3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwNjA5MTUzMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTM5NTRkMzc3YjZhYWRmZmY0ZTkxN2U4YThlM2UwMDQyOTQzYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k7/L1zlRxs5zvany9RETsP+xeBk
hGC14ohfHSmLf98elR0MnYVXnHywvHNVHQxkaQIcQGy+57x/NKTkTS+KbylHPPT+
4CzaQF9nLCLXT+fGE1uOtnExZ7w6FV44gkQbA7n9w12hrv095G0poMnTtyuYBzsu
7SKoWbUelIv2dIFu47rIerZNrT1t+WPfftJL5TS1bxWUiApE8gjolAT9QSxc2xWM
slMwFIKfdp7DObLHY5mYzjEWRtqXhtTZwKfTKLl56o5n3+SApgMqLbOZpksMKoqi
1I9a5lKs5ICzriH9l6c5XKFg4EbwDg1PFyGkXWDRFPFEZK7ljrwAn2kE8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGU5VNN3tqrf/06RfoqOPgBClDq1MB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvWlRsVTAzZTJxdF9fVHBGLWlvNC1BRUtVT3JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTusAMA0G
CSqGSIb3DQEBCwUAA4IBAQBzbPbojT5PyWV5wu5s4I/ZS39ohdP5wq4kt3DRvehG
R5d06oUBhr0jSGuoj7sqtLDyzzPlrvNUT4JHzg2bfcPDzATO0Q81H+b53QPvfkCh
8rgDqeFTdCKtqE5qRM5SuXble2UUYe+0J/Fz8EU6SrQA2w213UenPDZ41hLoBHZM
HXZsZgVFeBqSLqUriTVbYCnVNnFLeoxKVtaEGRtIqJ4QdbxWdbz5lbpH+MblM0zA
0qiXH7e7BGr+ANZIXbEdQNXJYo6QiRRoEOftFkBaeZrRE5B8SPkSHqOleRuCh0Jf
7b7nO1B/WviuVfUtJ/kQE2FY+dgv5nxd3kC8xJUbAKLR
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:59 2026 by rpki-client