Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZzTx0BiggFlyx6SCBzITWi75TTA.roa
File: ZzTx0BiggFlyx6SCBzITWi75TTA.roa (raw, json)
Hash identifier: McSmiI+HzU09OQR2KePiKp00LkPV8bmSsxCiNWkRme0=
Subject key identifier: 67:34:F1:D0:18:A0:80:59:72:C7:A4:82:07:32:13:5A:2E:F9:4D:30
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F21B08DEBFD60EDE9D4B114C741DBE74B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZzTx0BiggFlyx6SCBzITWi75TTA.roa
Signing time: Thu 02 Jul 2026 07:17:26 +0000
ROA not before: Thu 02 Jul 2026 07:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201129
IP address blocks: 87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:b0:8d:eb:fd:60:ed:e9:d4:b1:14:c7:41:db:e7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 2 07:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6734f1d018a0805972c7a4820732135a2ef94d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:79:e8:75:be:be:67:84:aa:c1:40:6e:6d:
5f:6f:32:55:35:96:bb:2e:40:03:b2:df:e8:03:e2:
18:57:1a:80:36:49:9e:3a:21:be:15:e4:c8:89:e5:
1b:9d:e9:51:4e:8d:87:1a:eb:62:60:11:31:87:1c:
4d:6d:a5:5d:49:bf:fb:63:ce:51:fb:98:f0:d2:4b:
03:74:bf:f0:f8:84:ff:63:a3:d9:aa:a5:bd:88:97:
b8:c8:d3:c4:ab:e2:44:ed:4e:63:dd:2e:6f:eb:1e:
f2:9d:0a:82:f2:d4:67:11:60:71:42:7a:d7:57:37:
67:f2:8f:2e:e7:fe:42:3d:e7:af:22:fa:49:da:d8:
3c:ab:e8:21:49:7d:18:b1:18:cc:0b:fe:00:af:ab:
e2:b8:ab:1d:07:bc:a3:82:b8:30:2c:83:35:6f:ff:
ab:dc:08:00:e6:79:8e:fa:aa:28:f4:25:54:d1:47:
d2:43:08:9a:a0:6b:4d:b1:d1:53:51:a9:bf:67:63:
a7:04:a5:b2:0a:ec:e5:f2:05:8c:3e:38:b6:37:ed:
b0:a6:0b:d1:3a:84:a1:e1:49:30:3f:23:49:3f:48:
8d:88:4e:d3:50:bd:b1:34:b1:ab:4d:48:c7:8d:e7:
34:db:5e:54:77:86:36:62:92:c3:2f:3f:46:44:0b:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:F1:D0:18:A0:80:59:72:C7:A4:82:07:32:13:5A:2E:F9:4D:30
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZzTx0BiggFlyx6SCBzITWi75TTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
39:45:f4:60:33:37:95:3b:8b:68:06:73:ed:2d:94:dc:6e:44:
be:ee:a0:18:d2:c6:f5:1d:a2:5b:5a:51:46:d1:e8:0f:8f:d0:
76:f0:7f:ef:ca:ed:ac:89:17:32:e9:02:5e:b6:2c:4a:33:28:
8b:b7:04:87:20:1f:8b:42:09:21:a0:18:a6:b7:a9:aa:8d:e5:
ad:72:1b:2f:ce:04:c9:20:aa:3a:53:4f:8c:58:50:38:80:15:
5b:d9:cd:6d:8c:58:72:dd:fe:f8:72:84:eb:da:09:09:55:71:
ba:52:53:bf:fc:b4:82:ba:13:14:99:7d:23:0f:52:f1:6e:80:
16:c5:bf:a4:dd:3e:c5:07:a3:19:02:82:d7:ab:c2:d5:ea:32:
5a:c1:2e:dc:98:a1:1f:56:4c:ef:39:8d:46:13:91:84:a1:36:
f5:74:71:e4:6c:16:94:2e:d2:38:3f:02:12:5a:6d:01:42:1c:
70:fd:8e:04:72:ca:7d:c4:b2:3c:15:26:73:6b:70:36:19:bb:
e6:b5:44:2b:0e:36:61:62:1c:f1:dd:d1:19:f7:5d:dd:82:70:
19:0b:3c:29:af:e5:de:f9:5a:a4:17:8a:fd:b5:74:11:74:9f:
55:e1:13:ac:05:50:20:74:1a:36:52:1e:91:4e:3e:3f:8d:84:
d6:73:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:34 2026 by rpki-client