Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZbUweEEJKVD79jkf1BI8n_LAGBA.roa
File: ZbUweEEJKVD79jkf1BI8n_LAGBA.roa (raw, json)
Hash identifier: EKN+ZZmOIAb/ZU0kf6P0ulg8y4DLs3pErvtPnRzPPT4=
Subject key identifier: 65:B5:30:78:41:09:29:50:FB:F6:39:1F:D4:12:3C:9F:F2:C0:18:10
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D775AA0F4990F10A1E494D55D52ABF847
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZbUweEEJKVD79jkf1BI8n_LAGBA.roa
Signing time: Fri 10 Apr 2026 12:25:21 +0000
ROA not before: Fri 10 Apr 2026 12:25:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 94.103.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:5a:a0:f4:99:0f:10:a1:e4:94:d5:5d:52:ab:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 10 12:25:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65b5307841092950fbf6391fd4123c9ff2c01810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:15:ba:86:71:7b:a7:59:81:21:ad:f8:37:
35:bf:aa:aa:1d:3f:2a:8a:eb:d9:7f:ca:14:0f:fc:
43:94:f8:f4:a6:f4:1d:a9:f0:24:97:4e:4c:b8:f0:
0a:7c:34:57:4d:cf:a7:1c:61:b6:52:51:39:a2:24:
94:83:ba:3b:64:a7:b2:fe:7e:5e:f2:5e:3e:70:c0:
4a:9c:3f:f4:b1:b1:a5:b5:1b:43:91:ab:56:1f:5a:
47:93:61:62:f5:a0:62:34:f8:ce:30:4f:3d:48:90:
18:cf:11:8f:61:f6:3f:0b:7c:61:90:a8:53:c8:f8:
52:19:08:aa:59:b4:9d:fe:ff:f2:4c:c0:4f:58:3c:
50:f6:a1:8a:61:17:95:e5:59:7b:65:c8:32:37:e1:
3f:35:6d:bb:eb:20:fb:c5:7f:3a:11:9c:1b:d6:55:
e6:8e:b3:ea:cb:b5:ca:c6:fa:b4:f8:99:ec:c8:87:
18:af:51:d2:f7:2f:9b:bb:b9:a8:8f:36:b5:67:9d:
64:76:08:2a:46:c6:3b:f3:88:8c:e3:5b:11:f9:70:
a1:0e:62:b9:92:eb:33:4b:e9:6e:28:51:f1:75:56:
3c:8d:e3:a1:dd:aa:cb:45:78:b0:d2:24:54:7b:60:
bb:2f:21:03:b2:ce:16:08:a0:ee:1c:12:fc:2a:ca:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B5:30:78:41:09:29:50:FB:F6:39:1F:D4:12:3C:9F:F2:C0:18:10
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZbUweEEJKVD79jkf1BI8n_LAGBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e5:a5:f6:19:8c:40:ba:f3:6a:53:47:65:57:d8:13:69:1a:
fe:e4:5e:c3:dc:dc:80:b3:66:6f:1a:ed:7d:52:51:5e:ed:ed:
bc:c8:61:18:55:7a:89:7f:0a:9f:98:db:56:0b:50:a8:fb:54:
51:ff:90:01:81:bc:e6:2f:a2:d5:fd:2f:58:70:04:e9:16:e3:
1a:2f:f8:07:14:f6:91:cd:f8:d2:3c:e5:12:87:8b:4d:4a:03:
a4:ee:3c:2d:07:41:6d:b0:b4:15:dd:84:cf:3b:58:7a:a4:99:
cf:d7:ec:8c:77:0d:e1:8d:e1:74:1c:8c:af:c8:75:bd:1c:af:
90:82:6c:a2:0e:e9:3d:e2:44:44:c5:3a:14:71:3f:a3:b0:d6:
69:fe:1d:fe:d9:94:4e:55:38:2f:a1:8e:57:73:82:27:cd:fb:
c7:ca:60:2c:17:dc:ce:6c:5b:1f:e0:db:d4:02:63:8a:ec:2b:
55:fd:5a:6c:72:27:52:47:51:9c:ba:9e:ec:20:32:76:09:52:
d9:b6:86:90:8c:d2:60:51:3c:07:4f:80:09:00:14:c7:90:ac:
19:0f:e3:a5:94:ba:04:f5:29:d6:78:0c:27:c6:cd:41:00:e8:
5c:14:ae:27:58:b2:8e:19:60:98:48:d4:76:80:32:bb:d6:10:
03:8a:bc:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ13WqD0mQ8QoeSU1V1Sq/hHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNDEwMTIyNTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWI1MzA3ODQxMDkyOTUwZmJmNjM5MWZkNDEyM2M5ZmYyYzAxODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5AVuoZxe6dZgSGt+Dc1v6qqHT8q
iuvZf8oUD/xDlPj0pvQdqfAkl05MuPAKfDRXTc+nHGG2UlE5oiSUg7o7ZKey/n5e
8l4+cMBKnD/0sbGltRtDkatWH1pHk2Fi9aBiNPjOME89SJAYzxGPYfY/C3xhkKhT
yPhSGQiqWbSd/v/yTMBPWDxQ9qGKYReV5Vl7ZcgyN+E/NW276yD7xX86EZwb1lXm
jrPqy7XKxvq0+JnsyIcYr1HS9y+bu7mojza1Z51kdggqRsY784iM41sR+XChDmK5
kuszS+luKFHxdVY8jeOh3arLRXiw0iRUe2C7LyEDss4WCKDuHBL8KsqCUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGW1MHhBCSlQ+/Y5H9QSPJ/ywBgQMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWmJVd2VFRUpLVkQ3OWprZjFCSThuX0xBR0JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmd/MA0G
CSqGSIb3DQEBCwUAA4IBAQBK5aX2GYxAuvNqU0dlV9gTaRr+5F7D3NyAs2ZvGu19
UlFe7e28yGEYVXqJfwqfmNtWC1Co+1RR/5ABgbzmL6LV/S9YcATpFuMaL/gHFPaR
zfjSPOUSh4tNSgOk7jwtB0FtsLQV3YTPO1h6pJnP1+yMdw3hjeF0HIyvyHW9HK+Q
gmyiDuk94kRExToUcT+jsNZp/h3+2ZROVTgvoY5Xc4InzfvHymAsF9zObFsf4NvU
AmOK7CtV/VpscidSR1Gcup7sIDJ2CVLZtoaQjNJgUTwHT4AJABTHkKwZD+OllLoE
9SnWeAwnxs1BAOhcFK4nWLKOGWCYSNR2gDK71hADirwM
-----END CERTIFICATE-----
Generated at Mon Apr 13 02:53:36 2026 by rpki-client