Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa
File: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (raw, json)
Hash identifier: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=
Subject key identifier: CE:7E:48:9D:5C:A6:E1:0C:39:A6:36:8F:87:2B:93:79:19:7D:6D:74
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019F1402CFA6D074D9BC25FD89D7C428018B
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa
Signing time: Mon 29 Jun 2026 15:32:36 +0000
ROA not before: Mon 29 Jun 2026 15:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215350
IP address blocks: 87.248.141.0/24 maxlen: 24
87.248.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:02:cf:a6:d0:74:d9:bc:25:fd:89:d7:c4:28:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jun 29 15:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce7e489d5ca6e10c39a6368f872b9379197d6d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:8c:fb:d7:1d:48:a4:24:a0:77:00:d9:2a:
67:f2:b6:1e:1c:b6:60:26:76:a5:3a:c1:84:7b:08:
82:cc:07:0c:ce:6b:c0:d6:b9:ac:54:79:66:32:5e:
e0:66:56:40:da:7e:4a:9a:92:e1:eb:db:fc:36:f6:
41:8b:63:15:19:2b:9a:12:50:bd:31:65:dc:3b:97:
27:20:76:c1:1e:ae:26:10:23:8b:7d:d3:e1:4c:13:
a8:7e:20:0a:ca:a1:f4:50:da:d8:63:f9:67:ab:90:
81:b6:66:61:21:c7:ed:a3:ac:a7:74:f1:c0:da:1c:
e6:0a:98:1a:04:b5:8f:3b:c3:90:b3:a1:9e:72:f2:
c9:5a:56:49:5a:6a:5f:0e:20:17:3a:c6:15:8e:19:
82:f8:e6:c8:bb:69:f2:78:7a:34:8a:aa:43:c6:52:
cd:c2:72:a0:4c:32:1e:16:75:a0:23:16:d3:e6:10:
61:6f:14:c6:65:0b:1b:41:25:9d:3f:eb:16:6e:7a:
46:db:48:c9:c6:9e:f5:fb:17:52:bb:8e:30:de:be:
fa:e3:7f:c7:7a:f8:11:ac:52:26:58:29:37:a5:f2:
da:44:86:3f:ca:49:3e:99:9c:46:57:3e:2d:92:03:
bf:ad:17:52:39:ad:0d:20:6f:73:0b:b2:9b:0e:d4:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7E:48:9D:5C:A6:E1:0C:39:A6:36:8F:87:2B:93:79:19:7D:6D:74
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.141.0-87.248.142.255
Signature Algorithm: sha256WithRSAEncryption
44:6d:a8:4f:5f:3e:ea:ae:07:a8:fd:2c:15:d9:a9:71:07:12:
4a:01:55:b2:91:41:3c:50:dc:66:37:f3:e7:b4:e9:47:f6:e1:
e8:b2:df:a0:6b:80:26:1f:2f:27:4a:95:c6:68:bd:96:96:3b:
e8:25:c9:00:04:4a:58:e7:cc:72:0c:0e:af:77:54:70:7d:e9:
4d:f3:22:82:06:81:94:7f:17:aa:5a:1e:90:18:9a:d2:66:5e:
43:cd:80:d7:a9:d3:71:c4:78:ae:27:e0:1f:55:f6:3f:ee:72:
7d:55:21:9f:14:60:e6:96:cb:7d:b6:14:47:0e:7f:10:97:b8:
f2:43:8a:54:76:a4:b7:bb:ac:7b:65:7a:29:a1:fa:12:e1:8a:
5b:04:3f:86:98:19:dd:9e:f6:1c:70:d5:64:1c:ac:38:46:be:
50:4a:f9:e4:9b:13:b3:46:68:79:93:89:a8:82:85:ca:09:2d:
79:5b:dd:3b:74:fb:54:b5:23:be:71:e7:a4:18:9a:8f:3b:ee:
3c:8a:11:13:41:75:3f:37:39:9b:ca:7c:4c:ee:1c:c5:5b:b7:
39:31:31:0e:48:15:85:07:8d:92:1e:35:39:da:ac:b8:23:58:
fa:6d:43:82:9b:55:0d:f6:79:e3:9e:a2:14:93:d7:35:30:8e:
1d:9a:53:44
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8UAs+m0HTZvCX9idfEKAGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjYwNjI5MTUzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTdlNDg5ZDVjYTZlMTBjMzlhNjM2OGY4NzJiOTM3OTE5N2Q2ZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9KM+9cdSKQkoHcA2Spn8rYeHLZg
JnalOsGEewiCzAcMzmvA1rmsVHlmMl7gZlZA2n5KmpLh69v8NvZBi2MVGSuaElC9
MWXcO5cnIHbBHq4mECOLfdPhTBOofiAKyqH0UNrYY/lnq5CBtmZhIcfto6yndPHA
2hzmCpgaBLWPO8OQs6GecvLJWlZJWmpfDiAXOsYVjhmC+ObIu2nyeHo0iqpDxlLN
wnKgTDIeFnWgIxbT5hBhbxTGZQsbQSWdP+sWbnpG20jJxp71+xdSu44w3r7643/H
evgRrFImWCk3pfLaRIY/ykk+mZxGVz4tkgO/rRdSOa0NIG9zC7KbDtTBoQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFM5+SJ1cpuEMOaY2j4crk3kZfW10MB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvem41SW5WeW00UXc1cGphUGh5dVRlUmw5YlhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABX+I0D
BABX+I4wDQYJKoZIhvcNAQELBQADggEBAERtqE9fPuquB6j9LBXZqXEHEkoBVbKR
QTxQ3GY38+e06Uf24eiy36BrgCYfLydKlcZovZaWO+glyQAESljnzHIMDq93VHB9
6U3zIoIGgZR/F6paHpAYmtJmXkPNgNep03HEeK4n4B9V9j/ucn1VIZ8UYOaWy322
FEcOfxCXuPJDilR2pLe7rHtleimh+hLhilsEP4aYGd2e9hxw1WQcrDhGvlBK+eSb
E7NGaHmTiaiChcoJLXlb3Tt0+1S1I75x56QYmo877jyKERNBdT83OZvKfEzuHMVb
tzkxMQ5IFYUHjZIeNTnarLgjWPptQ4KbVQ32eeOeohST1zUwjh2aU0Q=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:36 2026 by rpki-client