Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ZAORioOQSLrW0zfUYr-mwjKGOR8.roa
File: ZAORioOQSLrW0zfUYr-mwjKGOR8.roa (raw, json)
Hash identifier: /BIwedLN6Bs6oZ4U9lltNm3dX7rdFQEcz9tlQlLQj7k=
Subject key identifier: 64:03:91:8A:83:90:48:BA:D6:D3:37:D4:62:BF:A6:C2:32:86:39:1F
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0A97402EDC23A7CD66370E5351C579977
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ZAORioOQSLrW0zfUYr-mwjKGOR8.roa
Signing time: Wed 16 Sep 2026 09:02:27 +0000
ROA not before: Wed 16 Sep 2026 09:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 83.245.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:74:02:ed:c2:3a:7c:d6:63:70:e5:35:1c:57:99:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 16 09:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6403918a839048bad6d337d462bfa6c23286391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:7b:15:9a:2f:16:de:1a:c2:31:74:71:4e:
f5:08:67:c3:bd:5a:86:54:a0:29:e9:01:87:c5:c4:
37:70:da:df:95:27:f0:5b:ab:76:6d:be:7d:7a:ef:
b3:0b:4b:5d:e2:09:db:61:35:be:79:0f:cb:fc:d6:
72:32:c6:3f:4f:12:eb:a8:cb:8d:80:25:75:83:ff:
d8:ce:f0:c6:bb:82:2f:56:24:14:f9:af:b4:23:78:
53:b7:3c:4e:ff:48:e8:44:d6:64:38:0e:bd:d9:bb:
ac:0c:3c:d0:a8:43:f8:20:0e:24:1a:d2:fe:5d:da:
f8:c6:d8:8a:ad:e9:86:92:08:43:75:d3:a1:1f:5a:
d4:e7:86:c1:93:6d:e8:94:b0:8e:41:ad:14:e9:fb:
47:e6:ba:65:06:1d:20:c4:76:fe:ea:e5:9d:3d:cd:
ef:35:2a:77:9a:3c:6b:a7:34:ae:c9:2c:4e:a6:d7:
f2:13:7e:ce:63:c4:58:93:1a:40:14:90:b5:55:33:
17:45:6e:4c:3e:f9:e9:8a:df:1e:7e:67:a9:fd:ed:
b4:e2:1a:65:3b:bf:7e:0c:5e:7b:b0:03:57:b0:4c:
a0:ce:02:b1:0f:d9:f1:33:21:23:c0:3a:59:1a:ea:
85:d0:ed:8e:e4:fc:2f:ae:9f:65:38:61:ae:00:23:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:91:8A:83:90:48:BA:D6:D3:37:D4:62:BF:A6:C2:32:86:39:1F
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ZAORioOQSLrW0zfUYr-mwjKGOR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3f:3f:06:a6:6c:cc:f7:26:15:01:e9:15:93:74:24:06:7b:
dc:de:6a:d9:a1:d3:1d:a1:95:91:02:6e:4e:5e:ba:a5:87:1e:
ff:e5:e7:00:09:84:11:f2:a4:48:16:ae:68:2e:d9:84:12:4a:
71:72:1d:82:dd:15:86:38:b2:b9:de:4a:92:ef:5f:3e:fa:f9:
28:de:84:34:1c:43:42:54:63:b5:6d:fd:38:02:a1:ab:65:b5:
f8:b9:12:3f:22:19:a2:36:3f:55:0b:01:2d:61:6e:70:23:12:
0c:26:0b:23:49:ce:db:21:ac:d0:ef:f2:06:e4:28:d4:3d:80:
f4:be:7c:f8:af:df:68:66:54:0c:e3:81:57:f9:65:b4:c7:36:
88:08:5b:42:7d:05:fa:8f:1b:a9:2c:d7:31:24:3e:87:8c:0e:
51:e8:35:eb:8f:3f:f4:be:31:77:e7:18:7a:75:db:13:ed:d4:
9b:2b:2b:37:8d:8c:bd:35:52:72:84:c3:5e:74:fb:21:78:9a:
de:41:00:86:5e:a5:63:bb:54:91:ff:cf:00:ad:e7:e2:27:f6:
75:0e:57:7b:f5:76:56:dc:4f:82:05:70:94:b1:a0:37:14:01:
53:99:17:47:9f:b9:5d:df:f0:00:7c:34:41:3c:33:25:fc:3e:
97:2d:53:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCpdALtwjp81mNw5TUcV5l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTE2MDkwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDAzOTE4YTgzOTA0OGJhZDZkMzM3ZDQ2MmJmYTZjMjMyODYzOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsp7FZovFt4awjF0cU71CGfDvVqG
VKAp6QGHxcQ3cNrflSfwW6t2bb59eu+zC0td4gnbYTW+eQ/L/NZyMsY/TxLrqMuN
gCV1g//YzvDGu4IvViQU+a+0I3hTtzxO/0joRNZkOA692busDDzQqEP4IA4kGtL+
Xdr4xtiKremGkghDddOhH1rU54bBk23olLCOQa0U6ftH5rplBh0gxHb+6uWdPc3v
NSp3mjxrpzSuySxOptfyE37OY8RYkxpAFJC1VTMXRW5MPvnpit8efmep/e204hpl
O79+DF57sANXsEygzgKxD9nxMyEjwDpZGuqF0O2O5Pwvrp9lOGGuACM5yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQDkYqDkEi61tM31GK/psIyhjkfMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvWkFPUmlvT1FTTHJXMHpmVVlyLW13aktHT1I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/UoMA0G
CSqGSIb3DQEBCwUAA4IBAQAsPz8GpmzM9yYVAekVk3QkBnvc3mrZodMdoZWRAm5O
Xrqlhx7/5ecACYQR8qRIFq5oLtmEEkpxch2C3RWGOLK53kqS718++vko3oQ0HENC
VGO1bf04AqGrZbX4uRI/IhmiNj9VCwEtYW5wIxIMJgsjSc7bIazQ7/IG5CjUPYD0
vnz4r99oZlQM44FX+WW0xzaICFtCfQX6jxupLNcxJD6HjA5R6DXrjz/0vjF35xh6
ddsT7dSbKys3jYy9NVJyhMNedPsheJreQQCGXqVju1SR/88ArefiJ/Z1Dld79XZW
3E+CBXCUsaA3FAFTmRdHn7ld3/AAfDRBPDMl/D6XLVOm
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:13:52 2026 by rpki-client