Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/MZ-3-aIqvRV6T5DtJ5MLO-rLQb0.roa
File: MZ-3-aIqvRV6T5DtJ5MLO-rLQb0.roa (raw, json)
Hash identifier: zkaLItcccqZtnfIrIvayqdwe8ah+gP2H4rdRMeXdUgQ=
Subject key identifier: 31:9F:B7:F9:A2:2A:BD:15:7A:4F:90:ED:27:93:0B:3B:EA:CB:41:BD
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A11159BB03DAD9FF0A540B03C5484C3BE1
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/MZ-3-aIqvRV6T5DtJ5MLO-rLQb0.roa
Signing time: Tue 06 Oct 2026 13:14:15 +0000
ROA not before: Tue 06 Oct 2026 13:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 149.232.189.0/24 maxlen: 24
185.235.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:59:bb:03:da:d9:ff:0a:54:0b:03:c5:48:4c:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Oct 6 13:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=319fb7f9a22abd157a4f90ed27930b3beacb41bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8c:ac:83:cf:bb:33:86:42:7a:d0:09:af:7a:
e6:90:21:9b:8e:e8:a8:25:b7:3c:06:6a:b1:64:a4:
10:97:97:ed:e1:3f:ba:eb:d1:bd:c4:f1:66:05:69:
2c:23:b9:d8:19:d9:67:38:cd:46:21:b9:90:80:d1:
08:69:2c:a1:cd:7e:46:11:d7:5e:ef:3c:24:ed:fb:
43:ed:fb:bd:e8:cb:64:95:4e:da:5c:67:2c:5c:9f:
0f:33:4c:5d:b9:e3:2e:ad:49:c6:c1:98:21:56:16:
58:74:e8:25:c1:e2:e6:1e:8e:a1:71:86:f7:3d:02:
cb:21:67:06:33:99:c4:7b:dd:5e:7b:7b:8f:1b:b5:
b5:1a:26:79:fa:39:db:57:ef:ca:4f:54:11:0d:8b:
c7:dd:54:7a:c9:da:36:ab:32:9b:d8:69:94:8f:2d:
c5:2e:22:5e:ee:e7:9f:7e:4a:57:9e:cc:9b:ed:7d:
85:b0:0c:70:b4:50:0f:6e:06:19:99:fe:81:6b:84:
56:7c:51:b0:42:b9:f1:d2:1b:dc:af:ff:1f:b8:33:
c9:27:43:c3:c7:16:26:4c:5a:70:36:49:d5:5f:2f:
7e:50:f5:2e:51:35:80:d4:de:9b:82:2b:2f:b6:22:
87:a3:64:ee:17:5d:68:b6:63:27:db:76:dc:6f:5b:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:B7:F9:A2:2A:BD:15:7A:4F:90:ED:27:93:0B:3B:EA:CB:41:BD
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/MZ-3-aIqvRV6T5DtJ5MLO-rLQb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.189.0/24
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:20:4e:46:2f:40:cf:50:06:9f:7c:17:e8:a0:9e:3f:41:e9:
cb:12:7d:a9:40:44:5a:3f:6d:ce:c3:e7:f2:dd:4a:4b:b1:a8:
f8:39:ef:7c:87:46:d9:12:eb:18:72:aa:5d:f4:81:56:73:bd:
e9:45:92:b5:54:3b:09:ff:9c:be:10:ec:c3:d1:3e:fc:a7:df:
3c:b5:84:3d:43:4d:3f:02:98:59:76:e0:f5:b9:1e:e2:57:71:
09:bf:09:cf:45:41:ac:48:94:c1:38:08:0b:23:cc:e1:97:02:
9f:a0:01:c0:9c:16:18:38:8a:e9:13:46:39:13:d3:22:9b:85:
07:fa:d0:0a:50:c5:75:89:d0:aa:26:7f:dd:63:61:1d:a5:f7:
3a:a1:ff:44:9d:9f:ea:20:65:fe:c0:3f:9a:b0:3d:73:d8:0c:
1c:b8:07:1d:ac:2d:ba:b1:71:87:ba:12:f9:06:98:ed:46:15:
6f:54:c8:6f:6b:9e:4c:9a:d3:84:65:ef:f9:11:0f:d5:92:4e:
16:d7:ef:03:cd:a2:1e:cb:4f:cf:23:74:ab:89:10:66:d1:a3:
a0:d0:39:d4:4e:f9:aa:e2:e6:d2:24:af:76:e6:f3:ea:9a:ff:
7c:f2:8f:1d:a3:0f:8b:3c:29:7b:8d:a0:b9:c9:6e:d8:ef:92:
a3:e6:6c:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaERWbsD2tn/ClQLA8VITDvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYxMDA2MTMxNDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTlmYjdmOWEyMmFiZDE1N2E0ZjkwZWQyNzkzMGIzYmVhY2I0MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oysg8+7M4ZCetAJr3rmkCGbjuio
Jbc8BmqxZKQQl5ft4T+669G9xPFmBWksI7nYGdlnOM1GIbmQgNEIaSyhzX5GEdde
7zwk7ftD7fu96MtklU7aXGcsXJ8PM0xdueMurUnGwZghVhZYdOglweLmHo6hcYb3
PQLLIWcGM5nEe91ee3uPG7W1GiZ5+jnbV+/KT1QRDYvH3VR6ydo2qzKb2GmUjy3F
LiJe7ueffkpXnsyb7X2FsAxwtFAPbgYZmf6Ba4RWfFGwQrnx0hvcr/8fuDPJJ0PD
xxYmTFpwNknVXy9+UPUuUTWA1N6bgisvtiKHo2TuF11otmMn23bcb1vfdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDGft/miKr0Vek+Q7SeTCzvqy0G9MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvTVotMy1hSXF2UlY2VDVEdEo1TUxPLXJMUWIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlei9AwQA
uetHMA0GCSqGSIb3DQEBCwUAA4IBAQCNIE5GL0DPUAaffBfooJ4/QenLEn2pQERa
P23Ow+fy3UpLsaj4Oe98h0bZEusYcqpd9IFWc73pRZK1VDsJ/5y+EOzD0T78p988
tYQ9Q00/AphZduD1uR7iV3EJvwnPRUGsSJTBOAgLI8zhlwKfoAHAnBYYOIrpE0Y5
E9Mim4UH+tAKUMV1idCqJn/dY2Edpfc6of9EnZ/qIGX+wD+asD1z2AwcuAcdrC26
sXGHuhL5BpjtRhVvVMhva55MmtOEZe/5EQ/Vkk4W1+8DzaIey0/PI3SriRBm0aOg
0DnUTvmq4ubSJK925vPqmv988o8dow+LPCl7jaC5yW7Y75Kj5mzJ
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:36 2026 by rpki-client