Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/ZmQxI0VzMrpjWMumrYd-UtIujL4.roa
File: ZmQxI0VzMrpjWMumrYd-UtIujL4.roa (raw, json)
Hash identifier: XeR3EMKuy9ho73dgjwc7nT6aYnOzT5KXVCzEWCA/8ag=
Subject key identifier: 66:64:31:23:45:73:32:BA:63:58:CB:A6:AD:87:7E:52:D2:2E:8C:BE
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019CF37446D0B5DDF63D0622B277DEB74D2E
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/ZmQxI0VzMrpjWMumrYd-UtIujL4.roa
Signing time: Sun 15 Mar 2026 21:43:29 +0000
ROA not before: Sun 15 Mar 2026 21:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.232.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:74:46:d0:b5:dd:f6:3d:06:22:b2:77:de:b7:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Mar 15 21:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66643123457332ba6358cba6ad877e52d22e8cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:50:3f:cf:41:e1:e8:20:4d:67:f9:10:a9:
e3:7d:ac:b3:e0:22:a2:d1:67:14:76:e5:d1:96:93:
b5:34:3d:c8:bf:5c:6e:1d:d3:7c:ff:7c:ec:cc:85:
2a:6e:61:b8:0c:0d:d3:19:1c:21:9c:95:ca:8f:00:
71:bc:32:dc:a2:b5:54:d6:d0:ce:5f:36:62:ce:91:
72:6a:f7:d6:84:46:f7:a9:56:bb:ba:33:ec:94:2c:
fd:22:a9:85:40:c9:7b:76:ea:94:cb:ef:c3:d9:36:
95:e7:ff:d4:da:a4:f0:8c:d3:6c:36:aa:02:78:23:
ab:8e:3e:8c:2d:80:24:71:24:a7:d7:c3:e2:64:77:
8b:00:3d:99:74:bc:3f:48:1f:9f:ff:e5:b8:90:9a:
db:e8:17:bb:c7:6f:4e:eb:f8:ec:d3:74:8c:15:9c:
7f:f0:10:29:cb:42:83:9b:33:91:63:45:97:58:dd:
27:10:c9:c4:62:b4:82:47:69:38:93:57:52:dd:7c:
ea:2d:a5:ef:d2:a1:bd:0b:c4:7b:40:5e:92:a4:28:
a5:be:bb:a4:dc:1b:bd:c5:72:07:da:19:97:40:4c:
23:c4:92:96:35:c0:eb:c5:fa:a3:1f:ec:0f:3b:9f:
f1:b3:7e:5b:6b:6b:f2:58:78:1c:b3:05:93:22:18:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:31:23:45:73:32:BA:63:58:CB:A6:AD:87:7E:52:D2:2E:8C:BE
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/ZmQxI0VzMrpjWMumrYd-UtIujL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.78.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c8:9f:6e:d1:43:25:45:59:1a:f7:0a:2d:8c:7a:6d:ce:25:
8b:3d:e4:f1:bb:1d:a2:c3:c9:98:94:53:64:ea:43:97:cd:9c:
c8:8b:1f:fc:3f:36:39:97:79:d9:cd:16:be:9e:0f:7a:4c:73:
80:4c:b4:77:19:7f:21:81:35:45:c8:ea:87:f8:ba:64:bc:71:
3c:fe:77:b4:ec:a0:66:fd:a0:76:77:a4:76:ee:00:5f:26:39:
e3:2d:3f:88:47:2f:6c:2a:b2:03:34:8b:94:f3:28:ba:79:b6:
05:10:e5:77:e6:28:ec:57:fa:c2:24:6e:b1:da:0f:b9:9a:4a:
fe:71:2a:80:91:b7:42:90:71:e1:f8:ac:38:3a:bb:fd:52:0f:
77:40:d9:25:29:d9:6f:9d:fc:b9:d6:9d:5c:9b:f3:29:0c:70:
15:3a:8c:17:da:59:d5:8c:c3:b5:f1:68:23:ef:31:c2:45:be:
3b:ae:04:88:a6:9d:60:17:5c:49:50:15:63:bb:fa:78:71:01:
7d:cb:70:a6:e3:32:c2:cb:76:f9:93:c1:57:1a:e4:e0:a7:3c:
2e:1a:89:be:20:1a:a3:22:bd:3a:58:1f:a1:94:88:d5:2e:aa:
aa:73:4f:3f:10:f3:fb:55:6b:62:a8:30:d1:a0:53:ef:d3:94:
f1:a6:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:12 2026 by rpki-client