Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/zea5_KjBtofwkz4XhEzcAiIJtoM.roa
File: zea5_KjBtofwkz4XhEzcAiIJtoM.roa (raw, json)
Hash identifier: csV82/kv5owgP5eUKIiSX0cpxS/yt/uJmulLKSicDRk=
Subject key identifier: CD:E6:B9:FC:A8:C1:B6:87:F0:93:3E:17:84:4C:DC:02:22:09:B6:83
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823F1B13DA26BCC5E2140BB519D31B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/zea5_KjBtofwkz4XhEzcAiIJtoM.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59796
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:3f:1b:13:da:26:bc:c5:e2:14:0b:b5:19:d3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cde6b9fca8c1b687f0933e17844cdc022209b683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:77:eb:83:8c:66:81:3c:b3:3e:ff:47:76:
49:ed:be:be:f4:6a:82:fb:b7:07:ac:56:d1:d0:f4:
62:60:ad:d1:79:0a:aa:56:df:dd:9b:67:3e:6e:03:
e0:7b:af:f4:1e:4c:c7:a1:66:f6:66:2b:cc:db:f9:
97:8a:8b:6d:4d:bd:2e:32:e8:f9:db:f9:37:d7:a4:
82:d6:af:48:7a:86:b4:e5:16:ff:ec:d7:e0:60:7e:
92:28:3a:f3:7e:b2:b5:b8:14:12:fe:e9:e5:20:e2:
fb:1a:47:7b:9b:73:46:d4:ec:74:ac:ee:06:f2:29:
de:3b:ff:74:60:15:fe:c7:88:0a:0b:8c:fd:36:9f:
53:39:d2:7e:2c:2a:91:01:51:d5:b0:c2:9f:d7:40:
e8:5d:ff:1f:d7:c7:26:a5:54:4e:4f:3c:8f:bb:e1:
d6:af:ab:3d:25:8a:19:b8:d4:ef:c1:24:2d:8d:58:
35:18:0c:c9:0f:be:25:44:51:cb:17:ab:06:6f:1b:
93:07:19:e1:a8:f3:11:62:0c:9e:34:a2:19:73:75:
13:9d:11:69:63:f8:c5:a3:a9:c3:fa:ab:ae:4f:bb:
c9:48:5d:f8:2e:e2:bb:46:5c:65:ed:d9:bb:b2:65:
e1:fc:91:61:06:3a:a7:12:d4:30:1b:e8:db:35:18:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:B9:FC:A8:C1:B6:87:F0:93:3E:17:84:4C:DC:02:22:09:B6:83
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/zea5_KjBtofwkz4XhEzcAiIJtoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2f:7b:50:12:b6:7a:bc:a1:ff:da:3b:66:3f:de:b4:82:c3:
13:99:89:b9:05:02:b4:0d:54:f7:3b:60:32:b2:12:22:9c:0a:
6a:a9:73:04:ad:2a:35:42:48:69:d6:cf:fd:d7:32:aa:bd:f8:
5d:4b:31:ee:f1:a0:bf:af:eb:bb:c7:73:72:30:6f:cf:16:8e:
72:33:2d:47:f6:1f:d4:32:45:26:5d:53:65:d1:d2:34:98:29:
48:ed:b1:1b:ed:22:eb:17:d5:87:37:57:e1:62:c2:a7:05:db:
cf:37:7b:8b:07:73:36:5e:b6:fd:50:25:13:0a:66:38:2b:ff:
d3:29:aa:42:3f:93:2f:8c:fb:3a:06:00:58:c3:e5:f6:98:9a:
4e:66:14:92:0b:fb:6b:6f:b2:d4:d2:cc:3b:82:53:ce:72:dd:
ef:ee:91:0f:19:fc:d1:12:97:c6:71:d9:cc:70:55:07:87:0d:
e5:ea:a3:c8:d4:86:87:bc:db:2b:74:46:c0:04:5f:86:a8:ae:
f5:b0:09:1d:78:57:91:37:66:18:21:89:9b:47:af:38:8b:8f:
f2:12:fc:23:5f:4a:97:c7:da:28:ba:a7:09:b6:86:b7:95:ad:
38:1a:bc:c0:33:7b:d5:40:76:35:a5:6c:e5:c5:c2:14:0d:39:
60:3d:9d:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gj8bE9omvMXiFAu1GdMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGU2YjlmY2E4YzFiNjg3ZjA5MzNlMTc4NDRjZGMwMjIyMDliNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrx364OMZoE8sz7/R3ZJ7b6+9GqC
+7cHrFbR0PRiYK3ReQqqVt/dm2c+bgPge6/0HkzHoWb2ZivM2/mXiottTb0uMuj5
2/k316SC1q9Ieoa05Rb/7NfgYH6SKDrzfrK1uBQS/unlIOL7Gkd7m3NG1Ox0rO4G
8ineO/90YBX+x4gKC4z9Np9TOdJ+LCqRAVHVsMKf10DoXf8f18cmpVROTzyPu+HW
r6s9JYoZuNTvwSQtjVg1GAzJD74lRFHLF6sGbxuTBxnhqPMRYgyeNKIZc3UTnRFp
Y/jFo6nD+quuT7vJSF34LuK7Rlxl7dm7smXh/JFhBjqnEtQwG+jbNRjDIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM3mufyowbaH8JM+F4RM3AIiCbaDMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvemVhNV9LakJ0b2Z3a3o0WGhFemNBaUlKdG9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfEMA0G
CSqGSIb3DQEBCwUAA4IBAQBEL3tQErZ6vKH/2jtmP960gsMTmYm5BQK0DVT3O2Ay
shIinApqqXMErSo1Qkhp1s/91zKqvfhdSzHu8aC/r+u7x3NyMG/PFo5yMy1H9h/U
MkUmXVNl0dI0mClI7bEb7SLrF9WHN1fhYsKnBdvPN3uLB3M2Xrb9UCUTCmY4K//T
KapCP5MvjPs6BgBYw+X2mJpOZhSSC/trb7LU0sw7glPOct3v7pEPGfzREpfGcdnM
cFUHhw3l6qPI1IaHvNsrdEbABF+GqK71sAkdeFeRN2YYIYmbR684i4/yEvwjX0qX
x9oouqcJtoa3la04GrzAM3vVQHY1pWzlxcIUDTlgPZ0b
-----END CERTIFICATE-----
Generated at Thu Aug 27 01:34:40 2026 by rpki-client