Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/ztqWMk9aRM6Ky0IAoscpnekSXpA.roa
File: ztqWMk9aRM6Ky0IAoscpnekSXpA.roa (raw, json)
Hash identifier: bnmXKmu5kt8lvX6cZMu/9l/QC9fmTJ80CL2ADfdOE4k=
Subject key identifier: CE:DA:96:32:4F:5A:44:CE:8A:CB:42:00:A2:C7:29:9D:E9:12:5E:90
Certificate issuer: /CN=096507bfd915228df1d07aa7d067d4442cedb45b
Certificate serial: 019F177CE00552699A6EE89054C820669122
Authority key identifier: 09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/ztqWMk9aRM6Ky0IAoscpnekSXpA.roa
Signing time: Tue 30 Jun 2026 07:44:47 +0000
ROA not before: Tue 30 Jun 2026 07:44:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 139.153.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:7c:e0:05:52:69:9a:6e:e8:90:54:c8:20:66:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096507bfd915228df1d07aa7d067d4442cedb45b
Validity
Not Before: Jun 30 07:44:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceda96324f5a44ce8acb4200a2c7299de9125e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:d9:cd:cc:45:c3:ca:6e:17:34:93:6e:54:
dc:7c:e8:12:b3:21:c1:da:c2:55:c7:c7:be:61:2a:
ce:2d:4f:fc:13:cb:08:a1:c1:45:df:49:97:6c:33:
f7:58:86:30:28:95:67:d2:a5:b8:5d:dc:2d:85:17:
0c:af:4a:27:a5:0a:fd:79:dd:b6:46:e8:41:4a:6f:
1f:59:57:c4:de:0d:50:ab:14:df:4f:fc:7e:bf:bb:
fd:64:d4:d8:6a:c8:ca:fa:07:45:31:78:d2:35:42:
74:30:8d:c5:48:f5:08:7e:b2:ff:8d:64:4b:f2:53:
d4:25:2c:7b:02:5a:1b:2f:10:ed:de:5c:c4:79:e2:
2c:0e:4e:05:0c:5b:4a:ad:e3:e4:9f:f3:69:c4:45:
e5:ba:b4:27:32:34:d5:26:79:fc:3b:36:2a:9d:c9:
28:81:4c:bf:e5:77:e3:c0:06:b2:3f:af:f5:76:01:
de:04:28:66:16:b1:87:a8:c0:3b:43:0c:76:fe:1f:
a6:e8:bc:16:9f:f2:28:ea:5d:db:b9:de:d0:4c:89:
6d:7e:11:03:cd:4e:af:cd:c2:dc:9f:88:13:5d:f9:
eb:76:4a:da:65:7a:41:08:d3:45:81:b5:cb:c7:4c:
35:5d:4d:11:93:dd:06:5c:ef:28:fd:b7:2a:35:99:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DA:96:32:4F:5A:44:CE:8A:CB:42:00:A2:C7:29:9D:E9:12:5E:90
X509v3 Authority Key Identifier:
keyid:09:65:07:BF:D9:15:22:8D:F1:D0:7A:A7:D0:67:D4:44:2C:ED:B4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWUHv9kVIo3x0Hqn0GfURCzttFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/ztqWMk9aRM6Ky0IAoscpnekSXpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c042c-a766-40c9-bb38-f9392f1580a0/1/CWUHv9kVIo3x0Hqn0GfURCzttFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:89:ad:48:29:94:76:29:77:dd:1a:e8:de:1e:d3:ba:aa:5b:
