Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/zlkYlNw0T-tzjjfAEXz5T13JQ6I.roa
File: zlkYlNw0T-tzjjfAEXz5T13JQ6I.roa (raw, json)
Hash identifier: m4NNNToMR65yNmoLx4cGJCUaxPOQmHV/g6ORMVnnWqo=
Subject key identifier: CE:59:18:94:DC:34:4F:EB:73:8E:37:C0:11:7C:F9:4F:5D:C9:43:A2
Certificate issuer: /CN=320cdfe164d2e79c3a688e03c1075e6f06e9cb4c
Certificate serial: 01A115A628551BE9A13BCBF9E7A80335DC48
Authority key identifier: 32:0C:DF:E1:64:D2:E7:9C:3A:68:8E:03:C1:07:5E:6F:06:E9:CB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgzf4WTS55w6aI4DwQdebwbpy0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/zlkYlNw0T-tzjjfAEXz5T13JQ6I.roa
Signing time: Wed 07 Oct 2026 09:16:13 +0000
ROA not before: Wed 07 Oct 2026 09:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219170
IP address blocks: 164.37.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgzf4WTS55w6aI4DwQdebwbpy0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:a6:28:55:1b:e9:a1:3b:cb:f9:e7:a8:03:35:dc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320cdfe164d2e79c3a688e03c1075e6f06e9cb4c
Validity
Not Before: Oct 7 09:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce591894dc344feb738e37c0117cf94f5dc943a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:a7:6e:a9:ac:eb:d8:22:af:a2:43:74:e0:
33:7b:6d:f4:6d:c6:a0:d1:0b:27:1c:1f:e2:5a:2e:
9f:88:bc:4d:56:36:02:7b:44:82:10:a1:07:69:84:
70:b8:88:ab:d5:97:d2:78:58:6e:81:c0:5d:4f:d0:
a3:50:5a:be:71:e4:eb:d8:06:dc:b3:25:50:29:1d:
46:6f:b0:28:9d:ee:b0:31:06:48:78:e2:7c:3e:88:
62:04:a0:70:13:56:c4:b3:2d:fa:23:94:21:00:7b:
a8:98:64:e1:ba:a9:bc:66:93:84:6a:33:89:4f:0a:
46:4a:46:16:01:c5:ef:ca:6d:14:ea:01:e7:ba:a5:
9e:c9:5f:96:4b:ce:25:64:5f:a0:95:08:68:68:0a:
52:2a:d2:76:9a:09:fe:e0:84:e6:b3:91:71:43:7f:
f7:8e:af:aa:7d:76:4b:9f:74:c3:cf:ec:60:9d:7d:
7f:ca:44:7f:fc:3c:58:f8:e2:9d:a5:68:5c:91:82:
7e:8e:04:8c:95:76:51:1b:62:ed:46:a8:07:7e:46:
38:60:79:08:2a:8b:33:ac:93:69:2d:b6:af:51:7e:
e5:b6:ce:42:7b:cf:b6:8a:f1:6c:8c:e3:7d:b3:b6:
a7:a2:2a:c8:da:b6:f2:81:40:35:b4:45:f4:3e:d8:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:18:94:DC:34:4F:EB:73:8E:37:C0:11:7C:F9:4F:5D:C9:43:A2
X509v3 Authority Key Identifier:
keyid:32:0C:DF:E1:64:D2:E7:9C:3A:68:8E:03:C1:07:5E:6F:06:E9:CB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgzf4WTS55w6aI4DwQdebwbpy0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/zlkYlNw0T-tzjjfAEXz5T13JQ6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.63.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4e:bd:9c:ac:58:6b:0b:46:79:78:22:cb:e6:21:6c:8e:6b:
