Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZHVNXtPKVv293YKCWOls39CN6-M.roa
File: ZHVNXtPKVv293YKCWOls39CN6-M.roa (raw, json)
Hash identifier: v9wRn8/FRjs5imWbAfMueGJr6/i7UvOFIg6jRm8vKXQ=
Subject key identifier: 64:75:4D:5E:D3:CA:56:FD:BD:DD:82:82:58:E9:6C:DF:D0:8D:EB:E3
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690CEC6B979DF2D99F04DFF3ABB507
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZHVNXtPKVv293YKCWOls39CN6-M.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:ec:6b:97:9d:f2:d9:9f:04:df:f3:ab:b5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64754d5ed3ca56fdbddd828258e96cdfd08debe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:98:57:6f:8b:90:a8:cb:78:19:25:28:d4:
ac:06:50:f4:7d:88:22:b3:0e:a8:d3:44:da:d7:b3:
da:31:4b:73:b9:a7:a3:b4:1e:e6:72:b7:78:44:82:
b2:d8:0f:3d:62:43:22:79:f5:94:2b:d6:c0:1e:3e:
c7:f4:68:0b:37:45:48:15:c9:cc:9e:ef:69:71:14:
72:5a:c9:f7:ba:a0:a1:ec:3a:67:34:bd:98:bc:e7:
e3:68:c0:64:e5:0c:5b:71:44:09:d5:af:5d:15:1a:
81:4b:83:13:57:f9:9e:a3:ee:47:09:dd:1e:bf:f1:
40:a5:1b:6a:69:7a:ba:35:0c:25:7c:97:39:74:c0:
36:0e:53:07:f9:45:2a:ea:0a:0b:cc:f7:4c:1f:6a:
21:e9:9e:e7:c1:6e:59:f6:60:11:19:a1:1c:27:33:
c3:30:4b:aa:16:a3:04:e6:b7:74:9e:61:b2:a6:3b:
f6:81:c6:00:35:7b:9e:fa:c3:90:a2:fd:74:6d:14:
85:0a:0c:74:c0:36:ce:e3:d5:e3:2b:a9:ea:53:96:
f0:50:9a:af:c7:ae:5b:b7:7b:c9:d1:7b:0f:31:ae:
64:89:f7:7e:e7:ac:8a:63:46:83:04:e7:96:ff:11:
69:3d:c9:c0:00:fe:f6:cb:7f:f3:1f:94:21:68:69:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:4D:5E:D3:CA:56:FD:BD:DD:82:82:58:E9:6C:DF:D0:8D:EB:E3
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZHVNXtPKVv293YKCWOls39CN6-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:28:f7:74:1e:e5:58:72:24:3b:68:30:9d:3f:3f:ad:4a:f1:
73:c2:4c:36:42:2e:ff:02:b1:62:6e:6f:21:7d:f6:bf:0c:66:
3f:d3:63:21:0a:ff:b8:34:0a:01:ca:4d:16:2a:78:82:a9:01:
f0:53:b9:b2:5b:d9:1b:64:81:c5:f9:15:3d:02:06:14:e6:02:
31:f7:9b:57:84:da:2c:b1:95:32:28:cf:d5:08:d0:e4:37:cc:
7d:d8:d0:6e:c7:73:9f:7a:03:a1:a1:23:54:a4:a2:ac:d1:93:
35:ee:a6:21:ea:4b:d1:0a:48:ad:a3:06:d1:a4:eb:54:f4:38:
7d:90:2b:9c:c5:38:f5:6e:f6:08:f1:42:6a:0f:1c:74:e3:53:
42:ed:b6:c7:81:f1:25:ec:ea:1b:70:8c:4d:3d:78:2b:59:84:
76:7c:24:af:f6:5b:d8:97:fa:e7:25:36:59:5d:59:0f:fd:8d:
2f:84:2f:4a:14:20:17:7c:6d:03:2e:c5:e9:6f:b8:c4:fe:03:
1d:c9:07:d6:20:29:7f:29:ae:f1:96:96:dc:2f:a5:6e:05:88:
af:4b:9c:c2:8d:7c:ca:ea:d9:ce:87:a3:b4:3d:56:10:c1:ec:
22:66:dd:21:e0:34:1d:3f:6b:6d:c8:c1:59:35:88:8d:b4:7b:
5d:e0:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:11:32 2026 by rpki-client