Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ZLh5PnaXaFDa2H68oOQrm4QWzUc.roa
File: ZLh5PnaXaFDa2H68oOQrm4QWzUc.roa (raw, json)
Hash identifier: n8EPYXHHmAj3BuzhP+7twXQ5g88qMPOrqw3/TWqaivg=
Subject key identifier: 64:B8:79:3E:76:97:68:50:DA:D8:7E:BC:A0:E4:2B:9B:84:16:CD:47
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019FD23DD68EFE0A45A996AD095072963145
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ZLh5PnaXaFDa2H68oOQrm4QWzUc.roa
Signing time: Wed 05 Aug 2026 14:04:55 +0000
ROA not before: Wed 05 Aug 2026 14:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 194.113.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:3d:d6:8e:fe:0a:45:a9:96:ad:09:50:72:96:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Aug 5 14:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64b8793e76976850dad87ebca0e42b9b8416cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:dc:cc:24:08:a3:2b:91:e3:8a:0a:13:23:
f5:9d:be:d9:ae:2e:35:e0:6b:a2:1a:9f:a1:92:bb:
a9:20:26:3d:16:ef:ca:ee:06:fa:f6:24:0d:e6:de:
0b:8c:4f:0b:bc:00:9f:37:81:bc:9e:48:b1:82:99:
2d:19:b5:fb:3b:32:09:91:26:a7:ca:01:f2:4c:4c:
d2:41:34:0b:8c:21:54:c1:c8:50:e3:21:e9:92:60:
69:be:c3:37:7e:16:a5:ca:c3:54:4d:9f:32:ca:6e:
5c:ed:7f:17:c6:83:98:73:a9:f4:d4:5e:92:f7:65:
54:b7:b1:0f:c4:a5:81:dd:16:12:99:d7:bc:ea:26:
40:9d:69:29:78:17:1d:3b:9d:7f:01:2a:77:c5:bd:
e7:05:95:8f:aa:7c:99:52:1e:2f:68:e1:ab:55:31:
63:98:35:58:7c:f1:8a:c5:ca:d2:96:41:e3:4c:51:
9a:7b:ad:69:48:bc:f7:d3:25:c8:ff:8d:76:46:20:
8e:db:9d:27:c9:4e:d8:d6:16:c6:5c:54:10:48:a6:
3d:d2:4b:43:88:73:71:4e:40:89:df:00:9b:70:9f:
48:03:af:9d:e0:c8:47:bc:2a:91:7a:3d:51:3b:99:
ff:0b:8d:9f:a4:6d:11:99:2d:22:eb:74:ab:72:52:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:79:3E:76:97:68:50:DA:D8:7E:BC:A0:E4:2B:9B:84:16:CD:47
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ZLh5PnaXaFDa2H68oOQrm4QWzUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f6:89:e5:ff:1d:f1:51:f1:41:13:4d:f5:12:ca:43:9d:6b:
78:72:72:d8:db:78:59:c1:4d:de:38:0d:b0:2d:fe:26:76:99:
d9:0f:51:d8:b9:33:33:60:ef:dd:a9:ba:d0:a0:0e:74:08:eb:
40:72:f0:79:56:79:f5:92:dd:f3:8e:52:d7:da:27:bc:5d:c0:
9d:e1:d6:30:4e:62:8f:12:fc:c6:e5:4a:1d:ce:63:ae:e0:ca:
bc:4b:d1:eb:8d:6d:8a:b1:34:2d:45:79:09:7d:20:25:bc:06:
04:00:21:0a:1b:8d:1f:50:45:0b:b3:50:1b:67:33:50:f5:02:
50:fb:50:a8:e9:bb:77:96:1b:8e:97:0b:4b:87:4a:1d:9a:40:
f7:cf:6b:39:3d:00:54:71:ba:27:01:7f:02:84:e2:8e:1f:5e:
35:0f:ec:77:99:2f:a8:a5:6d:bc:0b:88:84:ad:16:22:bc:f7:
72:bd:21:dc:7c:5c:91:49:cc:a1:37:88:d4:5f:9f:14:e8:66:
e4:be:03:2a:45:97:8a:63:f5:8e:ee:0c:0e:4f:5a:de:00:dd:
99:25:66:e5:fd:e5:6c:de:88:e4:27:ac:6b:2d:6a:70:26:65:
8c:3d:a2:d5:f3:db:2d:04:ba:91:e8:96:17:17:91:5c:06:84:
3b:e7:94:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/SPdaO/gpFqZatCVByljFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjYwODA1MTQwNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGI4NzkzZTc2OTc2ODUwZGFkODdlYmNhMGU0MmI5Yjg0MTZjZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA3czCQIoyuR44oKEyP1nb7Zri41
4GuiGp+hkrupICY9Fu/K7gb69iQN5t4LjE8LvACfN4G8nkixgpktGbX7OzIJkSan
ygHyTEzSQTQLjCFUwchQ4yHpkmBpvsM3fhalysNUTZ8yym5c7X8XxoOYc6n01F6S
92VUt7EPxKWB3RYSmde86iZAnWkpeBcdO51/ASp3xb3nBZWPqnyZUh4vaOGrVTFj
mDVYfPGKxcrSlkHjTFGae61pSLz30yXI/412RiCO250nyU7Y1hbGXFQQSKY90ktD
iHNxTkCJ3wCbcJ9IA6+d4MhHvCqRej1RO5n/C42fpG0RmS0i63SrclKT3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGS4eT52l2hQ2th+vKDkK5uEFs1HMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvWkxoNVBuYVhhRkRhMkg2OG9PUXJtNFFXelVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnHuMA0G
CSqGSIb3DQEBCwUAA4IBAQBP9onl/x3xUfFBE031EspDnWt4cnLY23hZwU3eOA2w
Lf4mdpnZD1HYuTMzYO/dqbrQoA50COtAcvB5Vnn1kt3zjlLX2ie8XcCd4dYwTmKP
EvzG5UodzmOu4Mq8S9HrjW2KsTQtRXkJfSAlvAYEACEKG40fUEULs1AbZzNQ9QJQ
+1Co6bt3lhuOlwtLh0odmkD3z2s5PQBUcbonAX8ChOKOH141D+x3mS+opW28C4iE
rRYivPdyvSHcfFyRScyhN4jUX58U6GbkvgMqRZeKY/WO7gwOT1reAN2ZJWbl/eVs
3ojkJ6xrLWpwJmWMPaLV89stBLqR6JYXF5FcBoQ755S5
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:21 2026 by rpki-client