Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/pZrjfjf_j5J65yCyHilQawJqDwg.roa
File: pZrjfjf_j5J65yCyHilQawJqDwg.roa (raw, json)
Hash identifier: r3T5rzqQjb77ekGUy2kjQH3hcLBv7gw5mVaSV1v5P8w=
Subject key identifier: A5:9A:E3:7E:37:FF:8F:92:7A:E7:20:B2:1E:29:50:6B:02:6A:0F:08
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A1441DEDFA78940E50AB3B1096AA8C7B52
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/pZrjfjf_j5J65yCyHilQawJqDwg.roa
Signing time: Fri 16 Oct 2026 09:49:34 +0000
ROA not before: Fri 16 Oct 2026 09:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 187.7.204.0/24 maxlen: 24
187.52.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:1d:ed:fa:78:94:0e:50:ab:3b:10:96:aa:8c:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 16 09:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a59ae37e37ff8f927ae720b21e29506b026a0f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:c6:53:ff:7b:bc:ba:e5:a8:68:ec:b2:ef:
5c:66:1a:60:5e:d9:6c:b2:9c:01:76:60:0e:d2:d0:
b4:a1:f3:5a:76:0b:8a:35:72:1e:24:d9:dd:9f:a0:
11:ac:7e:48:cb:60:9a:92:9a:b3:20:9b:53:49:06:
28:ce:e6:c0:f6:98:c2:84:2f:fc:b5:f8:17:e1:7e:
48:2c:59:2f:33:92:71:d8:f6:9c:41:4b:c1:68:49:
62:66:fd:00:c4:2f:36:a3:fb:d6:d5:fe:61:74:fc:
b8:0e:34:ac:c1:ef:55:fd:5b:8e:7f:35:56:20:7f:
cd:78:77:7f:52:1c:13:81:7a:aa:dc:eb:3f:f3:2e:
e3:ce:97:5b:8e:b5:4a:61:92:62:0d:48:1f:45:9c:
49:47:e6:b1:c9:42:67:47:a9:ec:32:5e:eb:f7:b5:
15:7d:6c:67:d0:6d:58:a1:40:8c:8a:3b:d7:02:f2:
49:3c:72:30:fe:1f:69:a0:83:a7:ef:2c:1f:50:90:
03:61:f3:43:01:02:c0:1b:12:e9:ab:f4:20:7e:21:
ee:7b:ae:cb:11:79:33:41:dd:7b:ec:22:6a:91:5b:
c0:99:26:69:43:54:8c:08:f5:05:42:61:06:65:ac:
78:53:09:b8:6c:62:84:02:57:32:86:60:89:60:65:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9A:E3:7E:37:FF:8F:92:7A:E7:20:B2:1E:29:50:6B:02:6A:0F:08
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/pZrjfjf_j5J65yCyHilQawJqDwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.204.0/24
187.52.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:79:57:7f:e9:6c:79:14:85:28:af:58:94:f4:26:87:89:fb:
93:0c:9d:b7:e3:9d:33:3e:48:b0:d8:1f:42:2f:85:39:f6:37:
62:9a:8f:f6:5c:b3:37:b3:ed:08:f5:75:a5:46:58:3e:39:ee:
14:8f:14:25:27:56:6a:0e:e9:23:47:82:61:b3:9c:65:6e:f7:
15:50:56:61:d3:50:75:62:1f:57:b0:32:f2:d4:dc:90:54:40:
a9:0e:d4:be:9b:fa:cf:c3:56:24:2c:62:83:4a:8b:5d:ed:00:
bb:df:ae:d7:de:92:f2:a3:2e:d5:5f:06:b6:c0:f0:29:20:b4:
0a:f3:e5:12:2f:a5:76:38:63:a6:c7:69:79:23:95:b4:f1:1c:
d8:07:7d:09:f2:59:bb:e6:0e:d4:23:5c:14:0c:b3:7a:5b:f9:
17:c2:83:0f:37:6d:71:82:df:88:a7:19:c6:9a:86:0b:91:4c:
51:07:25:9f:7e:a2:49:a2:7a:13:ad:07:11:53:18:b4:b4:d0:
3a:d4:9e:d5:e6:e5:9d:ac:1e:8e:bd:61:d6:23:da:f4:ee:de:
65:80:f7:16:ac:22:90:81:19:5e:21:02:2c:f8:de:88:0a:1d:
2d:ef:14:ab:a4:aa:63:f0:77:b5:95:3f:81:5a:42:55:94:8a:
c5:a3:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:37 2026 by rpki-client