Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZV-o8IDGMyh53slSb0Gfu3IH-eA.roa
File: ZV-o8IDGMyh53slSb0Gfu3IH-eA.roa (raw, json)
Hash identifier: ROdBkyT3aPKjYBtwyXD0MBkoixxFOi1AK8WHbvS7L4Y=
Subject key identifier: 65:5F:A8:F0:80:C6:33:28:79:DE:C9:52:6F:41:9F:BB:72:07:F9:E0
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B37CAD250A172930B6768F4B371C8ED8
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZV-o8IDGMyh53slSb0Gfu3IH-eA.roa
Signing time: Fri 18 Sep 2026 07:48:07 +0000
ROA not before: Fri 18 Sep 2026 07:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34224
IP address blocks: 79.182.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:7c:ad:25:0a:17:29:30:b6:76:8f:4b:37:1c:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 18 07:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=655fa8f080c6332879dec9526f419fbb7207f9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:bd:4a:21:5e:b7:52:12:33:d4:89:a8:13:
b4:89:e5:85:50:72:44:90:c8:db:b2:96:94:49:5b:
e9:8d:c9:79:39:20:5c:f1:e9:17:1a:b6:ba:bc:e9:
74:0f:91:0f:04:47:95:e5:b7:e5:01:a8:42:db:ee:
68:58:3b:be:c4:63:94:e9:9b:33:4d:6e:9c:e3:3a:
e2:52:36:a6:b5:d9:8f:d8:17:98:9c:94:86:32:34:
45:8e:36:39:d8:52:7c:dc:72:9e:5e:02:2c:91:98:
87:db:6d:9c:1a:5e:0f:37:24:2e:3a:f4:6e:29:a8:
64:96:25:45:24:cb:3c:e2:59:fd:96:f7:83:53:b9:
01:78:be:13:b7:b0:4d:e3:05:19:5c:40:6e:39:8d:
01:90:be:8c:cc:07:91:c6:41:d5:81:db:84:6f:50:
36:ea:62:e6:4a:d3:93:4d:7f:07:d2:ee:94:78:01:
24:97:ce:7d:5b:7a:40:52:07:5a:00:16:42:14:cd:
b1:ab:70:73:a1:d5:0f:d8:d5:2e:c6:48:42:a3:f3:
f4:02:d6:43:4f:36:af:8a:7f:aa:eb:2d:e6:1a:9e:
4c:82:13:50:7e:28:2f:9e:2a:b8:48:48:df:c1:e0:
8d:2c:cc:16:af:6a:33:89:ff:ca:5c:09:15:25:4b:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:A8:F0:80:C6:33:28:79:DE:C9:52:6F:41:9F:BB:72:07:F9:E0
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZV-o8IDGMyh53slSb0Gfu3IH-eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.37.0/24
Signature Algorithm: sha256WithRSAEncryption
94:50:b4:80:ee:81:7a:5c:45:32:c4:9c:4d:03:18:34:92:be:
ef:e0:d5:1c:aa:42:54:35:5b:07:2b:c3:5d:da:06:2d:8c:d4:
2f:56:1d:c0:fc:0e:e8:9c:4e:90:09:bd:e0:c0:e7:f1:a5:20:
61:4a:10:29:b0:10:b0:0f:f1:10:a2:27:ac:62:9d:7c:58:81:
72:88:6c:3f:6b:c7:5f:5c:1d:c0:f4:8b:6f:2f:64:31:bb:ad:
5b:28:7b:20:3d:85:ba:94:25:e5:03:eb:da:fe:e8:56:5b:d8:
ba:45:6d:e1:d4:27:61:7f:74:04:ae:28:b9:2b:c4:7e:47:9f:
36:bf:f9:46:af:e0:38:02:2d:00:01:37:29:b0:fa:d0:25:c2:
e5:43:7b:4e:5c:e1:96:7e:cd:0b:59:0c:81:5c:89:01:a4:d7:
e6:39:20:6f:c1:52:a4:b4:46:66:f4:b8:1c:0e:01:da:67:78:
33:b9:16:9c:a3:2a:bc:c1:b8:7d:31:24:1b:8b:e8:2a:a6:ce:
40:ac:cc:70:05:48:7a:27:b3:33:5b:d2:c6:da:71:e4:b3:c5:
70:0a:48:60:73:b4:3e:6c:4b:65:d8:b7:a0:20:53:94:f6:cf:
19:ef:ce:9e:75:55:d0:00:ee:ca:8c:9b:75:49:28:51:0d:5c:
c9:f5:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:38 2026 by rpki-client