Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZaN62AyoE2bGDOFvLV7-K43WVN0.roa
File: ZaN62AyoE2bGDOFvLV7-K43WVN0.roa (raw, json)
Hash identifier: nVMWx/nuayK8PepB3KULXM24ufH5QHrfgEo+oQVTKL0=
Subject key identifier: 65:A3:7A:D8:0C:A8:13:66:C6:0C:E1:6F:2D:5E:FE:2B:8D:D6:54:DD
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A02F89B0EA7790FBA3C175F3A1C398CCAD
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZaN62AyoE2bGDOFvLV7-K43WVN0.roa
Signing time: Sun 23 Aug 2026 16:52:27 +0000
ROA not before: Sun 23 Aug 2026 16:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 109.66.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:89:b0:ea:77:90:fb:a3:c1:75:f3:a1:c3:98:cc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 23 16:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65a37ad80ca81366c60ce16f2d5efe2b8dd654dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:6c:91:4c:b2:3c:25:db:f6:6d:4f:62:98:
d2:66:5e:e1:dd:49:a6:c6:54:55:24:47:8d:ca:b9:
6c:49:cc:8c:2b:07:f2:9c:2e:45:02:91:6b:29:ec:
d1:2e:28:ae:63:83:d1:8e:50:47:e8:70:ff:81:2c:
e8:ab:cd:e0:52:d5:5d:9b:f6:1b:65:0e:5c:49:17:
95:2b:43:fe:65:9a:99:fc:a5:5d:86:5f:56:5d:e7:
e5:f8:88:dc:b6:84:c2:a7:49:21:4c:cb:53:89:7e:
cb:89:0b:20:cb:df:94:fa:f2:c0:c7:a8:d8:cf:11:
43:94:78:50:04:15:19:87:8e:2a:89:ac:53:a0:6f:
a7:17:b3:24:95:11:05:af:27:e0:ea:61:aa:08:92:
e2:2a:05:66:4d:c8:39:27:83:41:68:11:ae:e0:f3:
9c:57:e6:5d:8a:5c:fd:9b:6a:74:04:b3:e3:ec:57:
31:06:40:9c:3c:26:18:f8:84:38:35:1f:aa:df:9e:
84:b8:74:e5:03:83:66:75:61:38:66:0a:af:f0:26:
39:a4:c5:23:11:d2:86:51:b4:31:4f:fa:0c:12:5b:
d2:97:53:58:c5:1c:85:ad:ba:d9:b1:8b:b6:a1:7e:
77:1b:ea:d3:4a:3b:d0:8c:7c:f6:70:30:4f:5b:c7:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A3:7A:D8:0C:A8:13:66:C6:0C:E1:6F:2D:5E:FE:2B:8D:D6:54:DD
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZaN62AyoE2bGDOFvLV7-K43WVN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.197.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:66:f6:d1:b6:3d:1c:d4:c8:00:32:25:41:2f:5a:fb:79:44:
28:53:01:7b:54:ee:00:e3:7d:40:55:00:9c:f9:ab:88:94:9e:
16:91:75:96:12:44:43:65:88:1a:74:5f:04:2d:ae:8e:37:37:
ef:36:3a:d1:09:3a:43:be:51:b3:0c:0b:27:17:73:2d:63:cd:
bd:a0:ef:5d:49:83:7d:bb:d6:2d:ae:24:ae:7c:c0:3f:66:33:
4d:6c:1c:f0:90:fa:26:90:d9:ee:93:ba:86:83:67:ff:93:82:
62:5a:ff:9a:80:bd:7e:75:2c:be:96:e9:a0:8b:92:5f:ca:f7:
a5:54:fe:23:e8:e8:df:68:2a:1c:ba:d1:34:70:ea:00:2a:37:
cd:c1:f8:69:b7:6c:64:50:36:0c:59:4e:7c:5b:b0:c2:90:04:
48:a7:3c:99:c7:9e:46:be:0a:ab:87:2a:b3:a0:5c:66:7d:b7:
43:6a:d9:14:70:87:84:80:c8:d4:87:af:be:9e:32:8d:93:df:
87:af:4c:41:3e:05:bf:39:10:c9:71:76:2f:0d:f4:05:c8:72:
b3:ec:0b:0f:da:fc:76:9f:c0:bc:a6:50:7c:42:88:6c:25:1b:
b7:cd:cc:ba:db:4f:71:07:ed:34:71:4d:fc:d5:b0:75:72:78:
6e:c7:b2:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAvibDqd5D7o8F186HDmMytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODIzMTY1MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWEzN2FkODBjYTgxMzY2YzYwY2UxNmYyZDVlZmUyYjhkZDY1NGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdpskUyyPCXb9m1PYpjSZl7h3Umm
xlRVJEeNyrlsScyMKwfynC5FApFrKezRLiiuY4PRjlBH6HD/gSzoq83gUtVdm/Yb
ZQ5cSReVK0P+ZZqZ/KVdhl9WXefl+IjctoTCp0khTMtTiX7LiQsgy9+U+vLAx6jY
zxFDlHhQBBUZh44qiaxToG+nF7MklREFryfg6mGqCJLiKgVmTcg5J4NBaBGu4POc
V+Zdilz9m2p0BLPj7FcxBkCcPCYY+IQ4NR+q356EuHTlA4NmdWE4Zgqv8CY5pMUj
EdKGUbQxT/oMElvSl1NYxRyFrbrZsYu2oX53G+rTSjvQjHz2cDBPW8dKfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWjetgMqBNmxgzhby1e/iuN1lTdMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvWmFONjJBeW9FMmJHRE9GdkxWNy1LNDNXVk4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbULFMA0G
CSqGSIb3DQEBCwUAA4IBAQAOZvbRtj0c1MgAMiVBL1r7eUQoUwF7VO4A431AVQCc
+auIlJ4WkXWWEkRDZYgadF8ELa6ONzfvNjrRCTpDvlGzDAsnF3MtY829oO9dSYN9
u9YtriSufMA/ZjNNbBzwkPomkNnuk7qGg2f/k4JiWv+agL1+dSy+lumgi5Jfyvel
VP4j6OjfaCocutE0cOoAKjfNwfhpt2xkUDYMWU58W7DCkARIpzyZx55Gvgqrhyqz
oFxmfbdDatkUcIeEgMjUh6++njKNk9+Hr0xBPgW/ORDJcXYvDfQFyHKz7AsP2vx2
n8C8plB8QohsJRu3zcy6209xB+00cU381bB1cnhux7I4
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:25 2026 by rpki-client