Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zlknB988sKlv7BdcT0ETA-rL0To.roa
File: zlknB988sKlv7BdcT0ETA-rL0To.roa (raw, json)
Hash identifier: x6CUI1mhQTunEsaYzNEBQ4yxc0nZqmu569DzBFk4UfE=
Subject key identifier: CE:59:27:07:DF:3C:B0:A9:6F:EC:17:5C:4F:41:13:03:EA:CB:D1:3A
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019D954155EEE094FBCF61B5F8273B22A97B
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zlknB988sKlv7BdcT0ETA-rL0To.roa
Signing time: Thu 16 Apr 2026 07:46:20 +0000
ROA not before: Thu 16 Apr 2026 07:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 85.142.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:41:55:ee:e0:94:fb:cf:61:b5:f8:27:3b:22:a9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 16 07:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce592707df3cb0a96fec175c4f411303eacbd13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:ee:b6:a7:ba:9b:94:0b:49:68:5c:00:58:
78:a5:e3:f7:11:c8:bf:24:86:48:b3:6d:fd:45:45:
ed:75:5d:59:24:ce:cc:6b:64:e5:9a:8d:84:70:a7:
6f:bb:73:d4:0a:e0:7e:fe:57:6d:26:4c:24:12:e0:
40:cb:ea:7f:78:51:52:db:12:c6:e9:e1:51:ca:15:
3b:28:93:38:c7:15:dd:1f:b5:cd:37:62:a5:4e:dc:
a6:54:ca:8e:44:ff:b9:29:ab:54:4b:84:68:42:f7:
71:b6:c1:b3:a5:8d:55:28:58:c8:a0:b7:8f:1b:d4:
16:22:36:c3:ef:60:28:25:bc:ee:8f:b6:c7:89:ec:
4e:db:39:c3:bd:29:20:54:a0:44:5b:6f:8f:c7:65:
f4:87:f9:3b:a8:d1:61:cd:09:cc:d7:27:ee:55:cf:
47:f7:6a:a6:75:aa:b4:96:74:a6:40:3b:f2:2a:61:
2e:a3:da:08:63:3c:8e:ef:2e:d0:e7:d0:16:5b:3e:
46:b0:bd:2b:a4:35:54:4c:59:8d:b7:10:6f:36:11:
ec:74:b3:bb:03:28:96:15:8f:04:a8:04:21:9b:e2:
a1:ba:30:a9:0b:c0:06:7e:61:0d:99:4e:fe:97:ca:
72:ba:5b:ae:22:fc:a6:7f:bb:18:5f:78:7f:62:03:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:27:07:DF:3C:B0:A9:6F:EC:17:5C:4F:41:13:03:EA:CB:D1:3A
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zlknB988sKlv7BdcT0ETA-rL0To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.234.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:71:d5:a8:0d:2c:e7:57:11:2f:b8:4e:ea:08:44:7d:5e:55:
9f:87:2c:cf:7d:bc:96:ac:38:d4:92:d7:64:ec:fb:d0:fe:9a:
dd:67:6f:cc:2c:46:31:b5:c5:ae:35:8d:22:f8:be:c0:7b:9e:
16:d9:0e:10:10:2e:d5:00:81:14:a8:91:cc:92:01:bb:d4:91:
e2:15:7c:a9:4e:e6:fd:9d:2e:60:f9:1e:a8:58:db:02:34:38:
79:4c:b6:e8:89:66:a8:0d:ec:e0:94:28:84:7e:d7:71:d4:7c:
c3:82:0a:b9:d9:6b:c1:f0:0c:33:60:78:de:5c:fa:5b:ec:2d:
c3:95:90:dc:ea:dc:cb:97:5c:c5:f7:3a:80:28:f9:a1:40:f4:
5b:ad:9f:96:0a:8a:16:bf:ed:de:0d:ce:38:cb:cd:75:ba:0e:
6f:16:86:56:92:9c:51:0c:92:7d:5d:86:fb:4c:ad:81:57:1c:
4a:6d:a5:01:39:ba:56:74:6b:47:1e:f5:cf:2f:ca:06:e7:3e:
4c:b2:e5:6d:e9:13:6d:5d:aa:de:b4:4b:a1:9a:a7:b3:61:fe:
ad:b4:b7:df:45:c0:bc:ec:c9:ba:65:e0:55:50:97:b4:06:45:
32:da:c6:42:85:eb:f6:51:de:9c:4e:03:85:96:e0:4d:05:b6:
b6:b8:c8:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2VQVXu4JT7z2G1+Cc7Iql7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjYwNDE2MDc0NjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTU5MjcwN2RmM2NiMGE5NmZlYzE3NWM0ZjQxMTMwM2VhY2JkMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKHutqe6m5QLSWhcAFh4peP3Eci/
JIZIs239RUXtdV1ZJM7Ma2Tlmo2EcKdvu3PUCuB+/ldtJkwkEuBAy+p/eFFS2xLG
6eFRyhU7KJM4xxXdH7XNN2KlTtymVMqORP+5KatUS4RoQvdxtsGzpY1VKFjIoLeP
G9QWIjbD72AoJbzuj7bHiexO2znDvSkgVKBEW2+Px2X0h/k7qNFhzQnM1yfuVc9H
92qmdaq0lnSmQDvyKmEuo9oIYzyO7y7Q59AWWz5GsL0rpDVUTFmNtxBvNhHsdLO7
AyiWFY8EqAQhm+KhujCpC8AGfmENmU7+l8pyuluuIvymf7sYX3h/YgMRQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5ZJwffPLCpb+wXXE9BEwPqy9E6MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvemxrbkI5ODhzS2x2N0JkY1QwRVRBLXJMMFRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVY7qMA0G
CSqGSIb3DQEBCwUAA4IBAQBrcdWoDSznVxEvuE7qCER9XlWfhyzPfbyWrDjUktdk
7PvQ/prdZ2/MLEYxtcWuNY0i+L7Ae54W2Q4QEC7VAIEUqJHMkgG71JHiFXypTub9
nS5g+R6oWNsCNDh5TLboiWaoDezglCiEftdx1HzDggq52WvB8AwzYHjeXPpb7C3D
lZDc6tzLl1zF9zqAKPmhQPRbrZ+WCooWv+3eDc44y811ug5vFoZWkpxRDJJ9XYb7
TK2BVxxKbaUBObpWdGtHHvXPL8oG5z5MsuVt6RNtXaretEuhmqezYf6ttLffRcC8
7Mm6ZeBVUJe0BkUy2sZChev2Ud6cTgOFluBNBba2uMjZ
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:19:59 2026 by rpki-client