Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZbtGe0CIL4iGkyMfI7lTrZfmu_0.roa
File: ZbtGe0CIL4iGkyMfI7lTrZfmu_0.roa (raw, json)
Hash identifier: xVySdzj+4Q0nCOEcEFNF2LITLk4aSE+zmkekmWecrzw=
Subject key identifier: 65:BB:46:7B:40:88:2F:88:86:93:23:1F:23:B9:53:AD:97:E6:BB:FD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BB0DF13413DC5F2618AABC35C2971B4F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZbtGe0CIL4iGkyMfI7lTrZfmu_0.roa
Signing time: Sat 19 Sep 2026 19:04:08 +0000
ROA not before: Sat 19 Sep 2026 19:04:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 46.34.16.0/24 maxlen: 24
87.86.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:0d:f1:34:13:dc:5f:26:18:aa:bc:35:c2:97:1b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 19:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65bb467b40882f888693231f23b953ad97e6bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:10:5b:d4:44:34:29:48:c8:57:6f:a0:64:
b3:32:33:30:cf:e1:f1:7c:52:e2:0f:1e:d0:f8:40:
eb:c6:bc:66:ce:8e:48:fe:47:a1:47:6a:1b:de:2a:
8d:58:d7:8f:b7:df:a3:5b:54:98:b1:55:ef:7f:12:
f9:0d:de:4a:6c:97:a7:db:25:2a:a5:b2:27:29:3b:
e4:9e:58:60:e9:89:6e:8b:71:fc:bc:b2:d1:e1:dc:
f4:00:fd:65:10:ca:bc:29:13:e0:8c:97:13:b8:2c:
28:eb:dc:8f:e8:41:53:17:fe:92:51:d8:b1:f7:f0:
14:02:78:9d:bc:22:06:f1:1a:cd:60:d5:a0:6f:85:
8d:f0:19:25:dd:18:de:f3:e8:f3:fa:67:10:3f:ba:
e0:81:c6:1b:e5:30:52:20:c3:6b:66:6d:a8:1f:1d:
a3:ff:52:5b:b7:38:8e:3d:13:ff:25:f0:0a:d4:38:
f3:1e:70:88:4d:91:6e:2b:ec:ca:34:cd:04:5d:bd:
e6:f1:26:2c:e1:44:cd:8f:8b:9a:d5:e0:98:0d:07:
c0:5b:5f:af:75:ea:a6:41:88:6b:99:37:1d:98:7e:
b2:d4:16:05:96:90:8b:67:ce:d7:74:a0:e7:bf:db:
9c:0e:cd:76:44:26:e9:67:76:55:28:1b:56:30:a7:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BB:46:7B:40:88:2F:88:86:93:23:1F:23:B9:53:AD:97:E6:BB:FD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZbtGe0CIL4iGkyMfI7lTrZfmu_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.16.0/24
87.86.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3b:a0:02:a9:b0:e4:05:1e:93:0f:94:86:de:b8:69:eb:bf:
df:fe:b1:7f:0f:db:2c:c6:24:bc:d3:7e:46:1c:df:81:05:a0:
55:f7:ff:d7:50:ee:29:e8:11:e3:e1:ff:a2:26:1f:a3:60:2e:
1d:e8:f7:08:3a:01:e4:0a:6c:66:6c:d6:7a:15:56:a8:d3:93:
63:de:fa:6f:24:8c:ad:ef:38:51:aa:c5:14:e5:80:13:43:3d:
89:d5:6e:be:66:a1:59:f6:c7:be:53:36:4f:81:2a:ee:fb:cf:
9f:ff:77:f9:b7:96:ee:e3:f3:9f:0f:2a:c8:b5:01:b4:03:fc:
fc:f2:87:81:60:e6:c9:9c:4d:f4:9c:10:51:95:ca:b1:0f:ac:
b5:cf:47:f2:ac:ef:ed:a7:2f:10:14:5d:42:80:23:c6:fc:dc:
b4:c3:4e:9f:c3:b1:86:59:67:3c:a4:e3:4c:a4:a8:3c:07:f4:
5a:ea:3a:df:02:ab:01:70:f4:39:6c:6a:27:ad:d7:b8:34:be:
50:53:60:31:27:1f:6e:ab:6d:c3:3d:de:c3:85:e3:34:63:f8:
45:a9:99:99:16:2e:ee:07:06:8d:86:70:ca:8d:68:c9:6b:75:
9b:03:a9:ec:fa:ea:40:49:c3:8c:9a:1d:ba:c8:f9:1e:3a:cd:
c5:4c:b2:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaC7DfE0E9xfJhiqvDXClxtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTE5MTkwNDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWJiNDY3YjQwODgyZjg4ODY5MzIzMWYyM2I5NTNhZDk3ZTZiYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww0QW9RENClIyFdvoGSzMjMwz+Hx
fFLiDx7Q+EDrxrxmzo5I/kehR2ob3iqNWNePt9+jW1SYsVXvfxL5Dd5KbJen2yUq
pbInKTvknlhg6Ylui3H8vLLR4dz0AP1lEMq8KRPgjJcTuCwo69yP6EFTF/6SUdix
9/AUAnidvCIG8RrNYNWgb4WN8Bkl3Rje8+jz+mcQP7rggcYb5TBSIMNrZm2oHx2j
/1JbtziOPRP/JfAK1DjzHnCITZFuK+zKNM0EXb3m8SYs4UTNj4ua1eCYDQfAW1+v
deqmQYhrmTcdmH6y1BYFlpCLZ87XdKDnv9ucDs12RCbpZ3ZVKBtWMKeQrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGW7RntAiC+IhpMjHyO5U62X5rv9MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvWmJ0R2UwQ0lMNGlHa3lNZkk3bFRyWmZtdV8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiIQAwQA
V1YlMA0GCSqGSIb3DQEBCwUAA4IBAQCfO6ACqbDkBR6TD5SG3rhp67/f/rF/D9ss
xiS8035GHN+BBaBV9//XUO4p6BHj4f+iJh+jYC4d6PcIOgHkCmxmbNZ6FVao05Nj
3vpvJIyt7zhRqsUU5YATQz2J1W6+ZqFZ9se+UzZPgSru+8+f/3f5t5bu4/OfDyrI
tQG0A/z88oeBYObJnE30nBBRlcqxD6y1z0fyrO/tpy8QFF1CgCPG/Ny0w06fw7GG
WWc8pONMpKg8B/Ra6jrfAqsBcPQ5bGonrde4NL5QU2AxJx9uq23DPd7DheM0Y/hF
qZmZFi7uBwaNhnDKjWjJa3WbA6ns+upAScOMmh26yPkeOs3FTLIH
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:29 2026 by rpki-client