Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa
File: ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa (raw, json)
Hash identifier: mZ/hXIWOyw1nZePba2ku4vzRolnuQ9r/sg/ZfJza0sU=
Subject key identifier: 66:35:3D:41:AE:03:94:14:B2:11:8C:F7:B4:7C:10:76:63:51:E6:5E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A01F3822EF578BDD1D0333DA1B952D3F25
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa
Signing time: Thu 20 Aug 2026 12:49:27 +0000
ROA not before: Thu 20 Aug 2026 12:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 213.209.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:38:22:ef:57:8b:dd:1d:03:33:da:1b:95:2d:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 20 12:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66353d41ae039414b2118cf7b47c10766351e65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:f0:36:7c:99:ab:7b:4d:48:4e:f2:63:e2:
ac:6e:73:24:43:1c:bf:06:11:43:3d:2c:40:01:2a:
ee:14:f4:75:b7:db:ca:12:a0:90:40:f0:0e:b6:1a:
3c:a2:24:ce:4e:af:23:bd:00:ba:23:7f:79:74:5e:
21:4c:8c:d0:43:d6:8c:99:01:bd:39:2e:1b:21:20:
b8:fa:c6:7a:3a:74:8f:fd:f3:37:df:47:41:d8:4a:
f5:0f:6d:c3:f4:52:2b:d5:a9:c1:5a:50:a4:aa:ef:
ed:31:cc:7a:ba:fc:5d:fd:04:bf:c5:b9:2e:44:d7:
b9:07:b4:7f:93:e4:a0:10:b3:f1:07:70:80:83:61:
aa:f4:91:24:ea:39:80:b1:58:de:f4:f2:7d:be:3d:
f0:98:33:28:3b:97:e6:0d:88:0c:30:54:73:7f:ad:
da:19:9a:a7:d2:82:ff:26:c2:92:23:e5:b9:2e:26:
88:69:7b:db:c2:2f:9d:ac:66:68:d4:96:4c:f2:f1:
67:0d:7f:5a:e7:b4:da:6b:48:5c:a9:3f:70:65:59:
44:6a:df:63:5e:a1:9f:2a:3c:cb:7c:4f:d6:1f:27:
48:57:99:ab:dc:58:8d:1e:73:73:8b:65:aa:6a:1f:
28:b3:fe:5c:1b:1c:25:28:da:bd:59:a5:4a:bf:67:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:3D:41:AE:03:94:14:B2:11:8C:F7:B4:7C:10:76:63:51:E6:5E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d6:08:6c:31:c0:28:ce:03:e2:06:82:21:89:b7:a8:d1:36:
af:45:af:d9:f9:2a:90:12:98:50:77:35:0a:16:2d:15:9f:77:
9c:75:00:8c:47:38:75:43:81:ae:86:f8:1c:db:c6:54:76:70:
1a:48:10:a3:94:bb:37:a9:d5:ac:a9:d3:b6:e7:42:7c:3d:cc:
1b:a8:91:f2:15:6c:10:98:ef:50:e0:47:3c:ef:be:cb:1e:93:
e0:30:10:17:9e:5f:65:b7:c9:c6:c4:77:8c:60:83:9f:6e:55:
8d:ea:2a:74:73:4d:66:39:5a:e8:d1:96:f9:85:69:2c:74:e1:
0d:dd:65:4a:9c:d0:30:f7:04:20:2c:00:98:23:d7:a9:aa:4e:
5b:e9:19:ac:76:ed:c2:aa:2f:38:60:be:99:96:48:a2:b1:64:
57:d4:e1:92:93:d3:d5:dc:fa:b4:e5:3e:2b:23:8b:c6:7a:7b:
87:64:d3:0d:aa:c4:c9:b8:f8:b1:e1:b8:3c:25:b1:31:ab:c1:
67:70:89:20:3b:4d:35:9d:b7:b8:6f:a3:3e:0d:3d:ef:75:6c:
8e:9f:cd:4e:0a:ff:18:87:a8:ba:86:6f:46:61:6f:22:70:0b:
f2:d6:b9:7e:af:9d:48:39:c4:7f:14:bb:d3:14:43:34:e5:74:
34:50:56:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAfOCLvV4vdHQMz2huVLT8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjYwODIwMTI0OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjM1M2Q0MWFlMDM5NDE0YjIxMThjZjdiNDdjMTA3NjYzNTFlNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfwNnyZq3tNSE7yY+KsbnMkQxy/
BhFDPSxAASruFPR1t9vKEqCQQPAOtho8oiTOTq8jvQC6I395dF4hTIzQQ9aMmQG9
OS4bISC4+sZ6OnSP/fM330dB2Er1D23D9FIr1anBWlCkqu/tMcx6uvxd/QS/xbku
RNe5B7R/k+SgELPxB3CAg2Gq9JEk6jmAsVje9PJ9vj3wmDMoO5fmDYgMMFRzf63a
GZqn0oL/JsKSI+W5LiaIaXvbwi+drGZo1JZM8vFnDX9a57Taa0hcqT9wZVlEat9j
XqGfKjzLfE/WHydIV5mr3FiNHnNzi2Wqah8os/5cGxwlKNq9WaVKv2c1ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGY1PUGuA5QUshGM97R8EHZjUeZeMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvWmpVOVFhNERsQlN5RVl6M3RId1FkbU5SNWw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dGeMA0G
CSqGSIb3DQEBCwUAA4IBAQAK1ghsMcAozgPiBoIhibeo0TavRa/Z+SqQEphQdzUK
Fi0Vn3ecdQCMRzh1Q4Guhvgc28ZUdnAaSBCjlLs3qdWsqdO250J8PcwbqJHyFWwQ
mO9Q4Ec8777LHpPgMBAXnl9lt8nGxHeMYIOfblWN6ip0c01mOVro0Zb5hWksdOEN
3WVKnNAw9wQgLACYI9epqk5b6Rmsdu3Cqi84YL6ZlkiisWRX1OGSk9PV3Pq05T4r
I4vGenuHZNMNqsTJuPix4bg8JbExq8FncIkgO001nbe4b6M+DT3vdWyOn81OCv8Y
h6i6hm9GYW8icAvy1rl+r51IOcR/FLvTFEM05XQ0UFan
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:44 2026 by rpki-client