Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zluXeBt3ECuuscFYnQ1kBvF1TX4.roa
File: zluXeBt3ECuuscFYnQ1kBvF1TX4.roa (raw, json)
Hash identifier: LK2AUXGuSBLngwhNrlxbqrdNS9/UCKsondwX7dYYxCg=
Subject key identifier: CE:5B:97:78:1B:77:10:2B:AE:B1:C1:58:9D:0D:64:06:F1:75:4D:7E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0D9E36A53FF6B25C257CC3195E1FBC21F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zluXeBt3ECuuscFYnQ1kBvF1TX4.roa
Signing time: Fri 25 Sep 2026 18:45:54 +0000
ROA not before: Fri 25 Sep 2026 18:45:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212353
IP address blocks: 94.103.166.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 08:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:e3:6a:53:ff:6b:25:c2:57:cc:31:95:e1:fb:c2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 25 18:45:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce5b97781b77102baeb1c1589d0d6406f1754d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:02:00:ed:68:41:16:8f:08:e1:d5:72:b9:
80:ca:5c:11:88:89:d1:05:29:93:f3:62:2e:1f:fd:
b2:49:2c:50:3b:e4:e4:96:be:34:15:0b:a2:cc:de:
aa:fd:c4:74:b5:bb:bf:31:23:2f:6f:56:d2:76:26:
b9:a9:d6:27:98:e9:90:30:bc:92:cd:68:0c:b8:3f:
1d:e4:2e:fc:ee:79:84:bf:a5:48:ac:6d:24:3e:82:
2a:5a:a4:3b:75:fb:03:a3:46:79:e0:e2:08:89:8e:
c3:ed:ce:11:5e:6e:45:70:ba:b4:5c:c8:3d:44:6b:
0b:14:f7:ab:16:c8:c2:16:ad:9b:fb:12:12:bc:0f:
e5:b2:aa:48:14:87:dc:b8:52:83:92:01:f3:c1:65:
e0:cf:b9:2e:7c:c7:b0:8d:05:02:39:4f:fe:f9:b4:
01:12:45:41:7c:33:95:2d:62:38:35:5b:66:99:4e:
28:6e:55:45:8c:10:8f:df:ed:0e:dc:f3:b0:fc:d1:
b4:f6:40:2d:7a:9f:14:f0:41:b8:a2:d9:1f:fa:de:
3b:db:b7:57:e4:a8:b2:2d:5c:9a:ef:38:55:5e:96:
21:4f:a5:95:91:ec:fc:4b:46:97:e7:55:9a:69:e1:
52:be:a2:eb:91:4f:72:07:86:7b:8f:80:40:95:6d:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:97:78:1B:77:10:2B:AE:B1:C1:58:9D:0D:64:06:F1:75:4D:7E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zluXeBt3ECuuscFYnQ1kBvF1TX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:56:d1:9e:e5:7a:2f:14:d2:29:3a:b6:8d:49:92:19:42:f4:
5f:ac:11:1d:a9:01:08:47:e6:30:fb:ce:94:c8:ce:04:eb:0e:
7c:b7:6d:51:2c:11:40:5d:32:37:d7:9f:0b:63:ab:3d:dc:26:
80:0e:12:56:c7:3a:b3:36:8b:1e:39:1c:1a:0d:41:43:d2:60:
59:b4:7e:e7:da:59:c4:44:9c:9c:ef:31:c9:8f:17:0e:a5:ca:
b9:7a:5e:8c:55:ad:fd:99:d9:76:29:9d:68:0f:72:8f:ef:5b:
10:18:01:5a:81:96:cd:0d:79:80:82:4c:c3:03:60:54:e8:49:
d0:f5:d4:00:c7:7f:d9:dc:5c:1c:4f:c7:d9:29:52:4f:47:58:
0d:34:4b:6e:f3:71:db:b0:8d:95:76:4b:f1:d1:80:b3:3d:3f:
bf:e0:6f:bd:5e:62:26:97:34:43:97:9f:69:68:92:1f:36:5c:
a7:2b:15:53:5a:60:95:40:a7:05:d4:14:71:fc:83:62:27:83:
95:5c:6f:6d:f7:d7:e2:d9:77:7c:00:dd:fd:11:3c:3a:24:ec:
89:f0:bd:de:02:ce:46:e5:fd:7f:85:e4:dc:b3:a3:34:a5:3b:
11:b9:98:1c:20:61:45:96:27:aa:e1:20:b5:00:f2:7f:56:85:
79:06:8f:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDZ42pT/2slwlfMMZXh+8IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTI1MTg0NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTViOTc3ODFiNzcxMDJiYWViMWMxNTg5ZDBkNjQwNmYxNzU0ZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxECAO1oQRaPCOHVcrmAylwRiInR
BSmT82IuH/2ySSxQO+Tklr40FQuizN6q/cR0tbu/MSMvb1bSdia5qdYnmOmQMLyS
zWgMuD8d5C787nmEv6VIrG0kPoIqWqQ7dfsDo0Z54OIIiY7D7c4RXm5FcLq0XMg9
RGsLFPerFsjCFq2b+xISvA/lsqpIFIfcuFKDkgHzwWXgz7kufMewjQUCOU/++bQB
EkVBfDOVLWI4NVtmmU4oblVFjBCP3+0O3POw/NG09kAtep8U8EG4otkf+t4727dX
5KiyLVya7zhVXpYhT6WVkez8S0aX51WaaeFSvqLrkU9yB4Z7j4BAlW1LXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5bl3gbdxArrrHBWJ0NZAbxdU1+MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvemx1WGVCdDNFQ3V1c2NGWW5RMWtCdkYxVFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmemMA0G
CSqGSIb3DQEBCwUAA4IBAQA7VtGe5XovFNIpOraNSZIZQvRfrBEdqQEIR+Yw+86U
yM4E6w58t21RLBFAXTI3158LY6s93CaADhJWxzqzNoseORwaDUFD0mBZtH7n2lnE
RJyc7zHJjxcOpcq5el6MVa39mdl2KZ1oD3KP71sQGAFagZbNDXmAgkzDA2BU6EnQ
9dQAx3/Z3FwcT8fZKVJPR1gNNEtu83HbsI2Vdkvx0YCzPT+/4G+9XmImlzRDl59p
aJIfNlynKxVTWmCVQKcF1BRx/INiJ4OVXG9t99fi2Xd8AN39ETw6JOyJ8L3eAs5G
5f1/heTcs6M0pTsRuZgcIGFFlieq4SC1APJ/VoV5Bo/b
-----END CERTIFICATE-----
Generated at Fri Oct 23 19:34:17 2026 by rpki-client