Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/P-ZfL8dzXcwJu8ZGqV47Drbl2LY.roa
File: P-ZfL8dzXcwJu8ZGqV47Drbl2LY.roa (raw, json)
Hash identifier: VCOYVLtM2luwqOW170QT0pv1ceh2yF/IHt5QdUYSaJQ=
Subject key identifier: 3F:E6:5F:2F:C7:73:5D:CC:09:BB:C6:46:A9:5E:3B:0E:B6:E5:D8:B6
Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial: 019C5A261BB1EB91AC3E9704EE17785DBBEB
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/P-ZfL8dzXcwJu8ZGqV47Drbl2LY.roa
Signing time: Sat 14 Feb 2026 03:16:12 +0000
ROA not before: Sat 14 Feb 2026 03:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201674
IP address blocks: 193.22.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5a:26:1b:b1:eb:91:ac:3e:97:04:ee:17:78:5d:bb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Validity
Not Before: Feb 14 03:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fe65f2fc7735dcc09bbc646a95e3b0eb6e5d8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:16:be:03:cb:ca:49:55:ac:0a:40:b6:7a:
2a:c2:d3:25:85:f9:60:08:33:7c:3f:0a:96:1a:ea:
eb:02:37:0c:48:cd:38:29:6b:4c:6c:24:f6:d2:f2:
80:9d:d9:cf:99:25:ae:82:d9:d0:ce:ce:a5:70:78:
81:f4:03:33:fd:3c:c2:01:05:f6:de:d4:92:50:43:
b4:8d:14:0c:48:91:df:c7:ad:9e:bd:16:c5:5a:2d:
2f:a1:8e:8e:38:4b:e9:de:16:d5:91:b2:a0:56:c5:
b9:b6:13:4c:20:ef:68:45:27:88:d2:63:18:23:be:
36:4e:e5:9e:f4:96:76:fd:18:07:d3:71:ba:92:1f:
76:02:11:70:18:d8:09:f6:80:11:4f:8e:33:4f:b7:
e3:af:a5:f6:0b:eb:d6:f7:b1:ef:ce:d0:99:52:89:
66:64:90:cc:f6:52:17:f6:d4:d3:c5:07:80:9e:f3:
a7:9e:0e:33:09:cb:69:6e:38:34:ae:f1:4e:ed:48:
f0:45:c1:97:8a:66:cc:bd:4e:a0:ff:67:a6:b0:7e:
78:00:19:13:55:98:66:44:28:f5:bd:02:87:04:f9:
d2:f8:f1:91:c0:3a:55:99:67:67:82:be:08:8c:13:
f1:e6:b9:2b:f4:d2:82:e8:29:d0:30:21:c9:aa:c6:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:5F:2F:C7:73:5D:CC:09:BB:C6:46:A9:5E:3B:0E:B6:E5:D8:B6
X509v3 Authority Key Identifier:
keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/P-ZfL8dzXcwJu8ZGqV47Drbl2LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:12:b6:ea:fd:aa:d7:e6:72:5b:58:43:fc:7c:0c:65:9d:99:
42:d3:a4:ce:44:a4:ff:86:3b:3e:6a:aa:4f:74:8d:b4:ef:d4:
5d:f6:ea:ae:ef:a0:8e:c3:0b:22:92:fd:65:d7:84:bd:f7:e8:
70:6c:59:8c:8a:f6:00:9a:5c:13:ea:62:15:3a:47:5a:ec:e1:
97:95:58:7c:4e:60:fd:89:2b:45:8b:a4:b5:0a:38:1e:e7:01:
8b:b6:bd:a0:67:06:12:89:02:e9:e3:07:d7:40:64:d3:78:5e:
75:ea:fc:79:99:16:8d:67:e9:5f:87:07:11:6e:cc:02:20:c7:
98:a2:b8:7e:41:81:23:7f:0f:c1:ee:09:12:bb:d2:cc:cf:66:
50:8f:6a:26:8a:f8:1b:8c:21:94:0c:58:b6:f2:79:92:c1:36:
82:af:a3:17:02:64:84:fa:2f:21:d8:56:af:b7:15:3f:a4:35:
16:83:10:f9:d3:0b:00:cd:b6:9e:fc:19:4a:81:9e:44:27:ed:
bb:f6:60:65:61:d8:14:d8:88:67:79:f5:d3:74:65:12:95:fb:
98:49:a5:04:f0:ba:d8:3e:34:fd:b7:b0:bc:c7:8e:12:40:de:
1a:f0:9a:b0:b9:e9:56:a2:8e:a2:73:b8:48:a8:59:be:51:ba:
6b:b0:ad:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxaJhux65GsPpcE7hd4XbvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjU3ZWFhYmJmNjA0ZDQ1NzAwNTVjMmNkOGFjMjQ5YmIy
OWMxMDYwHhcNMjYwMjE0MDMxNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmU2NWYyZmM3NzM1ZGNjMDliYmM2NDZhOTVlM2IwZWI2ZTVkOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQEWvgPLyklVrApAtnoqwtMlhflg
CDN8PwqWGurrAjcMSM04KWtMbCT20vKAndnPmSWugtnQzs6lcHiB9AMz/TzCAQX2
3tSSUEO0jRQMSJHfx62evRbFWi0voY6OOEvp3hbVkbKgVsW5thNMIO9oRSeI0mMY
I742TuWe9JZ2/RgH03G6kh92AhFwGNgJ9oART44zT7fjr6X2C+vW97HvztCZUolm
ZJDM9lIX9tTTxQeAnvOnng4zCctpbjg0rvFO7UjwRcGXimbMvU6g/2emsH54ABkT
VZhmRCj1vQKHBPnS+PGRwDpVmWdngr4IjBPx5rkr9NKC6CnQMCHJqsYpuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/mXy/Hc13MCbvGRqleOw625di2MB8GA1UdIwQY
MBaAFOElfqq79gTUVwBVws2Kwkm7KcEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYt
ODFmYTg3NGVlMmVkLzEvUC1aZkw4ZHpYY3dKdThaR3FWNDdEcmJsMkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYtODFmYTg3NGVlMmVk
LzEvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRaiMA0G
CSqGSIb3DQEBCwUAA4IBAQCdErbq/arX5nJbWEP8fAxlnZlC06TORKT/hjs+aqpP
dI2079Rd9uqu76COwwsikv1l14S99+hwbFmMivYAmlwT6mIVOkda7OGXlVh8TmD9
iStFi6S1Cjge5wGLtr2gZwYSiQLp4wfXQGTTeF516vx5mRaNZ+lfhwcRbswCIMeY
orh+QYEjfw/B7gkSu9LMz2ZQj2omivgbjCGUDFi28nmSwTaCr6MXAmSE+i8h2Fav
txU/pDUWgxD50wsAzbae/BlKgZ5EJ+279mBlYdgU2IhnefXTdGUSlfuYSaUE8LrY
PjT9t7C8x44SQN4a8JqwuelWoo6ic7hIqFm+UbprsK0U
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:11 2026 by rpki-client