Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zRo5us4mRwLsX2cQhLXHL_YVifA.roa
File: zRo5us4mRwLsX2cQhLXHL_YVifA.roa (raw, json)
Hash identifier: 6ACbkfbKfs1/SVNLfUixHcFkzg6n3Yn/OcC71aTpj8Q=
Subject key identifier: CD:1A:39:BA:CE:26:47:02:EC:5F:67:10:84:B5:C7:2F:F6:15:89:F0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A00A792CD9825D0F59186554D6E7090749
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zRo5us4mRwLsX2cQhLXHL_YVifA.roa
Signing time: Sun 16 Aug 2026 12:08:28 +0000
ROA not before: Sun 16 Aug 2026 12:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202335
IP address blocks: 87.86.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:79:2c:d9:82:5d:0f:59:18:65:54:d6:e7:09:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 16 12:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd1a39bace264702ec5f671084b5c72ff61589f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:02:1a:3c:f1:e8:40:c4:98:11:b6:80:b8:
bc:1c:64:ec:51:78:6e:e7:5e:cf:6d:dd:d6:64:15:
2c:e7:f4:96:37:2a:5b:7b:2a:c1:86:e2:04:79:68:
a2:34:fd:f0:71:98:f8:c3:84:b7:4a:a1:90:5b:f9:
45:8d:d2:17:27:89:66:dd:7e:78:f8:72:27:53:bd:
63:9a:f7:61:32:99:f2:5a:c2:6c:2f:c4:f8:b4:67:
b6:a5:3f:36:2a:95:e3:74:55:4e:2e:83:32:2b:bf:
b1:4c:09:bf:04:ea:2a:11:11:b6:ba:28:f4:b7:dc:
f1:72:89:c7:a9:a0:90:94:6b:75:59:f9:8d:a2:5e:
f6:20:23:b7:c3:54:98:62:53:65:2f:e7:3e:68:f2:
d5:96:8e:c6:19:00:07:d3:73:0b:ac:c4:c5:6b:c9:
be:e9:f2:1f:6c:2b:0c:7f:45:ed:7f:e1:05:a1:bb:
51:48:2d:d2:3d:39:07:d7:a8:52:44:0f:16:95:00:
47:de:57:a8:aa:fa:ee:56:b6:f2:17:38:ac:80:f1:
ed:6e:ed:bc:62:b2:10:33:4d:af:05:60:b7:f1:7f:
5a:23:c2:1b:72:fb:ce:62:58:6d:5a:3c:a0:f4:dc:
26:f0:96:cf:8a:90:ce:79:0a:c7:b2:45:5f:2e:73:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:39:BA:CE:26:47:02:EC:5F:67:10:84:B5:C7:2F:F6:15:89:F0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zRo5us4mRwLsX2cQhLXHL_YVifA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:82:9d:f8:c2:c4:c0:3d:f0:7a:00:8f:96:31:e9:b9:a9:95:
7b:9d:b8:56:79:f5:d2:56:29:45:44:48:16:e0:4a:bb:88:b7:
19:f8:14:ff:07:ff:cb:83:0b:f1:9f:82:0d:ff:a0:2a:b2:4b:
73:e6:22:85:b5:cc:b8:77:91:f6:40:bf:09:cc:eb:7c:b8:dd:
f0:61:bd:ed:5f:50:13:31:4c:1c:55:c0:d1:d8:49:a2:05:d5:
82:c1:c5:77:d9:98:35:8b:27:b3:d3:b8:de:ef:41:2b:f6:70:
01:df:e8:d4:f8:9d:26:6c:04:56:98:d3:6b:5f:2d:85:8f:98:
1b:5b:c4:47:81:ae:ce:27:d1:ad:12:ab:81:04:42:a5:c2:f6:
41:7c:67:51:5b:26:68:11:ea:e0:a9:b6:c5:26:ba:50:36:f3:
91:92:59:00:67:7a:cd:ef:15:05:12:50:38:c6:33:da:e6:9a:
ca:4e:ea:0d:b4:6e:40:96:b2:1c:c8:b3:ea:7f:6d:a7:02:f2:
4a:d0:fc:b5:07:4d:8d:17:61:07:c6:d8:9b:30:57:ee:33:54:
ec:c3:09:7b:cd:fe:1a:6c:68:1f:d2:a5:6e:87:a8:c2:e6:91:
b9:38:57:4b:5e:53:49:cc:6b:25:9d:b6:80:2d:54:76:d7:15:
ab:58:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:02:55 2026 by rpki-client