40:23:a5:ac:eb:0f:52:ad:8d:4b:0a:f3:c2:06:12:3e:2c:85:
6c:27:a1:34:cd:2a:72:1e:c4:7c:a5:54:a7:63:39:37:3a:b8:
a6:3d:de:31:90:2b:ef:07:20:72:9e:1b:ba:29:0b:ef:67:37:
2d:99:44:d2:fb:c5:31:63:f9:89:8f:a0:2e:2d:b4:aa:90:7f:
99:06:80:24:3f:94:4b:a6:cc:dd:af:9d:99:7b:fc:56:c1:a7:
93:c7:76:d6:ad:a0:9d:78:29:14:09:b3:88:d5:9d:cd:3b:d1:
e0:0e:bf:bd:46:3e:52:f7:15:a8:ce:77:04:b3:6c:53:5f:76:
f6:f0:0d:c8:6f:7c:12:d1:5d:57:a7:ed:54:ba:38:92:ce:d3:
df:f3:68:46:0f:0f:b7:d4:ee:44:17:51:83:6c:cc:cc:b6:7a:
a4:9d:92:65:b6:0b:1c:2a:a8:e7:43:cb:2c:35:c5:86:70:e9:
d6:c4:bf:a2:af:8f:17:c7:c4:5c:3e:90:57:51:76:bf:4f:90:
dc:79:5c:a2:e3:d6:5f:ec:4b:fe:6f:08:3b:cb:36:84:32:67:
9a:cc:64:52:57:b5:e4:a2:a9:ff:13:6c:bd:3d:f2:7f:ec:16:
7b:0d:c0:b5
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ8XfOAFUmmabuiQVMggZpEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjUwN2JmZDkxNTIyOGRmMWQwN2FhN2QwNjdkNDQ0MmNl
ZGI0NWIwHhcNMjYwNjMwMDc0NDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWRhOTYzMjRmNWE0NGNlOGFjYjQyMDBhMmM3Mjk5ZGU5MTI1ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjTZzcxFw8puFzSTblTcfOgSsyHB
2sJVx8e+YSrOLU/8E8sIocFF30mXbDP3WIYwKJVn0qW4XdwthRcMr0onpQr9ed22
RuhBSm8fWVfE3g1QqxTfT/x+v7v9ZNTYasjK+gdFMXjSNUJ0MI3FSPUIfrL/jWRL
8lPUJSx7AlobLxDt3lzEeeIsDk4FDFtKrePkn/NpxEXlurQnMjTVJnn8OzYqncko
gUy/5XfjwAayP6/1dgHeBChmFrGHqMA7Qwx2/h+m6LwWn/Io6l3bud7QTIltfhED
zU6vzcLcn4gTXfnrdkraZXpBCNNFgbXLx0w1XU0Rk90GXO8o/bcqNZnQqQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFM7aljJPWkTOistCAKLHKZ3pEl6QMB8GA1UdIwQY
MBaAFAllB7/ZFSKN8dB6p9Bn1EQs7bRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dVSHY5a1ZJbzN4MEhxbjBHZlVSQ3p0dEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA0MmMtYTc2Ni00MGM5LWJiMzgt
ZjkzOTJmMTU4MGEwLzEvenRxV01rOWFSTTZLeTBJQW9zY3BuZWtTWHBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zYzA0MmMtYTc2Ni00MGM5LWJiMzgtZjkzOTJmMTU4MGEw
LzEvQ1dVSHY5a1ZJbzN4MEhxbjBHZlVSQ3p0dEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi5kwDQYJ
KoZIhvcNAQELBQADggEBABqJrUgplHYpd90a6N4e07qqW0AjpazrD1KtjUsK88IG
Ej4shWwnoTTNKnIexHylVKdjOTc6uKY93jGQK+8HIHKeG7opC+9nNy2ZRNL7xTFj
+YmPoC4ttKqQf5kGgCQ/lEumzN2vnZl7/FbBp5PHdtatoJ14KRQJs4jVnc070eAO
v71GPlL3FajOdwSzbFNfdvbwDchvfBLRXVen7VS6OJLO09/zaEYPD7fU7kQXUYNs
zMy2eqSdkmW2CxwqqOdDyyw1xYZw6dbEv6KvjxfHxFw+kFdRdr9PkNx5XKLj1l/s
S/5vCDvLNoQyZ5rMZFJXteSiqf8TbL098n/sFnsNwLU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:53 2026 by rpki-client