Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/ZRh3pZ05kNEQxO0UbrFtzVM39i0.roa
File: ZRh3pZ05kNEQxO0UbrFtzVM39i0.roa (raw, json)
Hash identifier: Un3wT8GPR+7E06qoTt0jBaNkX6d2hzTILScAwxIEZ9U=
Subject key identifier: 65:18:77:A5:9D:39:90:D1:10:C4:ED:14:6E:B1:6D:CD:53:37:F6:2D
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 01A0A52E521DBE83856A01FB2AF4735FF075
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/ZRh3pZ05kNEQxO0UbrFtzVM39i0.roa
Signing time: Tue 15 Sep 2026 13:07:51 +0000
ROA not before: Tue 15 Sep 2026 13:07:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.70.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:2e:52:1d:be:83:85:6a:01:fb:2a:f4:73:5f:f0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Sep 15 13:07:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=651877a59d3990d110c4ed146eb16dcd5337f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:21:6d:56:b3:af:17:6b:aa:75:83:1a:21:
58:cc:a9:e9:82:33:a5:b8:53:ac:7d:11:d5:3a:d0:
ec:b9:62:f8:d5:ed:8d:58:d1:08:56:de:cb:bb:58:
fa:56:1d:30:61:25:8c:df:96:e6:5e:38:9a:4e:9b:
38:67:ea:c6:1e:d8:24:81:f5:81:3f:8f:14:97:e3:
ca:7b:4a:4a:44:21:bd:2d:62:e8:b0:7c:05:4d:09:
c7:33:3f:48:32:55:74:3f:d3:98:1d:14:58:c2:0a:
42:1c:a7:6d:c9:32:57:b0:35:e5:84:78:9e:48:2a:
77:c7:76:46:3c:42:b8:f1:18:b6:ea:fb:86:d0:3f:
c0:33:7b:36:ff:39:29:ca:24:2f:b3:4c:c3:83:bc:
15:1b:65:ab:e2:f7:0b:bf:a7:18:c6:02:8a:1f:39:
ab:49:18:42:76:1d:6a:4e:d2:6c:3a:97:c3:61:53:
ea:e0:a0:8b:05:36:d8:bb:fd:95:ef:ec:c8:dd:50:
a5:9f:c4:a3:5c:ce:86:25:07:05:fb:44:c0:c2:ee:
fc:41:34:68:90:46:ee:b4:04:fd:b2:a0:bb:f6:73:
97:ad:c2:1f:c1:37:09:2f:0e:e6:04:4f:ed:78:19:
b9:ab:80:0a:db:50:96:aa:6f:4a:44:51:00:26:74:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:18:77:A5:9D:39:90:D1:10:C4:ED:14:6E:B1:6D:CD:53:37:F6:2D
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/ZRh3pZ05kNEQxO0UbrFtzVM39i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.231.0/24
Signature Algorithm: sha256WithRSAEncryption
67:98:c3:95:6f:61:9c:04:05:84:03:88:28:62:ca:4e:cf:04:
4d:51:be:16:9e:a4:0a:d5:7c:6a:9b:17:3f:f1:5c:90:44:3c:
46:7a:18:aa:21:e7:c3:7e:f4:a4:39:c4:f3:4c:88:5b:96:85:
be:5d:0b:25:23:06:9f:38:2e:fb:58:d7:fa:aa:be:47:d7:85:
a9:d2:2f:f4:24:c8:59:f0:bd:0b:d7:f2:29:54:bd:29:c4:a3:
22:f9:a0:b0:86:78:c1:89:07:ee:43:80:c7:b2:82:e8:4c:32:
a0:b7:23:cf:98:06:91:14:a8:e9:15:be:2e:9e:54:b8:19:44:
9b:f2:3f:75:a3:67:03:0b:1d:d0:38:72:21:8d:ab:e4:86:51:
98:ad:80:5d:6d:2c:f7:f6:f6:6d:43:2e:66:4d:81:9b:24:69:
07:e9:b1:a3:0f:44:e0:d9:49:99:37:aa:90:30:c1:3e:98:17:
78:ec:1c:ee:78:47:bd:45:97:58:2a:28:0c:c8:6b:6f:89:be:
e8:48:46:f2:2b:80:21:11:69:e5:63:26:55:f4:23:fd:0d:ac:
d2:52:8a:be:a5:52:32:ae:73:28:2b:a4:d1:a1:1a:70:3a:f4:
c4:d8:e0:48:e9:9f:eb:0c:82:51:af:ab:72:be:cf:43:23:d4:
66:9a:fd:d4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaClLlIdvoOFagH7KvRzX/B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjYwOTE1MTMwNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTE4NzdhNTlkMzk5MGQxMTBjNGVkMTQ2ZWIxNmRjZDUzMzdmNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn8hbVazrxdrqnWDGiFYzKnpgjOl
uFOsfRHVOtDsuWL41e2NWNEIVt7Lu1j6Vh0wYSWM35bmXjiaTps4Z+rGHtgkgfWB
P48Ul+PKe0pKRCG9LWLosHwFTQnHMz9IMlV0P9OYHRRYwgpCHKdtyTJXsDXlhHie
SCp3x3ZGPEK48Ri26vuG0D/AM3s2/zkpyiQvs0zDg7wVG2Wr4vcLv6cYxgKKHzmr
SRhCdh1qTtJsOpfDYVPq4KCLBTbYu/2V7+zI3VCln8SjXM6GJQcF+0TAwu78QTRo
kEbutAT9sqC79nOXrcIfwTcJLw7mBE/teBm5q4AK21CWqm9KRFEAJnTKdwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGUYd6WdOZDREMTtFG6xbc1TN/YtMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xL1pSaDNwWjA1a05FUXhPMFVickZ0elZNMzlpMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3LTYxZDczMzNmODU3
MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5Rucw
DQYJKoZIhvcNAQELBQADggEBAGeYw5VvYZwEBYQDiChiyk7PBE1RvhaepArVfGqb
Fz/xXJBEPEZ6GKoh58N+9KQ5xPNMiFuWhb5dCyUjBp84LvtY1/qqvkfXhanSL/Qk
yFnwvQvX8ilUvSnEoyL5oLCGeMGJB+5DgMeyguhMMqC3I8+YBpEUqOkVvi6eVLgZ
RJvyP3WjZwMLHdA4ciGNq+SGUZitgF1tLPf29m1DLmZNgZskaQfpsaMPRODZSZk3
qpAwwT6YF3jsHO54R71Fl1gqKAzIa2+JvuhIRvIrgCERaeVjJlX0I/0NrNJSir6l
UjKucygrpNGhGnA69MTY4Ejpn+sMglGvq3K+z0Mj1Gaa/dQ=
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:39:01 2026 by rpki-client