Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZM5cHX7ZtVovAZnomlNM2U70lDo.roa
File: ZM5cHX7ZtVovAZnomlNM2U70lDo.roa (raw, json)
Hash identifier: hu8XegVy6uPgyXF1o3cfvkVX6+kdM5b+gBb2wdTOCB4=
Subject key identifier: 64:CE:5C:1D:7E:D9:B5:5A:2F:01:99:E8:9A:53:4C:D9:4E:F4:94:3A
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FCC3299949276A31F26C1AD9B4D2F4409
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZM5cHX7ZtVovAZnomlNM2U70lDo.roa
Signing time: Tue 04 Aug 2026 09:54:55 +0000
ROA not before: Tue 04 Aug 2026 09:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213488
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:32:99:94:92:76:a3:1f:26:c1:ad:9b:4d:2f:44:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 4 09:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64ce5c1d7ed9b55a2f0199e89a534cd94ef4943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:45:0b:7e:22:19:c2:26:25:ac:c7:11:48:
3c:1d:8c:99:c2:44:60:a5:f5:e9:5a:ab:60:4b:2a:
a3:eb:08:9c:79:bd:df:4d:e6:48:fb:93:0b:b7:b1:
29:31:2d:8b:25:d4:ed:3b:f2:cb:4d:38:f8:17:70:
61:f6:37:bb:0c:ed:ca:93:21:2e:c5:5f:15:06:c6:
1c:bc:f0:e1:22:38:2a:e1:75:37:fe:62:7e:eb:f2:
24:98:02:aa:3d:ee:82:96:35:9c:75:2c:60:f9:d7:
6b:38:0a:a7:e9:30:9c:25:e2:fa:97:36:fc:ee:0f:
66:d9:f6:83:de:04:dc:0f:99:bc:37:37:d0:22:44:
56:2e:57:f0:91:37:70:3c:4e:4f:dc:b8:c8:4f:54:
52:cc:58:32:c4:a2:d2:05:dd:66:ec:ac:67:6f:a0:
b7:18:95:46:53:47:84:b3:35:15:73:fb:79:ca:b2:
dd:97:7d:80:ed:7e:c3:e9:7b:69:bb:76:33:58:44:
90:cf:a6:d4:2a:b3:2c:94:77:b5:d4:d0:67:0f:84:
98:f8:19:a8:28:42:28:aa:e3:9d:75:ed:0b:b9:20:
74:67:75:2c:b7:14:7f:4e:4f:6d:3a:52:00:6d:7b:
bc:42:5a:8c:21:9d:22:f4:d0:de:48:ac:94:19:64:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:5C:1D:7E:D9:B5:5A:2F:01:99:E8:9A:53:4C:D9:4E:F4:94:3A
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZM5cHX7ZtVovAZnomlNM2U70lDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
97:26:d4:1e:25:ed:17:b8:af:fe:e8:5c:11:0a:2f:4b:8f:85:
b8:82:19:ca:9a:03:cd:56:f0:9e:3d:61:8f:a1:d4:d8:e7:9d:
20:ce:5f:66:45:67:24:02:ea:1d:c3:da:2c:ff:23:2f:5e:23:
d1:81:29:7d:60:07:08:02:83:4f:4c:a7:50:ee:17:1a:9a:f5:
7e:de:be:70:71:a9:8d:bf:54:b6:a3:d5:c7:fa:d6:61:4e:38:
bb:eb:49:ce:44:ed:de:9a:fc:95:37:58:fc:dc:26:5c:26:f0:
e9:f1:8d:d8:77:4d:f7:f5:b0:5e:73:87:7a:70:d8:6b:94:dc:
54:8e:fc:9c:bb:4c:08:51:1d:28:d6:45:8b:67:b9:19:71:81:
ef:7c:3f:04:d7:b0:5b:83:a0:05:a6:3d:9f:b5:17:43:e3:00:
91:18:d4:6a:76:5e:c0:2d:cd:be:8e:f0:b8:ad:29:90:9f:d1:
46:41:a8:a0:92:fc:57:f3:cd:b5:b9:41:f7:50:10:bc:b9:4b:
2a:d6:fb:9c:35:ad:c0:1d:fb:8d:28:bf:68:f8:86:f9:3f:c4:
34:db:78:54:ee:9f:12:58:be:60:fb:b5:ab:48:da:85:90:fc:
86:d3:4c:af:c2:44:c0:47:1b:76:23:7b:05:40:19:b4:e3:48:
57:4d:46:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/MMpmUknajHybBrZtNL0QJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwODA0MDk1NDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGNlNWMxZDdlZDliNTVhMmYwMTk5ZTg5YTUzNGNkOTRlZjQ5NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbBFC34iGcImJazHEUg8HYyZwkRg
pfXpWqtgSyqj6wiceb3fTeZI+5MLt7EpMS2LJdTtO/LLTTj4F3Bh9je7DO3KkyEu
xV8VBsYcvPDhIjgq4XU3/mJ+6/IkmAKqPe6CljWcdSxg+ddrOAqn6TCcJeL6lzb8
7g9m2faD3gTcD5m8NzfQIkRWLlfwkTdwPE5P3LjIT1RSzFgyxKLSBd1m7Kxnb6C3
GJVGU0eEszUVc/t5yrLdl32A7X7D6Xtpu3YzWESQz6bUKrMslHe11NBnD4SY+Bmo
KEIoquOdde0LuSB0Z3UstxR/Tk9tOlIAbXu8QlqMIZ0i9NDeSKyUGWTZkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTOXB1+2bVaLwGZ6JpTTNlO9JQ6MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvWk01Y0hYN1p0Vm92QVpub21sTk0yVTcwbERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zDMA0G
CSqGSIb3DQEBCwUAA4IBAQCXJtQeJe0XuK/+6FwRCi9Lj4W4ghnKmgPNVvCePWGP
odTY550gzl9mRWckAuodw9os/yMvXiPRgSl9YAcIAoNPTKdQ7hcamvV+3r5wcamN
v1S2o9XH+tZhTji760nORO3emvyVN1j83CZcJvDp8Y3Yd0339bBec4d6cNhrlNxU
jvycu0wIUR0o1kWLZ7kZcYHvfD8E17Bbg6AFpj2ftRdD4wCRGNRqdl7ALc2+jvC4
rSmQn9FGQaigkvxX8821uUH3UBC8uUsq1vucNa3AHfuNKL9o+Ib5P8Q023hU7p8S
WL5g+7WrSNqFkPyG00yvwkTARxt2I3sFQBm040hXTUYV
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:53 2026 by rpki-client