Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/ZM__6ZrfQ4R-HkxAG3J8qUNVltU.roa
File: ZM__6ZrfQ4R-HkxAG3J8qUNVltU.roa (raw, json)
Hash identifier: liqMP4aaz7aIvcCZqU393aEcnVlxYIM+DKJpFlpZRtU=
Subject key identifier: 64:CF:FF:E9:9A:DF:43:84:7E:1E:4C:40:1B:72:7C:A9:43:55:96:D5
Certificate issuer: /CN=e271db80e670298c398d4852cec58f85c670efb0
Certificate serial: 019F236887B2C444D633CCB72B6E91ABDAB6
Authority key identifier: E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/ZM__6ZrfQ4R-HkxAG3J8qUNVltU.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 193.101.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:b2:c4:44:d6:33:cc:b7:2b:6e:91:ab:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e271db80e670298c398d4852cec58f85c670efb0
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64cfffe99adf43847e1e4c401b727ca9435596d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:af:7b:26:ae:7b:88:1d:73:33:39:c4:6c:
32:e9:12:bb:6d:54:fd:23:52:f4:e5:5a:cb:3c:69:
5a:16:18:87:72:67:92:a9:d2:0f:40:c0:f8:99:1e:
50:1d:39:9b:e1:fe:f4:83:b5:15:90:3f:b7:6b:bb:
8d:76:96:8c:47:30:d4:69:38:7c:64:b5:f7:69:07:
a4:26:c0:cc:e9:04:f1:ab:01:2e:29:da:de:a3:c4:
86:d9:7a:6f:3a:fb:f8:cc:36:6f:dc:df:dc:f7:b9:
0c:29:af:e3:d3:15:0d:0b:58:66:a5:b7:01:7a:ce:
a8:e9:1c:e7:e9:f1:3e:51:55:48:0a:83:ca:e3:26:
5a:2e:8f:70:58:ad:c5:7e:4c:ab:4e:60:c3:df:aa:
09:5c:8c:2e:e4:89:b2:a8:87:4f:60:a6:fd:fd:13:
bb:a3:04:64:4b:fd:89:b5:1e:36:68:f3:77:e6:cc:
59:eb:b4:e0:ab:95:12:77:0d:fd:19:e3:7e:5e:7f:
a4:76:60:38:f9:1a:9a:ac:b5:d1:a6:2b:ae:50:ab:
21:75:77:6e:a4:c1:60:19:68:76:d5:5d:43:d9:fd:
b0:9f:13:d4:cc:74:c0:6f:c8:99:a8:7d:33:ae:b4:
1f:89:80:34:62:4d:be:8b:5a:52:13:8c:34:29:99:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:FF:E9:9A:DF:43:84:7E:1E:4C:40:1B:72:7C:A9:43:55:96:D5
X509v3 Authority Key Identifier:
keyid:E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/ZM__6ZrfQ4R-HkxAG3J8qUNVltU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ee:65:5f:b0:75:5c:3a:27:b5:eb:00:6c:7a:1f:95:54:d2:
6c:dc:04:ca:dd:9d:34:2c:c3:c1:99:c1:e2:f9:7d:42:65:78:
2c:28:f8:c5:1b:ce:bd:f5:52:bb:b7:aa:f2:f5:ba:4e:e0:11:
f5:1b:a3:d3:97:a8:4c:95:08:27:b3:61:a6:a2:8b:aa:e4:5f:
fd:44:63:ee:11:2d:88:4c:a6:f4:61:ed:72:e3:9a:74:e6:c8:
4d:eb:46:4e:ae:06:2c:89:e6:58:15:06:a7:5e:a8:6d:70:01:
0a:d2:e3:f3:60:0c:07:ca:47:60:bf:62:be:b2:a4:97:6c:0f:
db:6f:88:a7:4b:79:e1:ae:d7:24:a1:c1:68:a5:90:12:8f:60:
33:99:de:7d:65:23:c5:e9:cd:7c:88:bf:82:cc:63:bb:d9:e6:
9c:a7:c1:fb:9e:db:6f:1e:0c:c7:91:32:77:72:cf:04:eb:ac:
9c:6e:d6:d1:35:1e:19:04:9f:21:ae:6e:00:ee:ae:f5:1f:fc:
bd:08:d1:5a:2d:44:38:77:66:1d:22:c8:31:6a:0b:ce:17:d8:
e8:d2:bb:e1:14:e5:89:1e:90:cf:bc:f2:c6:3e:e7:8e:16:4f:
81:63:29:c5:9e:5d:42:57:ac:a6:bc:b2:da:75:cd:62:13:73:
56:82:a3:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaIeyxETWM8y3K26Rq9q2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzFkYjgwZTY3MDI5OGMzOThkNDg1MmNlYzU4Zjg1YzY3
MGVmYjAwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGNmZmZlOTlhZGY0Mzg0N2UxZTRjNDAxYjcyN2NhOTQzNTU5NmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLaveyaue4gdczM5xGwy6RK7bVT9
I1L05VrLPGlaFhiHcmeSqdIPQMD4mR5QHTmb4f70g7UVkD+3a7uNdpaMRzDUaTh8
ZLX3aQekJsDM6QTxqwEuKdreo8SG2XpvOvv4zDZv3N/c97kMKa/j0xUNC1hmpbcB
es6o6Rzn6fE+UVVICoPK4yZaLo9wWK3FfkyrTmDD36oJXIwu5ImyqIdPYKb9/RO7
owRkS/2JtR42aPN35sxZ67Tgq5USdw39GeN+Xn+kdmA4+RqarLXRpiuuUKshdXdu
pMFgGWh21V1D2f2wnxPUzHTAb8iZqH0zrrQfiYA0Yk2+i1pSE4w0KZk9SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTP/+ma30OEfh5MQBtyfKlDVZbVMB8GA1UdIwQY
MBaAFOJx24DmcCmMOY1IUs7Fj4XGcO+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5IYmdPWndLWXc1alVoU3pzV1BoY1p3NzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct
YWUxNzU5OTE2ZGYwLzEvWk1fXzZacmZRNFItSGt4QUczSjhxVU5WbHRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw
LzEvNG5IYmdPWndLWXc1alVoU3pzV1BoY1p3NzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWWzMA0G
CSqGSIb3DQEBCwUAA4IBAQAd7mVfsHVcOie16wBseh+VVNJs3ATK3Z00LMPBmcHi
+X1CZXgsKPjFG8699VK7t6ry9bpO4BH1G6PTl6hMlQgns2Gmoouq5F/9RGPuES2I
TKb0Ye1y45p05shN60ZOrgYsieZYFQanXqhtcAEK0uPzYAwHykdgv2K+sqSXbA/b
b4inS3nhrtckocFopZASj2Azmd59ZSPF6c18iL+CzGO72eacp8H7nttvHgzHkTJ3
cs8E66ycbtbRNR4ZBJ8hrm4A7q71H/y9CNFaLUQ4d2YdIsgxagvOF9jo0rvhFOWJ
HpDPvPLGPueOFk+BYynFnl1CV6ymvLLadc1iE3NWgqMw
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:55 2026 by rpki-client