86:ae:42:cf:84:e3:9b:96:7c:fa:10:08:e4:cb:68:b3:0c:48:
09:b7:8d:a6:e7:fc:66:07:b4:20:a9:0c:b2:86:f4:25:53:8b:
77:a3:9e:da:13:ac:ef:9f:30:d1:cf:f8:bf:b4:9c:9e:06:da:
54:74:5b:74:9e:fd:e6:5e:fb:93:73:4a:6d:61:4f:5f:7a:68:
7a:40:74:b3:1b:fb:f0:67:1d:e0:bb:6e:76:b0:7f:5c:cb:35:
ec:5f:f8:ae:17:c6:00:83:ca:9a:05:54:79:5e:a3:79:72:df:
a1:18:0a:76:00:3f:4e:63:cf:b5:d9:93:4f:40:68:70:e3:90:
ff:b1:a0:5e:c9:9f:71:79:22:a0:ec:6c:84:cd:d9:a5:f6:45:
fa:a1:08:5c:69:e4:b1:23:a3:08:d6:e6:bd:59:25:52:7a:d7:
1b:91:f5:ea:3f:0e:84:fd:20:6b:c0:86:42:08:62:30:b0:85:
09:d8:12:71:1f:c8:61:1e:ff:bb:96:7a:ff:c9:3d:ac:f9:75:
dd:e6:89:1d:85:ba:b6:dd:b7:ae:a8:90:db:44:36:87:3f:dc:
55:75:33:5f:70:13:47:66:63:30:07:26:18:5e:4e:17:d2:3e:
91:50:91:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEVpihVG+mhO8v556gDNdxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGNkZmUxNjRkMmU3OWMzYTY4OGUwM2MxMDc1ZTZmMDZl
OWNiNGMwHhcNMjYxMDA3MDkxNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTU5MTg5NGRjMzQ0ZmViNzM4ZTM3YzAxMTdjZjk0ZjVkYzk0M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4anbqms69gir6JDdOAze230bcag
0QsnHB/iWi6fiLxNVjYCe0SCEKEHaYRwuIir1ZfSeFhugcBdT9CjUFq+ceTr2Abc
syVQKR1Gb7Aone6wMQZIeOJ8PohiBKBwE1bEsy36I5QhAHuomGThuqm8ZpOEajOJ
TwpGSkYWAcXvym0U6gHnuqWeyV+WS84lZF+glQhoaApSKtJ2mgn+4ITms5FxQ3/3
jq+qfXZLn3TDz+xgnX1/ykR//DxY+OKdpWhckYJ+jgSMlXZRG2LtRqgHfkY4YHkI
KoszrJNpLbavUX7lts5Ce8+2ivFsjON9s7anoirI2rbygUA1tEX0PtiRLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5ZGJTcNE/rc443wBF8+U9dyUOiMB8GA1UdIwQY
MBaAFDIM3+Fk0uecOmiOA8EHXm8G6ctMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWd6ZjRXVFM1NXc2YUk0RHdRZGVid2JweTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ODg3OTItMzdiNi00ODc3LWFkOWUt
NmI3NzAzYjZkMzg5LzEvemxrWWxOdzBULXR6ampmQUVYejVUMTNKUTZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80ODg3OTItMzdiNi00ODc3LWFkOWUtNmI3NzAzYjZkMzg5
LzEvTWd6ZjRXVFM1NXc2YUk0RHdRZGVid2JweTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCU/MA0G
CSqGSIb3DQEBCwUAA4IBAQA4Tr2crFhrC0Z5eCLL5iFsjmuGrkLPhOOblnz6EAjk
y2izDEgJt42m5/xmB7QgqQyyhvQlU4t3o57aE6zvnzDRz/i/tJyeBtpUdFt0nv3m
XvuTc0ptYU9femh6QHSzG/vwZx3gu252sH9cyzXsX/iuF8YAg8qaBVR5XqN5ct+h
GAp2AD9OY8+12ZNPQGhw45D/saBeyZ9xeSKg7GyEzdml9kX6oQhcaeSxI6MI1ua9
WSVSetcbkfXqPw6E/SBrwIZCCGIwsIUJ2BJxH8hhHv+7lnr/yT2s+XXd5okdhbq2
3beuqJDbRDaHP9xVdTNfcBNHZmMwByYYXk4X0j6RUJFP
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:34:40 2026 by rpki-client