Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZTAV-_OkILTI07gkxbtdMHMAD8A.roa
File: ZTAV-_OkILTI07gkxbtdMHMAD8A.roa (raw, json)
Hash identifier: XK1+7khgMHtdQjf4N9yp0DaVSL8vaMjIwt0MQdH9Ps4=
Subject key identifier: 65:30:15:FB:F3:A4:20:B4:C8:D3:B8:24:C5:BB:5D:30:73:00:0F:C0
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019E822C625597E9561821A321B5F920D7E8
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZTAV-_OkILTI07gkxbtdMHMAD8A.roa
Signing time: Mon 01 Jun 2026 07:53:27 +0000
ROA not before: Mon 01 Jun 2026 07:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395839
IP address blocks: 46.8.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:2c:62:55:97:e9:56:18:21:a3:21:b5:f9:20:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 1 07:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=653015fbf3a420b4c8d3b824c5bb5d3073000fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:0e:93:49:09:62:b0:d8:be:d9:99:6a:36:
bb:32:54:5c:db:38:4e:7b:1b:c3:cb:6a:86:f9:99:
64:bb:55:3d:32:58:fe:b6:a5:89:c0:30:8b:3f:b1:
90:bc:9d:79:b8:20:bb:9d:7b:1c:e1:da:36:99:81:
06:07:c5:f0:1b:7a:90:74:99:60:4a:8a:fd:1c:c1:
d4:c9:35:62:a3:c4:11:14:33:55:af:15:12:e6:b0:
76:77:84:f5:24:28:cc:9a:7b:d7:8c:2d:5e:7f:0e:
82:d6:fd:4b:6b:45:bb:54:f9:68:00:80:e8:33:2a:
78:7c:e7:a8:08:8e:91:a7:a0:b7:ad:0b:c1:a6:41:
2d:2a:05:51:ad:00:57:18:72:3f:33:60:53:8b:08:
20:49:56:84:24:34:7e:a4:e2:13:05:ff:6a:71:fc:
1a:1a:ae:25:82:2c:b7:fe:54:06:b5:89:a0:ec:95:
bb:91:91:78:c8:25:3a:4c:ce:9f:db:50:ae:9f:f1:
3d:0b:df:3b:d6:bc:4f:e7:32:fc:f5:6f:26:3b:2d:
41:dd:50:13:38:e8:0d:d8:91:67:43:3d:e7:be:7b:
c7:6e:21:24:4d:31:39:e7:69:83:73:09:6d:dd:e0:
d2:e7:48:13:65:fc:30:b1:36:ca:81:1f:3a:44:c5:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:30:15:FB:F3:A4:20:B4:C8:D3:B8:24:C5:BB:5D:30:73:00:0F:C0
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZTAV-_OkILTI07gkxbtdMHMAD8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.98.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b2:9b:1b:b5:d1:89:06:6e:e0:85:8c:0f:d6:6d:ed:86:b8:
92:74:29:5f:6b:0a:99:0c:62:e2:ca:19:18:e6:04:77:17:d6:
25:f4:9b:0e:ff:78:82:a9:1c:5c:85:39:b6:0d:3f:9b:da:2e:
ea:3e:ed:b3:d6:79:cf:0d:32:a3:d6:da:20:08:31:69:6e:a2:
0c:ed:49:bc:45:dc:b0:8f:35:07:67:97:16:66:9c:1d:32:51:
10:c9:8b:44:43:21:3f:27:54:a2:73:6f:37:d1:cb:c7:16:42:
a2:f3:8e:d5:f0:58:b5:a7:7d:32:ca:99:8f:3d:4e:0a:cc:0b:
46:b6:5c:ac:a1:cb:70:7c:85:c8:e3:f3:3f:a7:22:ec:9e:cc:
78:2d:f1:6c:a7:6c:e3:6c:75:98:3c:1f:90:a6:1c:bb:15:94:
e1:7a:10:9e:f3:74:cf:f6:c3:23:2c:41:65:f2:05:00:ed:56:
d1:49:63:5e:d5:f5:a5:fb:ff:14:35:ca:de:36:1b:46:bb:a2:
85:3c:fd:3d:87:b8:cb:77:ab:6e:d9:a8:6e:4b:81:0f:20:3c:
8d:09:e6:15:0b:a8:d5:b0:fa:ab:4f:9a:b6:95:dd:7d:76:45:
d9:99:53:4c:97:5c:e3:7b:61:bb:02:41:17:58:b1:9c:6b:02:
c1:5a:87:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6CLGJVl+lWGCGjIbX5INfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYwNjAxMDc1MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTMwMTVmYmYzYTQyMGI0YzhkM2I4MjRjNWJiNWQzMDczMDAwZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC0Ok0kJYrDYvtmZaja7MlRc2zhO
exvDy2qG+Zlku1U9Mlj+tqWJwDCLP7GQvJ15uCC7nXsc4do2mYEGB8XwG3qQdJlg
Sor9HMHUyTVio8QRFDNVrxUS5rB2d4T1JCjMmnvXjC1efw6C1v1La0W7VPloAIDo
Myp4fOeoCI6Rp6C3rQvBpkEtKgVRrQBXGHI/M2BTiwggSVaEJDR+pOITBf9qcfwa
Gq4lgiy3/lQGtYmg7JW7kZF4yCU6TM6f21Cun/E9C9871rxP5zL89W8mOy1B3VAT
OOgN2JFnQz3nvnvHbiEkTTE552mDcwlt3eDS50gTZfwwsTbKgR86RMXQZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUwFfvzpCC0yNO4JMW7XTBzAA/AMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvWlRBVi1fT2tJTFRJMDdna3hidGRNSE1BRDhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALghiMA0G
CSqGSIb3DQEBCwUAA4IBAQCDspsbtdGJBm7ghYwP1m3thriSdClfawqZDGLiyhkY
5gR3F9Yl9JsO/3iCqRxchTm2DT+b2i7qPu2z1nnPDTKj1togCDFpbqIM7Um8Rdyw
jzUHZ5cWZpwdMlEQyYtEQyE/J1Sic2830cvHFkKi847V8Fi1p30yypmPPU4KzAtG
tlysoctwfIXI4/M/pyLsnsx4LfFsp2zjbHWYPB+Qphy7FZThehCe83TP9sMjLEFl
8gUA7VbRSWNe1fWl+/8UNcreNhtGu6KFPP09h7jLd6tu2ahuS4EPIDyNCeYVC6jV
sPqrT5q2ld19dkXZmVNMl1zje2G7AkEXWLGcawLBWodv
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:04 2026 by rpki-client