Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ZEu3iTbRkapDE8llq769uxvUO4A.roa
File: ZEu3iTbRkapDE8llq769uxvUO4A.roa (raw, json)
Hash identifier: 1zC1gSqDQ5rA+f85ib5xzsgpoRXGb/tV6ISg/4fcqYc=
Subject key identifier: 64:4B:B7:89:36:D1:91:AA:43:13:C9:65:AB:BE:BD:BB:1B:D4:3B:80
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019FF20B8E2B8FD3B055595FA74F3DC59BCD
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ZEu3iTbRkapDE8llq769uxvUO4A.roa
Signing time: Tue 11 Aug 2026 18:17:51 +0000
ROA not before: Tue 11 Aug 2026 18:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 95.164.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:0b:8e:2b:8f:d3:b0:55:59:5f:a7:4f:3d:c5:9b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Aug 11 18:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=644bb78936d191aa4313c965abbebdbb1bd43b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:ed:8b:bc:05:a5:58:31:2f:6f:cc:13:68:
32:3f:54:7d:4d:a0:79:26:4c:29:37:c7:c4:23:11:
c3:97:b0:d3:bc:d4:e1:6f:6a:5d:aa:35:fb:b7:10:
b5:7d:cd:cb:ae:94:83:0e:b2:f4:1f:af:0e:f7:1e:
6f:ec:ef:fc:d6:e4:3f:5c:41:9e:f0:fb:21:0a:fd:
1d:36:55:8e:ec:e5:dd:b1:ac:47:35:45:7d:7c:cd:
64:e6:a4:93:be:ad:1e:21:0f:66:fc:84:7e:87:6d:
8e:7b:3c:03:d1:06:1e:f7:7e:7b:14:70:1a:3c:ba:
a2:a9:cc:c0:87:65:00:8b:74:d7:ad:3e:ef:8f:a3:
0c:0e:92:cf:79:62:c7:ef:8d:d9:ef:1f:f9:ae:85:
c0:b0:4a:4b:20:2e:fc:1e:86:51:cf:f2:33:e8:e9:
13:ec:2d:fc:07:32:e8:23:3c:94:a9:78:fc:fc:17:
33:63:e4:12:c3:5b:d4:61:a2:c1:2c:99:59:4d:2c:
d6:de:c4:3d:58:ce:74:45:79:fe:4f:ec:b1:d6:2c:
29:b3:dc:5d:57:54:36:12:b8:45:8c:75:fa:44:1c:
26:83:63:9e:04:4a:6b:e1:13:0d:7d:23:1d:48:4d:
96:14:89:50:7f:69:94:94:81:57:91:55:9c:3d:4a:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:B7:89:36:D1:91:AA:43:13:C9:65:AB:BE:BD:BB:1B:D4:3B:80
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ZEu3iTbRkapDE8llq769uxvUO4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:98:3d:80:eb:be:67:70:f7:e5:7b:9e:74:1d:1e:d1:64:20:
6a:dd:9b:4f:ac:eb:72:f3:04:f8:0b:15:0c:7c:7e:eb:a5:fa:
3c:47:13:53:91:d6:2a:d6:f1:42:0a:32:75:1c:cc:92:2b:80:
2c:d5:01:e3:af:48:18:d4:04:3e:39:95:f5:7e:8c:1a:1e:e1:
2b:12:a6:c1:9f:a6:52:fd:26:74:d5:c7:17:11:38:be:db:f9:
e1:f6:29:7b:16:e7:b4:8f:a7:b4:a3:6b:75:c3:a1:1f:54:1c:
75:ad:86:36:ea:a0:94:1c:d2:d4:ba:f7:4c:b4:99:bb:dd:0d:
96:ba:74:f0:46:f9:df:7f:ac:ad:aa:7f:f5:e8:be:0f:a7:c5:
41:44:4a:40:26:3f:ed:3c:68:f6:b7:53:7f:83:19:17:d2:77:
30:02:b4:3a:f0:a1:89:51:67:39:55:1d:7b:80:72:d8:b4:db:
17:b1:a3:94:6e:9b:ad:bf:54:3e:75:f2:4e:71:4c:24:82:0e:
81:6a:ba:f8:0f:7c:ae:41:36:1d:bb:55:b9:67:95:68:66:4e:
bf:5d:b1:23:dd:c2:16:ab:b6:eb:66:3e:93:47:22:ea:f7:d1:
f8:7d:75:8c:9a:59:26:e3:1d:c5:09:22:78:eb:d3:da:87:8d:
31:92:2a:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/yC44rj9OwVVlfp089xZvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwODExMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDRiYjc4OTM2ZDE5MWFhNDMxM2M5NjVhYmJlYmRiYjFiZDQzYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/fti7wFpVgxL2/ME2gyP1R9TaB5
JkwpN8fEIxHDl7DTvNThb2pdqjX7txC1fc3LrpSDDrL0H68O9x5v7O/81uQ/XEGe
8PshCv0dNlWO7OXdsaxHNUV9fM1k5qSTvq0eIQ9m/IR+h22OezwD0QYe9357FHAa
PLqiqczAh2UAi3TXrT7vj6MMDpLPeWLH743Z7x/5roXAsEpLIC78HoZRz/Iz6OkT
7C38BzLoIzyUqXj8/BczY+QSw1vUYaLBLJlZTSzW3sQ9WM50RXn+T+yx1iwps9xd
V1Q2ErhFjHX6RBwmg2OeBEpr4RMNfSMdSE2WFIlQf2mUlIFXkVWcPUpZxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRLt4k20ZGqQxPJZau+vbsb1DuAMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvWkV1M2lUYlJrYXBERThsbHE3Njl1eHZVTzRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6RNMA0G
CSqGSIb3DQEBCwUAA4IBAQBumD2A675ncPfle550HR7RZCBq3ZtPrOty8wT4CxUM
fH7rpfo8RxNTkdYq1vFCCjJ1HMySK4As1QHjr0gY1AQ+OZX1fowaHuErEqbBn6ZS
/SZ01ccXETi+2/nh9il7Fue0j6e0o2t1w6EfVBx1rYY26qCUHNLUuvdMtJm73Q2W
unTwRvnff6ytqn/16L4Pp8VBREpAJj/tPGj2t1N/gxkX0ncwArQ68KGJUWc5VR17
gHLYtNsXsaOUbputv1Q+dfJOcUwkgg6Barr4D3yuQTYdu1W5Z5VoZk6/XbEj3cIW
q7brZj6TRyLq99H4fXWMmlkm4x3FCSJ469Pah40xkir0
-----END CERTIFICATE-----
Generated at Tue Aug 25 23:35:16 2026 by rpki-client