Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/ZCv5zuLV4EnALGEFKxbgoYBM5nM.roa
File: ZCv5zuLV4EnALGEFKxbgoYBM5nM.roa (raw, json)
Hash identifier: 7mctUcSEz1njIzV0x9gPxL3lMAdKKRXEaXa7ldGntA8=
Subject key identifier: 64:2B:F9:CE:E2:D5:E0:49:C0:2C:61:05:2B:16:E0:A1:80:4C:E6:73
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01A175295730E8E205FADF7FEB94CE955DA8
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/ZCv5zuLV4EnALGEFKxbgoYBM5nM.roa
Signing time: Sun 25 Oct 2026 22:23:25 +0000
ROA not before: Sun 25 Oct 2026 22:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219369
IP address blocks: 87.199.140.0/23 maxlen: 23
87.199.140.0/24 maxlen: 24
87.199.141.0/24 maxlen: 24
2a0b:9402::/48 maxlen: 48
2a0b:9405::/32 maxlen: 32
2a0b:9405::/33 maxlen: 33
2a0b:9405:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:29:57:30:e8:e2:05:fa:df:7f:eb:94:ce:95:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Oct 25 22:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=642bf9cee2d5e049c02c61052b16e0a1804ce673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:9b:d5:fa:fd:c8:93:d4:8d:28:ab:32:7c:
1b:cd:c7:c2:66:c4:2d:2f:16:b6:a5:ec:70:a0:ee:
f7:f7:9f:62:04:4a:28:31:1b:97:2c:38:f1:26:5b:
39:45:7d:f5:b0:5f:22:ee:9f:c2:fb:20:90:10:d5:
bb:19:56:82:91:a5:a3:fa:7c:55:74:26:cd:18:20:
b6:be:da:39:df:1e:ee:34:d1:2e:ec:88:5f:f6:31:
f9:4b:dc:fb:89:8e:28:2e:84:36:e5:8c:e3:28:7b:
fd:c1:3a:7a:ef:e1:a1:83:3f:24:88:34:f2:c3:5e:
fa:76:c2:0b:14:a7:3f:2f:3b:93:a6:15:4f:1c:48:
61:d7:70:19:75:c9:f7:35:3e:9a:67:18:5e:4a:a0:
09:9e:3f:db:b9:df:33:44:2c:8b:8b:b3:89:d1:27:
f5:99:49:70:f5:c1:e2:58:cb:81:f3:d5:56:18:f4:
fb:d2:a7:a4:b0:e2:30:17:d7:3c:1b:01:a2:69:ab:
1c:33:7a:88:b3:96:0e:ca:ff:71:14:b2:ba:56:6f:
4d:51:3f:c1:f7:3d:3d:e3:9d:11:5c:8d:9d:64:b8:
9b:82:e5:f5:bb:e6:2e:ba:24:2c:42:06:28:36:d4:
54:57:92:12:cf:16:07:87:b0:13:2e:f0:9a:3a:e9:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2B:F9:CE:E2:D5:E0:49:C0:2C:61:05:2B:16:E0:A1:80:4C:E6:73
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/ZCv5zuLV4EnALGEFKxbgoYBM5nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.140.0/23
IPv6:
2a0b:9402::/48
2a0b:9405::/32
Signature Algorithm: sha256WithRSAEncryption
10:bc:aa:d8:1f:50:aa:44:5a:fe:83:00:4a:91:60:10:1b:9d:
8f:91:8e:e1:3b:79:fd:9a:a1:6c:11:aa:c9:60:0c:6f:4f:ad:
58:e5:9b:16:fc:be:aa:b8:ea:a5:e9:cd:26:2c:4d:26:d3:2d:
70:9e:35:16:c2:37:01:f3:6e:65:14:21:dd:3e:88:b1:de:87:
f0:91:99:40:1b:8d:0d:17:a6:7c:b6:df:44:46:05:d5:fb:e5:
1e:1c:d3:35:25:33:12:65:83:92:72:f6:e6:af:ab:58:18:18:
09:26:4f:ee:3f:08:cc:ca:78:ea:26:d1:91:c8:f0:75:a5:8d:
23:71:47:40:1d:05:7e:54:a8:f3:fe:59:49:a3:de:2b:6b:0b:
f1:d6:84:a7:d6:09:64:22:a6:50:9a:1a:82:35:13:96:d3:d7:
eb:b6:2d:a4:60:3b:94:bf:b2:f5:d9:67:81:00:4a:64:15:70:
db:ba:a4:f0:13:80:75:c6:5a:2f:0a:f2:38:96:b0:f9:30:a2:
ba:19:93:36:36:d0:dd:9c:68:26:b9:36:41:65:98:44:ee:24:
d8:ed:4e:a9:82:c7:ce:08:e6:f0:1a:64:ad:45:97:3b:54:4e:
7d:8d:25:17:15:c6:48:d5:89:b4:33:44:61:88:af:16:55:2f:
9e:b1:1c:21
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaF1KVcw6OIF+t9/65TOlV2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjYxMDI1MjIyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDJiZjljZWUyZDVlMDQ5YzAyYzYxMDUyYjE2ZTBhMTgwNGNlNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsOb1fr9yJPUjSirMnwbzcfCZsQt
Lxa2pexwoO73959iBEooMRuXLDjxJls5RX31sF8i7p/C+yCQENW7GVaCkaWj+nxV
dCbNGCC2vto53x7uNNEu7Ihf9jH5S9z7iY4oLoQ25YzjKHv9wTp67+Ghgz8kiDTy
w176dsILFKc/LzuTphVPHEhh13AZdcn3NT6aZxheSqAJnj/bud8zRCyLi7OJ0Sf1
mUlw9cHiWMuB89VWGPT70qeksOIwF9c8GwGiaascM3qIs5YOyv9xFLK6Vm9NUT/B
9z09450RXI2dZLibguX1u+YuuiQsQgYoNtRUV5ISzxYHh7ATLvCaOumoCQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGQr+c7i1eBJwCxhBSsW4KGATOZzMB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvWkN2NXp1TFY0RW5BTEdFRkt4YmdvWUJNNW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBV8eMMBYE
AgACMBADBwAqC5QCAAADBQAqC5QFMA0GCSqGSIb3DQEBCwUAA4IBAQAQvKrYH1Cq
RFr+gwBKkWAQG52PkY7hO3n9mqFsEarJYAxvT61Y5ZsW/L6quOql6c0mLE0m0y1w
njUWwjcB825lFCHdPoix3ofwkZlAG40NF6Z8tt9ERgXV++UeHNM1JTMSZYOScvbm
r6tYGBgJJk/uPwjMynjqJtGRyPB1pY0jcUdAHQV+VKjz/llJo94rawvx1oSn1glk
IqZQmhqCNROW09frti2kYDuUv7L12WeBAEpkFXDbuqTwE4B1xlovCvI4lrD5MKK6
GZM2NtDdnGgmuTZBZZhE7iTY7U6pgsfOCObwGmStRZc7VE59jSUXFcZI1Ym0M0Rh
iK8WVS+esRwh
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:44:20 2026 by rpki-client