Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z-uMylSee_vSQ9gBUkT6WUhJqxQ.roa
File: Z-uMylSee_vSQ9gBUkT6WUhJqxQ.roa (raw, json)
Hash identifier: I+e68v9RYIJNSoRiRg8fNBA+kFIfkN1Af59cR1l+loo=
Subject key identifier: 67:EB:8C:CA:54:9E:7B:FB:D2:43:D8:01:52:44:FA:59:48:49:AB:14
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A12ED68E7CF35807E99258845A4AB7541E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z-uMylSee_vSQ9gBUkT6WUhJqxQ.roa
Signing time: Mon 12 Oct 2026 06:39:35 +0000
ROA not before: Mon 12 Oct 2026 06:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212683
IP address blocks: 87.82.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:d6:8e:7c:f3:58:07:e9:92:58:84:5a:4a:b7:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 12 06:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67eb8cca549e7bfbd243d8015244fa594849ab14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:08:c8:a1:11:e0:fb:64:90:2d:17:84:17:
2c:f7:08:e1:32:f4:ad:22:f2:09:87:f1:ff:07:85:
7b:2f:27:d5:96:ad:48:0a:d6:43:71:3a:f5:d9:3e:
17:c5:b8:4d:a0:9d:1c:f8:6d:6e:ca:c4:2a:93:6d:
85:a4:be:df:8f:98:99:e6:c0:e0:30:a5:36:64:c0:
1d:93:ed:26:94:c0:8b:2a:51:70:9b:ab:d5:bb:fc:
98:12:f3:e5:ee:0b:0f:71:aa:26:27:c8:fb:4f:d4:
a1:ef:ae:ab:bc:3d:ed:9d:95:0f:1f:f0:f2:cb:ee:
5c:1a:90:14:73:ff:7c:64:f2:b4:e4:75:9d:c9:6d:
7a:12:fe:a2:1b:0c:98:24:01:c7:af:bd:a5:50:ae:
c0:af:89:32:f7:97:78:11:db:e1:4e:41:88:50:9b:
95:25:07:ed:16:ea:e0:69:cb:2c:31:18:f5:e4:d9:
a7:1f:74:0c:52:68:d4:cc:30:a1:8b:50:f8:b7:18:
96:62:51:06:45:f5:7a:4d:9e:bf:12:1d:1d:e9:e7:
fb:b2:b8:fc:1a:da:ba:cb:9c:0f:d6:1b:92:e1:ce:
d0:95:09:cb:de:8a:20:87:08:f9:49:06:67:16:83:
60:0e:fb:4e:65:b5:a1:5c:a3:a7:cc:82:c2:7a:f7:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EB:8C:CA:54:9E:7B:FB:D2:43:D8:01:52:44:FA:59:48:49:AB:14
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z-uMylSee_vSQ9gBUkT6WUhJqxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.224.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:7d:9c:c3:78:ff:f5:13:11:60:ff:8b:28:ab:89:6d:ba:f0:
4c:02:df:60:19:82:15:80:8e:75:81:2c:aa:12:1b:fc:52:3a:
5e:58:b4:69:06:33:b8:db:b3:1b:72:61:c3:ed:fc:82:2b:42:
63:41:a3:73:ed:fa:96:9d:db:33:ee:1f:5c:27:4d:22:dd:ed:
51:de:7b:b8:08:88:4d:d5:1d:e4:5b:90:90:78:9f:7d:3d:36:
c2:c6:58:6f:f7:17:e5:3c:1d:07:c2:7a:17:93:5c:43:74:69:
99:bb:c7:86:66:a4:9f:5b:4d:ad:8c:fd:cb:95:5b:2f:e2:b8:
27:0d:6f:a4:fa:61:67:c6:95:3a:d5:68:77:e3:8c:82:6d:67:
3e:ba:30:b6:ab:84:1b:4e:ec:99:db:94:8f:ab:c2:9a:25:36:
c7:df:7f:8e:1f:f0:06:28:4f:eb:b8:70:97:fb:bb:23:34:79:
24:1e:75:c5:9b:3f:33:51:0b:84:79:7f:dd:f3:1a:90:70:11:
8e:6c:28:a0:0b:bd:21:9e:b4:f8:db:4a:d6:64:0c:94:33:b7:
3f:db:6d:fb:53:9e:3d:85:d5:0a:89:11:a5:26:47:e8:5b:63:
89:b1:e2:d6:91:d3:7f:34:81:cf:83:87:25:31:ec:59:b0:30:
9e:49:cd:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEu1o5881gH6ZJYhFpKt1QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDEyMDYzOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2ViOGNjYTU0OWU3YmZiZDI0M2Q4MDE1MjQ0ZmE1OTQ4NDlhYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCYIyKER4PtkkC0XhBcs9wjhMvSt
IvIJh/H/B4V7LyfVlq1ICtZDcTr12T4XxbhNoJ0c+G1uysQqk22FpL7fj5iZ5sDg
MKU2ZMAdk+0mlMCLKlFwm6vVu/yYEvPl7gsPcaomJ8j7T9Sh766rvD3tnZUPH/Dy
y+5cGpAUc/98ZPK05HWdyW16Ev6iGwyYJAHHr72lUK7Ar4ky95d4EdvhTkGIUJuV
JQftFurgacssMRj15NmnH3QMUmjUzDChi1D4txiWYlEGRfV6TZ6/Eh0d6ef7srj8
Gtq6y5wP1huS4c7QlQnL3ooghwj5SQZnFoNgDvtOZbWhXKOnzILCevdIdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfrjMpUnnv70kPYAVJE+llISasUMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvWi11TXlsU2VlX3ZTUTlnQlVrVDZXVWhKcXhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV1LgMA0G
CSqGSIb3DQEBCwUAA4IBAQA9fZzDeP/1ExFg/4soq4ltuvBMAt9gGYIVgI51gSyq
Ehv8UjpeWLRpBjO427MbcmHD7fyCK0JjQaNz7fqWndsz7h9cJ00i3e1R3nu4CIhN
1R3kW5CQeJ99PTbCxlhv9xflPB0HwnoXk1xDdGmZu8eGZqSfW02tjP3LlVsv4rgn
DW+k+mFnxpU61Wh344yCbWc+ujC2q4QbTuyZ25SPq8KaJTbH33+OH/AGKE/ruHCX
+7sjNHkkHnXFmz8zUQuEeX/d8xqQcBGObCigC70hnrT420rWZAyUM7c/2237U549
hdUKiRGlJkfoW2OJseLWkdN/NIHPg4clMexZsDCeSc1M
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:27:41 2026 by rpki-client