Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ZyyRFBEICDHmXEJlm_evj1CQkis.roa
File: ZyyRFBEICDHmXEJlm_evj1CQkis.roa (raw, json)
Hash identifier: rp2ujqlQYBXRmh3CjxdyjzYD8KDbQjAAWx5V9965pig=
Subject key identifier: 67:2C:91:14:11:08:08:31:E6:5C:42:65:9B:F7:AF:8F:50:90:92:2B
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019CB94A19039DE5A0C70D7E18AA81300930
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ZyyRFBEICDHmXEJlm_evj1CQkis.roa
Signing time: Wed 04 Mar 2026 14:39:26 +0000
ROA not before: Wed 04 Mar 2026 14:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 87.251.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:4a:19:03:9d:e5:a0:c7:0d:7e:18:aa:81:30:09:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Mar 4 14:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=672c911411080831e65c42659bf7af8f5090922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:55:5e:57:f3:8d:d5:a8:03:56:11:c5:c4:28:
8a:d7:5e:a2:9d:15:de:97:d0:72:72:c5:0f:fe:31:
cb:c7:0a:55:6f:32:f0:86:b5:97:ad:f5:8c:95:e4:
75:1a:1d:4b:41:fc:0c:9b:0f:33:81:89:87:fb:a6:
ab:10:3b:d6:f9:b6:f4:24:2e:ae:a0:5c:e7:19:6a:
aa:c8:09:06:35:8f:f7:07:45:a7:82:26:a6:db:9c:
85:c2:02:f9:da:5c:8a:19:5f:d6:65:bf:b8:fb:79:
f3:0a:02:14:12:d3:10:31:b8:e0:be:b5:b8:e9:a1:
7a:b0:05:5a:8f:03:83:a0:ff:c3:30:43:8b:ce:0b:
a6:06:0c:fe:af:83:0c:de:50:3c:ef:3b:4f:c7:e8:
07:e2:bb:0d:21:77:63:11:25:ac:a9:d9:c5:d8:af:
23:46:66:c9:4f:0f:28:26:81:b6:ce:db:df:a9:2d:
44:a2:c0:35:bd:b2:f9:55:d9:2e:bf:6f:2a:82:68:
30:02:04:36:e5:e1:a9:1e:67:16:b7:91:60:53:3a:
ec:7a:13:19:be:ea:65:73:ad:31:84:4a:ea:d3:62:
5f:da:e5:be:ef:b5:c5:1a:05:c8:40:1b:86:0a:6a:
9c:fd:0d:f2:f7:c0:4e:fa:27:da:88:fe:11:a0:fa:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2C:91:14:11:08:08:31:E6:5C:42:65:9B:F7:AF:8F:50:90:92:2B
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ZyyRFBEICDHmXEJlm_evj1CQkis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.78.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b6:18:64:80:d9:16:96:af:ab:7b:57:86:13:26:3a:13:64:
5b:f7:ab:2a:6b:12:d9:d0:1a:ad:4b:d5:98:08:95:eb:8c:7b:
1d:49:7c:66:e8:de:a5:b2:8f:3e:e7:eb:9f:d4:99:2f:cb:16:
ae:bd:df:26:c4:6b:c9:4e:b3:e4:c9:ca:71:f6:db:63:06:39:
48:71:d4:51:b5:11:23:07:9d:f6:2c:fe:24:fd:a1:5b:79:9a:
ac:c5:00:c3:52:a1:6b:00:4e:ba:9d:0f:e7:6a:01:0a:3f:7c:
9a:47:11:15:00:8c:f0:68:b2:16:ad:db:93:c4:34:1b:68:43:
5e:40:3a:1c:93:7c:ae:83:00:a7:25:a3:41:0b:de:91:c0:6f:
0e:51:8c:52:c9:8a:74:6f:c7:4c:da:70:02:44:21:4c:0f:68:
74:3e:66:a5:72:1f:68:cb:65:6b:a0:f8:72:72:61:f6:fa:9d:
1f:0b:7d:49:88:fb:cf:71:6f:2d:43:87:65:a6:d4:8f:5c:8b:
2c:06:0e:fa:ee:9b:55:5a:cb:8f:80:03:64:f0:73:d1:ad:86:
47:f8:c2:1e:42:9e:dc:71:81:cf:e1:a0:4e:f4:5d:5d:c5:28:
f9:ee:2d:59:ab:c7:00:48:0a:8c:8a:47:37:e4:c6:56:e2:58:
67:74:ba:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZy5ShkDneWgxw1+GKqBMAkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjYwMzA0MTQzOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzJjOTExNDExMDgwODMxZTY1YzQyNjU5YmY3YWY4ZjUwOTA5MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51VeV/ON1agDVhHFxCiK116inRXe
l9BycsUP/jHLxwpVbzLwhrWXrfWMleR1Gh1LQfwMmw8zgYmH+6arEDvW+bb0JC6u
oFznGWqqyAkGNY/3B0Wngiam25yFwgL52lyKGV/WZb+4+3nzCgIUEtMQMbjgvrW4
6aF6sAVajwODoP/DMEOLzgumBgz+r4MM3lA87ztPx+gH4rsNIXdjESWsqdnF2K8j
RmbJTw8oJoG2ztvfqS1EosA1vbL5Vdkuv28qgmgwAgQ25eGpHmcWt5FgUzrsehMZ
vuplc60xhErq02Jf2uW+77XFGgXIQBuGCmqc/Q3y98BO+ifaiP4RoPoLvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcskRQRCAgx5lxCZZv3r49QkJIrMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvWnl5UkZCRUlDREhtWEVKbG1fZXZqMUNRa2lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/tOMA0G
CSqGSIb3DQEBCwUAA4IBAQAlthhkgNkWlq+re1eGEyY6E2Rb96sqaxLZ0BqtS9WY
CJXrjHsdSXxm6N6lso8+5+uf1Jkvyxauvd8mxGvJTrPkycpx9ttjBjlIcdRRtREj
B532LP4k/aFbeZqsxQDDUqFrAE66nQ/nagEKP3yaRxEVAIzwaLIWrduTxDQbaENe
QDock3yugwCnJaNBC96RwG8OUYxSyYp0b8dM2nACRCFMD2h0Pmalch9oy2VroPhy
cmH2+p0fC31JiPvPcW8tQ4dlptSPXIssBg767ptVWsuPgANk8HPRrYZH+MIeQp7c
cYHP4aBO9F1dxSj57i1Zq8cASAqMikc35MZW4lhndLp5
-----END CERTIFICATE-----
Generated at Wed Mar 11 17:04:43 2026 by rpki-client