Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Zwtbe7ic2Kn9h-bnxBlbUXxufDY.roa
File: Zwtbe7ic2Kn9h-bnxBlbUXxufDY.roa (raw, json)
Hash identifier: HdRfqhk92JFMDfRaJg0F7dCh3Ei5q9gPYexRWTdtp+A=
Subject key identifier: 67:0B:5B:7B:B8:9C:D8:A9:FD:87:E6:E7:C4:19:5B:51:7C:6E:7C:36
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F236877ED104DCC40E3442A4C5DDE690B
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Zwtbe7ic2Kn9h-bnxBlbUXxufDY.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9465
IP address blocks: 45.142.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:77:ed:10:4d:cc:40:e3:44:2a:4c:5d:de:69:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=670b5b7bb89cd8a9fd87e6e7c4195b517c6e7c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:41:8f:f5:b4:39:cc:6a:23:5e:28:66:65:2a:
da:51:98:83:65:53:1f:6d:5e:11:a8:97:ee:2d:dd:
fc:e0:ab:ed:a6:ed:5c:ad:67:c7:dc:ea:1a:8e:d7:
b9:da:f4:75:67:e1:7e:54:05:86:8c:93:7d:43:3a:
28:80:5b:89:65:d5:0e:e7:55:8f:2e:31:2f:2f:98:
fb:7b:9a:77:92:46:fd:49:ee:b6:c5:af:cd:1b:6b:
e1:f6:02:7f:79:ec:b7:6c:13:a1:dc:ef:c3:f2:be:
72:5e:53:28:0f:16:fc:81:b9:17:c8:5c:71:4b:70:
64:91:60:e8:6c:2c:0c:43:5e:6f:1d:91:c1:d5:ad:
40:52:47:15:d2:f7:1a:1b:13:83:c0:8e:64:a0:40:
62:43:37:86:30:65:9c:f4:ce:b0:4f:ab:5d:c9:d6:
5e:00:93:d9:3b:89:6e:10:8a:2a:c9:65:dd:d7:54:
5f:49:18:ab:ad:85:96:2b:a9:3e:86:13:c2:9c:04:
52:45:58:ca:d7:8a:5b:5b:28:f6:f5:f9:aa:f7:02:
5d:7e:42:a4:87:e4:5d:d4:3e:20:3c:af:4c:f2:d0:
3c:ef:51:8d:3c:e2:10:76:f8:9d:85:76:fb:a0:ae:
85:c1:bf:64:3e:0b:91:b2:2c:16:1f:7e:98:63:e3:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:5B:7B:B8:9C:D8:A9:FD:87:E6:E7:C4:19:5B:51:7C:6E:7C:36
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Zwtbe7ic2Kn9h-bnxBlbUXxufDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.154.0/24
Signature Algorithm: sha256WithRSAEncryption
03:48:9b:8d:21:b8:72:4a:bb:b6:6f:c7:9d:7c:1b:c2:e0:8e:
5b:c6:83:c3:30:4c:7e:73:d8:0c:e2:82:e8:42:87:2f:7f:47:
ca:fc:4b:9b:9b:4d:62:bf:1c:61:e5:58:78:62:8f:14:b6:05:
96:24:15:43:ce:c8:ee:90:19:7f:67:be:7b:bf:9c:db:d1:ae:
bf:a8:5f:ee:6a:bd:9c:47:e4:34:ce:22:f0:4c:e4:d3:86:24:
9e:ac:7f:21:75:5a:42:56:a4:40:3a:db:18:6e:d1:30:98:7f:
45:f4:3a:1b:3e:61:14:c6:7e:b2:99:4b:55:b0:05:67:c0:fc:
49:64:ae:7e:44:a0:0e:f4:3c:10:67:03:a3:58:62:38:0a:8c:
e7:92:11:ff:2b:94:2f:ca:ad:2c:80:80:25:72:d9:07:bd:a6:
00:1d:4b:52:9e:70:e3:9e:c2:d5:a5:58:25:8e:6f:4b:0b:33:
2e:52:4f:62:ca:5f:a4:a3:cc:f4:7b:6a:31:30:e5:56:91:c2:
74:99:16:b5:c5:52:94:21:df:5a:84:55:f1:76:0e:81:16:12:
d2:20:3c:a3:be:1f:76:cb:a8:79:47:6b:4b:24:29:29:ec:58:
6c:8c:00:86:91:d5:35:90:dc:cc:99:eb:93:8c:6d:c6:5e:3e:
e9:32:62:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHftEE3MQONEKkxd3mkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQ1NmUxMWI3N2JmMmU0ODIwZGZiNjk1NDFkNGJlMGVh
OTRlN2MwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzBiNWI3YmI4OWNkOGE5ZmQ4N2U2ZTdjNDE5NWI1MTdjNmU3YzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60GP9bQ5zGojXihmZSraUZiDZVMf
bV4RqJfuLd384Kvtpu1crWfH3Ooajte52vR1Z+F+VAWGjJN9QzoogFuJZdUO51WP
LjEvL5j7e5p3kkb9Se62xa/NG2vh9gJ/eey3bBOh3O/D8r5yXlMoDxb8gbkXyFxx
S3BkkWDobCwMQ15vHZHB1a1AUkcV0vcaGxODwI5koEBiQzeGMGWc9M6wT6tdydZe
AJPZO4luEIoqyWXd11RfSRirrYWWK6k+hhPCnARSRVjK14pbWyj29fmq9wJdfkKk
h+Rd1D4gPK9M8tA871GNPOIQdvidhXb7oK6Fwb9kPguRsiwWH36YY+PFZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcLW3u4nNip/Yfm58QZW1F8bnw2MB8GA1UdIwQY
MBaAFNNEVuEbd78uSCDftpVB1L4OqU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvWnd0YmU3aWMyS245aC1ibnhCbGJVWHh1ZkRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY6aMA0G
CSqGSIb3DQEBCwUAA4IBAQADSJuNIbhySru2b8edfBvC4I5bxoPDMEx+c9gM4oLo
Qocvf0fK/Eubm01ivxxh5Vh4Yo8UtgWWJBVDzsjukBl/Z757v5zb0a6/qF/uar2c
R+Q0ziLwTOTThiSerH8hdVpCVqRAOtsYbtEwmH9F9DobPmEUxn6ymUtVsAVnwPxJ
ZK5+RKAO9DwQZwOjWGI4CoznkhH/K5Qvyq0sgIAlctkHvaYAHUtSnnDjnsLVpVgl
jm9LCzMuUk9iyl+ko8z0e2oxMOVWkcJ0mRa1xVKUId9ahFXxdg6BFhLSIDyjvh92
y6h5R2tLJCkp7FhsjACGkdU1kNzMmeuTjG3GXj7pMmIR
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:46:13 2026 by rpki-client