Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/PE-ZEx5aXnDLDMP1m5VbhDQ_rnI.roa
File: PE-ZEx5aXnDLDMP1m5VbhDQ_rnI.roa (raw, json)
Hash identifier: FhFdXmOscgYAxAUmH3C1yGLWbQ2LMoIlBYZcsCnQfLo=
Subject key identifier: 3C:4F:99:13:1E:5A:5E:70:CB:0C:C3:F5:9B:95:5B:84:34:3F:AE:72
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A1BAF3974093A84EE4763CD39E1BF41160
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/PE-ZEx5aXnDLDMP1m5VbhDQ_rnI.roa
Signing time: Sun 08 Nov 2026 11:38:08 +0000
ROA not before: Sun 08 Nov 2026 11:38:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218229
IP address blocks: 2a09:3f00:3f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:f3:97:40:93:a8:4e:e4:76:3c:d3:9e:1b:f4:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Nov 8 11:38:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c4f99131e5a5e70cb0cc3f59b955b84343fae72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:50:df:08:66:e2:bd:7d:4d:8a:4d:c3:fb:
d2:9b:42:39:8d:a6:33:50:05:b7:a2:d8:32:15:93:
e3:67:bc:32:df:5f:84:0c:7a:42:b8:0f:44:e4:29:
7a:71:be:1d:71:c1:89:ec:d0:d8:a8:36:48:f3:03:
98:a3:21:e5:0b:34:35:80:c3:49:3c:18:d7:9a:59:
18:be:1c:35:b8:37:d9:bc:b9:84:23:91:ce:2d:80:
5a:cd:57:e9:44:ce:aa:e7:c9:40:0f:36:c3:8c:63:
aa:a9:89:47:c0:09:c2:93:21:44:e4:ef:e4:e5:34:
5e:a4:95:85:9c:e5:45:06:a1:86:00:a5:28:d1:b3:
af:02:53:fa:20:f7:b8:99:fd:40:a4:0e:67:6f:8d:
2b:f2:19:73:bf:9c:29:86:50:71:4c:4a:3d:7e:45:
18:a9:4c:1f:df:09:be:82:73:21:d0:5a:53:3a:8d:
f3:f9:46:41:43:6c:b4:3c:b8:cd:ee:82:31:a7:4b:
f2:7c:8c:d3:0f:ce:8f:d1:27:6b:33:34:8d:55:c4:
43:9a:8d:ab:6c:23:18:c6:e2:d1:8f:98:f3:b5:38:
9c:e0:15:77:69:08:d4:1e:a8:db:c7:c6:bd:1f:2f:
66:d3:d6:f1:cd:a7:03:3b:5f:a3:a1:f4:cd:d7:e5:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:99:13:1E:5A:5E:70:CB:0C:C3:F5:9B:95:5B:84:34:3F:AE:72
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/PE-ZEx5aXnDLDMP1m5VbhDQ_rnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
b0:7b:ff:fe:53:90:99:4e:70:fe:7f:a3:1d:77:6b:67:31:30:
62:51:22:13:66:84:b9:42:b9:b2:f4:fa:fb:33:5d:e6:21:18:
77:be:a3:85:b2:93:b1:aa:f7:b2:b0:d0:b5:d4:a8:a3:b7:2b:
e7:c5:8b:41:44:1c:01:79:c0:a0:b7:8f:51:d2:99:c3:5a:1b:
de:77:20:c2:f2:64:4f:11:99:9f:00:e3:74:5b:b1:ae:f4:a3:
0e:36:94:41:e9:76:3d:c9:c4:da:95:55:86:92:2e:99:76:24:
29:8a:8e:94:0a:06:a4:0d:1b:e7:56:a1:4b:85:07:a6:e9:e0:
24:b2:f8:b8:56:ac:8e:7c:f1:1a:fe:42:3c:f8:3b:d1:44:cd:
cb:ae:cb:74:4e:c7:42:62:89:62:ec:7f:2e:35:a4:08:f1:e8:
21:78:be:d0:78:48:08:0b:fb:c8:ff:b9:4b:27:c7:df:21:64:
38:40:90:11:2f:07:48:02:7c:20:35:e6:cb:14:61:3c:bd:7b:
64:74:1a:cb:20:c1:9a:db:33:5f:f9:76:4a:cc:fd:77:fa:d8:
e0:6d:0f:7d:b5:11:35:4c:5d:76:97:eb:d8:98:1e:40:3e:0c:
10:a7:44:29:5b:ed:4e:f3:10:87:2d:a8:6d:33:ad:c0:34:69:
09:57:5d:01
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaG685dAk6hO5HY8054b9BFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYxMTA4MTEzODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzRmOTkxMzFlNWE1ZTcwY2IwY2MzZjU5Yjk1NWI4NDM0M2ZhZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcxQ3whm4r19TYpNw/vSm0I5jaYz
UAW3otgyFZPjZ7wy31+EDHpCuA9E5Cl6cb4dccGJ7NDYqDZI8wOYoyHlCzQ1gMNJ
PBjXmlkYvhw1uDfZvLmEI5HOLYBazVfpRM6q58lADzbDjGOqqYlHwAnCkyFE5O/k
5TRepJWFnOVFBqGGAKUo0bOvAlP6IPe4mf1ApA5nb40r8hlzv5wphlBxTEo9fkUY
qUwf3wm+gnMh0FpTOo3z+UZBQ2y0PLjN7oIxp0vyfIzTD86P0SdrMzSNVcRDmo2r
bCMYxuLRj5jztTic4BV3aQjUHqjbx8a9Hy9m09bxzacDO1+jofTN1+W7PwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDxPmRMeWl5wywzD9ZuVW4Q0P65yMB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvUEUtWkV4NWFYbkRMRE1QMW01VmJoRFFfcm5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgk/AD8w
DQYJKoZIhvcNAQELBQADggEBALB7//5TkJlOcP5/ox13a2cxMGJRIhNmhLlCubL0
+vszXeYhGHe+o4Wyk7Gq97Kw0LXUqKO3K+fFi0FEHAF5wKC3j1HSmcNaG953IMLy
ZE8RmZ8A43Rbsa70ow42lEHpdj3JxNqVVYaSLpl2JCmKjpQKBqQNG+dWoUuFB6bp
4CSy+LhWrI588Rr+Qjz4O9FEzcuuy3ROx0JiiWLsfy41pAjx6CF4vtB4SAgL+8j/
uUsnx98hZDhAkBEvB0gCfCA15ssUYTy9e2R0GssgwZrbM1/5dkrM/Xf62OBtD321
ETVMXXaX69iYHkA+DBCnRClb7U7zEIctqG0zrcA0aQlXXQE=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:49:09 2026 by rpki-client