Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/zl7pVhShXwzF3szMJckP1dsnrcA.roa
File: zl7pVhShXwzF3szMJckP1dsnrcA.roa (raw, json)
Hash identifier: +ijXNsLTbUEGCYTg4yp0+tqDYYFAXWvZNGMopKhUHfo=
Subject key identifier: CE:5E:E9:56:14:A1:5F:0C:C5:DE:CC:CC:25:C9:0F:D5:DB:27:AD:C0
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A07BF30B0D1D7C2A17FD9833E1E18F5373
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/zl7pVhShXwzF3szMJckP1dsnrcA.roa
Signing time: Mon 07 Sep 2026 12:58:40 +0000
ROA not before: Mon 07 Sep 2026 12:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36352
IP address blocks: 87.76.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:f3:0b:0d:1d:7c:2a:17:fd:98:33:e1:e1:8f:53:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 7 12:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce5ee95614a15f0cc5decccc25c90fd5db27adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:9f:09:09:bd:54:01:61:a4:f6:50:05:d0:
fd:9b:82:13:b5:56:b2:7f:a2:82:9a:74:df:a7:d8:
45:9f:63:ba:2f:dd:bf:80:ac:94:47:5c:7d:cc:d4:
1c:8f:70:80:02:11:be:23:ff:ea:6c:aa:32:0a:98:
67:3f:5f:03:fc:cb:29:de:e2:7b:66:aa:68:dc:5e:
4b:a3:be:e2:fc:56:93:72:3d:52:09:c6:4d:d3:ff:
ff:2e:2c:53:2c:0c:7a:77:97:ac:bf:ad:2f:db:a7:
2b:d0:ae:81:f5:e5:58:28:2e:4c:c0:2a:a1:4f:26:
b7:eb:d7:4e:18:e0:d2:63:4b:61:50:4d:3f:d5:1c:
34:fc:7d:ea:af:7a:f9:9e:20:40:54:f0:43:43:6e:
2a:18:16:85:52:6d:8e:43:94:13:2c:52:c8:a2:4f:
b7:5d:e0:82:42:8c:ae:2c:56:71:09:cf:0f:1a:c6:
28:ae:6a:dc:7c:c1:28:e4:2f:ea:f2:fc:d7:bb:ed:
d6:5c:98:32:c7:3d:45:3f:ed:fd:21:85:ae:fa:5f:
f9:2e:d4:33:c5:d8:b9:d9:0b:d7:07:5a:63:96:03:
4a:c3:27:9d:20:ec:8c:a0:a7:27:70:f5:c4:1f:a6:
0d:d0:27:65:5f:80:9e:c6:39:4c:68:de:46:91:ed:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:E9:56:14:A1:5F:0C:C5:DE:CC:CC:25:C9:0F:D5:DB:27:AD:C0
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/zl7pVhShXwzF3szMJckP1dsnrcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.178.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0a:32:1f:55:e6:4c:f3:52:82:00:bb:ce:30:e7:e3:a7:0c:
fd:57:65:20:cc:bb:a1:87:4a:f7:67:29:40:1c:c9:f3:56:c0:
a4:9d:1d:89:14:f3:b6:f2:d8:ee:54:5f:a8:84:ca:d2:f8:1f:
46:be:d3:80:ba:0f:cf:6e:c7:07:ba:58:71:57:f2:4a:76:9f:
f8:b7:60:92:4c:ab:a3:4f:ca:3e:8d:45:f3:b9:7e:b5:10:45:
da:f0:a7:4f:24:3f:13:78:70:4c:b5:d2:17:de:5a:5f:37:12:
44:a2:fd:92:6f:4f:e7:51:30:f6:d1:4c:0f:2f:ff:f4:80:87:
ad:90:c7:7d:3f:b0:bc:2e:f5:11:3a:37:c6:aa:0a:55:ba:ee:
e7:6b:15:45:6c:50:bf:10:fa:cd:2c:fb:21:42:88:84:ef:76:
b8:70:51:c0:0b:c3:a9:6c:0c:e9:ea:8d:04:05:bc:b5:dc:12:
4b:f1:b1:a4:8f:2b:2f:b6:4c:a6:1a:42:88:24:58:04:de:d2:
8e:bd:4c:97:30:94:50:b7:be:5a:46:eb:99:f2:12:dc:b2:90:
d4:a5:b2:36:aa:fd:3a:ba:13:34:26:7c:96:88:c1:08:81:23:
87:a6:48:1b:1d:67:75:a8:f9:58:78:71:97:2c:86:b8:dd:c7:
99:06:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:07 2026 by rpki-client