Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZlpXqVKCSOpzitULX_1QuMr69q8.roa
File: ZlpXqVKCSOpzitULX_1QuMr69q8.roa (raw, json)
Hash identifier: iokjJLvZXm1jdAotix4BL1oWckm4JJXar3idc05SYZo=
Subject key identifier: 66:5A:57:A9:52:82:48:EA:73:8A:D5:0B:5F:FD:50:B8:CA:FA:F6:AF
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F26B638228A481F46D571CE5F66A438E5
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZlpXqVKCSOpzitULX_1QuMr69q8.roa
Signing time: Fri 03 Jul 2026 06:41:43 +0000
ROA not before: Fri 03 Jul 2026 06:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215238
IP address blocks: 87.76.130.0/24 maxlen: 24
87.76.152.0/24 maxlen: 24
87.76.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:b6:38:22:8a:48:1f:46:d5:71:ce:5f:66:a4:38:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 3 06:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=665a57a9528248ea738ad50b5ffd50b8cafaf6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:93:a0:7d:10:d8:74:05:ca:88:84:cd:b3:
a3:13:f4:05:19:67:2f:34:9a:fb:6b:05:39:a5:8b:
75:a2:df:26:b3:a6:c3:0b:f1:21:72:c2:05:2e:04:
28:30:b2:d9:74:bc:78:52:7a:54:c0:7b:c1:05:20:
bb:39:71:6f:e1:03:2d:18:c6:04:d6:77:df:19:56:
a5:91:bc:53:7e:b2:ae:5f:61:af:f8:7b:81:73:37:
87:f3:6d:56:bc:0d:10:ae:37:34:eb:de:57:75:64:
23:03:cd:9a:0f:2b:a4:09:00:28:d5:43:a1:1a:59:
3f:95:7e:b4:bd:9b:c3:e6:5a:34:b9:cd:af:ae:b4:
31:ad:95:28:ab:f2:51:bc:cd:02:2a:06:68:89:a5:
2b:96:ee:67:58:c9:9a:89:db:ab:0b:6a:eb:e7:4a:
c1:4b:68:21:18:15:94:c7:a7:66:3c:fb:2b:fb:1e:
64:26:43:b8:fc:87:f5:43:57:d9:d2:dc:b6:fe:17:
f7:96:d0:a4:fa:be:fc:ef:6d:94:a7:66:c1:68:e4:
4f:b0:fb:03:0d:70:c0:f7:6c:59:9f:8e:cf:68:31:
cf:65:13:65:32:19:5b:c9:2f:d8:90:5c:8a:2e:a7:
26:9f:e1:03:7d:24:75:72:95:52:a1:47:3b:eb:67:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5A:57:A9:52:82:48:EA:73:8A:D5:0B:5F:FD:50:B8:CA:FA:F6:AF
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZlpXqVKCSOpzitULX_1QuMr69q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.130.0/24
87.76.152.0/24
87.76.161.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6a:e6:80:c7:cf:db:82:c6:a3:e0:f2:57:39:85:a5:90:c6:
23:e7:88:09:df:ef:50:b7:b6:0d:d0:ef:76:df:1c:b7:d2:61:
e1:ed:59:a5:30:f3:1c:4a:20:55:fc:30:1d:2c:d2:18:c3:b7:
26:39:ea:49:98:5f:2e:d3:11:02:b4:df:45:24:67:5e:07:a1:
06:5f:2b:dc:dd:35:ca:e1:34:10:b9:43:d5:47:a9:12:bd:a7:
53:12:80:57:63:5d:08:e3:7d:7c:2e:89:56:2b:df:d4:63:d3:
d1:23:38:32:59:3b:8b:5b:38:07:69:85:88:11:c4:74:03:bd:
72:e4:28:75:20:b3:16:0b:13:19:6b:7a:c0:e6:37:d7:c3:1a:
7b:33:74:7e:22:2e:17:16:cb:e9:ee:5a:5a:fd:74:7c:c2:ea:
e7:a7:a0:bc:f0:1e:5f:fc:5f:b6:83:d4:ab:c2:b7:9e:94:91:
8c:fa:cd:ca:2d:99:14:09:7f:b8:53:80:00:39:b2:61:e8:6c:
eb:5b:e8:97:23:b4:77:5d:39:6a:ad:a2:c5:c6:50:55:d8:fa:
77:94:97:ea:83:b2:88:26:cb:b7:28:e0:cb:77:cb:62:c6:8c:
9b:f3:0a:d9:b9:8a:03:44:f5:b7:1c:5c:7d:1f:f6:bd:e3:02:
a5:37:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:41 2026 by rpki-client