Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa
File: ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa (raw, json)
Hash identifier: 6fkAR/ISjaDTmwgbqQuKZzjyVceMiviNtBf9crcDMYs=
Subject key identifier: 65:13:22:4E:85:84:43:31:BA:58:88:BA:9B:80:27:39:DD:4C:EF:12
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 019D0516BED42D5243EC2BE90EB51B96B6DA
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa
Signing time: Thu 19 Mar 2026 07:54:29 +0000
ROA not before: Thu 19 Mar 2026 07:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203597
IP address blocks: 45.9.195.0/24 maxlen: 24
2a0e:1107::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:16:be:d4:2d:52:43:ec:2b:e9:0e:b5:1b:96:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Mar 19 07:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6513224e85844331ba5888ba9b802739dd4cef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:c5:72:73:47:ce:ad:00:b5:8b:89:54:7f:
4d:0f:5c:1a:e4:7b:80:f8:8d:ff:0b:6b:e0:47:ac:
65:cb:f9:a7:e4:64:2a:83:2e:41:d2:41:de:f3:b9:
05:35:a7:17:4a:2e:42:ca:91:47:16:52:6e:9f:38:
6b:c4:e2:0f:2a:09:49:31:52:aa:4d:0f:3f:6f:92:
93:a5:dc:f1:82:07:60:a4:ef:87:7c:d4:1d:bf:6c:
f2:af:c4:b6:b2:90:c3:8d:d3:6e:26:0c:5b:c8:29:
fa:cd:aa:d5:44:c0:79:4e:2f:d4:a9:ab:0a:5c:ed:
99:c3:b0:2a:45:40:e9:3e:85:7e:17:56:e8:e3:d2:
d6:f1:74:b6:80:2b:b4:df:29:6b:78:56:26:78:11:
88:d7:52:ed:1f:19:4b:e3:08:16:a7:f7:82:07:ce:
af:76:9f:82:bf:bd:44:12:f3:a4:c9:21:26:e0:ef:
f9:cd:37:b7:b1:7a:81:86:27:c6:cc:61:34:c4:81:
63:52:9b:17:59:62:83:71:1a:77:d6:5e:99:14:4d:
1d:7c:4a:57:29:74:fc:e3:f7:9e:1a:a0:cd:eb:70:
e4:68:a8:da:02:bf:ba:2f:8c:c6:2e:a3:bf:55:9e:
e9:2b:73:4d:7a:b2:04:83:45:36:fd:c6:32:21:05:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:22:4E:85:84:43:31:BA:58:88:BA:9B:80:27:39:DD:4C:EF:12
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.195.0/24
IPv6:
2a0e:1107::/47
Signature Algorithm: sha256WithRSAEncryption
72:95:18:b2:3e:fe:0e:b0:5e:ac:90:bc:98:c3:5f:52:85:33:
e0:83:ee:60:87:52:3c:e3:01:38:b0:26:58:6b:e8:b4:64:c9:
63:1f:0d:64:5f:17:b2:f7:a3:5f:be:42:b9:90:7d:e8:9d:e5:
c5:54:b5:e0:36:01:2a:3b:b9:36:56:54:28:60:26:9a:f7:90:
de:fb:51:96:4d:39:76:41:14:2e:1e:1a:48:be:1d:8e:c9:93:
b0:db:85:fb:21:4f:be:63:e5:da:78:8f:83:d8:9e:38:da:74:
f5:47:2f:a4:e0:08:e7:81:f9:3d:a1:28:50:26:91:64:aa:b0:
6a:e9:78:09:6d:b5:75:84:a5:72:9d:38:ba:9a:53:25:76:9a:
b3:4c:70:50:ca:9b:61:d7:2c:7d:39:e4:51:24:4a:83:e7:56:
b1:55:0b:94:cb:a3:88:72:5b:27:04:53:d9:f1:db:34:09:b1:
4d:4d:b7:99:12:bd:b0:2c:f5:82:ee:21:05:f6:37:04:ba:47:
77:91:23:63:7c:14:69:38:8b:0e:49:41:12:42:2b:34:20:9b:
ce:42:d4:77:39:7d:0d:e5:0a:0b:ac:d8:61:b1:61:92:b0:01:
ac:71:06:c1:e0:e3:11:12:4f:ff:6a:87:1c:31:ac:37:4e:a6:
f7:23:67:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ0FFr7ULVJD7CvpDrUblrbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz
OGI4NWEwHhcNMjYwMzE5MDc1NDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTEzMjI0ZTg1ODQ0MzMxYmE1ODg4YmE5YjgwMjczOWRkNGNlZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQnFcnNHzq0AtYuJVH9ND1wa5HuA
+I3/C2vgR6xly/mn5GQqgy5B0kHe87kFNacXSi5CypFHFlJunzhrxOIPKglJMVKq
TQ8/b5KTpdzxggdgpO+HfNQdv2zyr8S2spDDjdNuJgxbyCn6zarVRMB5Ti/UqasK
XO2Zw7AqRUDpPoV+F1bo49LW8XS2gCu03ylreFYmeBGI11LtHxlL4wgWp/eCB86v
dp+Cv71EEvOkySEm4O/5zTe3sXqBhifGzGE0xIFjUpsXWWKDcRp31l6ZFE0dfEpX
KXT84/eeGqDN63DkaKjaAr+6L4zGLqO/VZ7pK3NNerIEg0U2/cYyIQWFhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGUTIk6FhEMxuliIupuAJzndTO8SMB8GA1UdIwQY
MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt
MzMxZDdmYzc3YmQ0LzEvWlJNaVRvV0VRekc2V0lpNm00QW5PZDFNN3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0
LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQnDMA8E
AgACMAkDBwEqDhEHAAAwDQYJKoZIhvcNAQELBQADggEBAHKVGLI+/g6wXqyQvJjD
X1KFM+CD7mCHUjzjATiwJlhr6LRkyWMfDWRfF7L3o1++QrmQfeid5cVUteA2ASo7
uTZWVChgJpr3kN77UZZNOXZBFC4eGki+HY7Jk7DbhfshT75j5dp4j4PYnjjadPVH
L6TgCOeB+T2hKFAmkWSqsGrpeAlttXWEpXKdOLqaUyV2mrNMcFDKm2HXLH055FEk
SoPnVrFVC5TLo4hyWycEU9nx2zQJsU1Nt5kSvbAs9YLuIQX2NwS6R3eRI2N8FGk4
iw5JQRJCKzQgm85C1Hc5fQ3lCgus2GGxYZKwAaxxBsHg4xEST/9qhxwxrDdOpvcj
Zy4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:45:01 2026 by rpki-client