Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zKyFN1nTUKGkHo6n4aZNOLAjoy4.roa
File: zKyFN1nTUKGkHo6n4aZNOLAjoy4.roa (raw, json)
Hash identifier: 9rVnUbl0dzZlJXskgie3NaGuGMHlPov/RUCWwL+D3Rc=
Subject key identifier: CC:AC:85:37:59:D3:50:A1:A4:1E:8E:A7:E1:A6:4D:38:B0:23:A3:2E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8CC6EE85AE088B4B50C7DFA99FA31098
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zKyFN1nTUKGkHo6n4aZNOLAjoy4.roa
Signing time: Thu 23 Jul 2026 02:21:15 +0000
ROA not before: Thu 23 Jul 2026 02:21:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.86.252.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8c:c6:ee:85:ae:08:8b:4b:50:c7:df:a9:9f:a3:10:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 02:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccac853759d350a1a41e8ea7e1a64d38b023a32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:f8:78:a8:b1:6a:ff:71:b5:5f:dc:b5:ec:
75:31:e6:00:d6:4e:a5:cf:10:e3:f3:ae:a1:fc:25:
3f:f0:3b:ad:77:0d:9a:9a:d3:90:5a:34:13:32:7a:
86:d3:fe:0c:af:96:4f:7a:65:40:02:7b:55:1f:f4:
39:03:2b:a5:9b:e9:68:06:1e:5f:cc:41:14:b9:93:
80:db:fc:b3:57:2f:cd:7b:6d:c4:25:16:2b:cc:6b:
9a:80:47:6f:a7:5e:a6:03:e5:2e:b3:ab:91:1c:ad:
55:42:27:76:eb:ad:9b:f8:aa:91:c1:33:e2:30:0c:
6e:ea:6d:b6:76:df:0c:07:94:8d:38:43:17:15:36:
69:e4:82:36:29:8c:79:d9:8e:07:d6:7d:cd:e0:24:
d2:3c:af:2c:4c:48:74:73:5c:ed:7b:51:ac:7b:89:
e1:98:d8:b4:c7:da:99:e5:f0:32:3e:50:08:9a:37:
2d:a8:f1:f6:66:be:5c:ca:d2:9d:ba:38:32:ce:d0:
07:2f:c6:1e:12:5e:19:d9:5a:cc:24:94:f3:4f:e3:
3d:84:33:46:42:52:4f:5d:1c:50:32:9f:61:be:6b:
69:a7:0f:6b:10:b5:30:49:4f:e0:be:29:f8:40:12:
d8:25:24:4d:ce:1a:dd:63:d7:06:64:66:4a:f3:f7:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AC:85:37:59:D3:50:A1:A4:1E:8E:A7:E1:A6:4D:38:B0:23:A3:2E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zKyFN1nTUKGkHo6n4aZNOLAjoy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.252.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c1:7e:7f:8a:30:bc:a6:07:39:96:06:2d:eb:45:d0:06:92:
c5:da:1e:35:b2:72:2e:d8:1b:59:d9:b9:44:69:48:f8:9d:ae:
d7:a4:b3:4c:33:d1:8a:a4:ac:17:27:0f:0f:11:b5:a3:68:b0:
0e:e9:10:da:f8:20:9d:c2:bd:11:22:76:21:06:09:1c:2d:0e:
d1:1f:23:f1:73:f8:81:aa:32:8b:a7:6f:6c:75:5b:3e:50:91:
25:9a:0b:38:7e:72:a7:0b:e0:01:71:9f:bf:93:09:7b:0f:2d:
62:be:19:d6:81:b9:6d:99:d5:37:a6:e5:a9:62:4f:dd:c3:a7:
59:25:08:8d:c5:b7:05:d8:b4:31:11:ed:de:47:3f:4f:4f:6f:
96:1d:0b:1f:d7:c6:e8:9b:87:6c:5e:a5:8a:ff:56:d2:d7:33:
2b:94:f5:ae:49:2b:4f:88:ce:62:f8:e1:6f:05:ed:59:e6:91:
4b:84:6e:da:2b:4b:67:58:a8:b0:35:28:f0:c4:f9:28:6d:4c:
dd:92:56:fc:56:2b:00:c1:80:3b:08:2a:41:f1:84:5a:aa:da:
86:59:e3:a5:e9:15:95:94:9f:0e:8c:f1:e0:33:d5:e9:b1:72:
dd:18:f3:d8:2e:f8:1a:4b:5e:55:83:cb:98:d7:6b:a1:e7:ec:
be:af:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:08 2026 by rpki-client