Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/ZH56Qum1glVLKY4Yjq4VEpLsJII.roa
File: ZH56Qum1glVLKY4Yjq4VEpLsJII.roa (raw, json)
Hash identifier: 8zGbrPFTbgYI5SC/y1TlRunxSsWJPSm9GqUbTo+MiCA=
Subject key identifier: 64:7E:7A:42:E9:B5:82:55:4B:29:8E:18:8E:AE:15:12:92:EC:24:82
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 01A0D86B2008DAAEC420FE6748F42611951E
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/ZH56Qum1glVLKY4Yjq4VEpLsJII.roa
Signing time: Fri 25 Sep 2026 11:54:54 +0000
ROA not before: Fri 25 Sep 2026 11:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41157
IP address blocks: 81.201.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:6b:20:08:da:ae:c4:20:fe:67:48:f4:26:11:95:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Sep 25 11:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=647e7a42e9b582554b298e188eae151292ec2482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:2c:3d:47:ce:7f:ad:c4:55:86:5f:f7:4a:
9e:15:ec:7b:47:85:ae:bb:af:fd:42:78:3f:a1:47:
94:aa:e9:47:31:35:22:b5:3d:ce:ad:62:3c:e5:18:
f4:44:52:38:86:15:43:4d:21:4b:ca:7a:a7:75:84:
cf:97:49:8b:b3:d0:f9:a8:18:a1:5b:0f:eb:02:24:
60:1d:0e:ca:58:95:3f:6c:34:8f:47:a2:f7:62:68:
03:9a:1d:9d:d9:e0:5f:b5:f0:78:db:4f:d5:37:0f:
e2:a6:11:98:f4:85:2f:45:5b:4c:af:e4:6a:c5:2b:
c7:cc:b0:34:a3:11:3c:03:2f:dd:aa:94:69:ad:5a:
67:b7:5d:d6:b2:24:d0:3a:8b:73:93:82:4a:7d:aa:
b0:ce:1c:7f:16:12:df:42:ab:e8:01:ea:1c:13:28:
14:19:2b:ea:a1:0a:48:25:c8:37:3b:91:f7:1b:27:
f9:52:c0:e2:b3:58:3a:3f:b0:7b:6c:19:67:48:5c:
9b:37:2b:5e:93:e0:f8:c2:52:0d:a1:32:b9:24:4a:
07:22:27:2f:45:bd:e7:bc:70:f6:55:08:cf:54:18:
1e:78:26:2c:0d:43:ab:14:1e:73:17:8d:8e:98:c4:
28:90:6b:60:9f:6f:f9:27:31:a2:b5:44:7d:4a:82:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:7A:42:E9:B5:82:55:4B:29:8E:18:8E:AE:15:12:92:EC:24:82
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/ZH56Qum1glVLKY4Yjq4VEpLsJII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.178.0/24
Signature Algorithm: sha256WithRSAEncryption
98:db:3d:9e:2b:b2:9d:28:f2:0d:d8:e8:af:5b:fb:28:1e:a3:
2f:76:d5:2b:79:4d:41:83:30:54:5c:19:2d:4b:e6:68:34:cb:
de:43:d0:7f:88:24:4a:38:a2:0a:b2:7c:4e:c7:11:26:15:6b:
f1:9d:07:54:7e:08:e7:25:10:6b:c7:ce:00:8a:62:8f:70:0c:
2c:c5:4a:24:24:f3:12:7a:d9:e9:95:c7:ab:83:47:63:4a:61:
37:0d:48:32:2f:4c:35:88:7d:9a:3f:b4:3b:fb:98:4a:51:da:
22:77:d9:4f:18:c1:e5:c5:5b:97:32:49:1c:ef:57:13:5e:88:
d4:24:a9:c5:71:fb:45:04:10:65:04:e7:e6:95:02:62:05:68:
1a:24:90:1f:73:54:41:50:8e:55:25:9a:18:8c:b9:04:36:29:
5e:e0:54:fc:97:a0:86:ca:d2:2f:49:33:51:47:5b:c1:21:bb:
fe:0f:32:77:ee:a3:9f:07:5a:0e:95:40:0e:08:76:1a:45:f2:
3a:90:92:ae:5b:9a:bd:d2:94:81:4e:cf:e8:bb:bf:f9:02:94:
8b:ea:ce:22:ef:56:e7:c7:0d:6b:85:36:23:e8:6f:67:0a:6a:
bd:0e:3d:63:d6:39:d0:fe:39:c5:96:a7:f3:ed:55:eb:d9:13:
fa:44:c2:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDYayAI2q7EIP5nSPQmEZUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYjMzODJjMTZhMGE1NjE1OTkwZDRiY2U2MzRkYzUxNjgy
ZjJlYWEwHhcNMjYwOTI1MTE1NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDdlN2E0MmU5YjU4MjU1NGIyOThlMTg4ZWFlMTUxMjkyZWMyNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiAsPUfOf63EVYZf90qeFex7R4Wu
u6/9Qng/oUeUqulHMTUitT3OrWI85Rj0RFI4hhVDTSFLynqndYTPl0mLs9D5qBih
Ww/rAiRgHQ7KWJU/bDSPR6L3YmgDmh2d2eBftfB420/VNw/iphGY9IUvRVtMr+Rq
xSvHzLA0oxE8Ay/dqpRprVpnt13WsiTQOotzk4JKfaqwzhx/FhLfQqvoAeocEygU
GSvqoQpIJcg3O5H3Gyf5UsDis1g6P7B7bBlnSFybNytek+D4wlINoTK5JEoHIicv
Rb3nvHD2VQjPVBgeeCYsDUOrFB5zF42OmMQokGtgn2/5JzGitUR9SoLFewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGR+ekLptYJVSymOGI6uFRKS7CSCMB8GA1UdIwQY
MBaAFHuzOCwWoKVhWZDUvOY03FFoLy6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEt
OTU1NGE1YWMzNmJiLzEvWkg1NlF1bTFnbFZMS1k0WWpxNFZFcExzSklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEtOTU1NGE1YWMzNmJi
LzEvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcmyMA0G
CSqGSIb3DQEBCwUAA4IBAQCY2z2eK7KdKPIN2OivW/soHqMvdtUreU1BgzBUXBkt
S+ZoNMveQ9B/iCRKOKIKsnxOxxEmFWvxnQdUfgjnJRBrx84AimKPcAwsxUokJPMS
etnplcerg0djSmE3DUgyL0w1iH2aP7Q7+5hKUdoid9lPGMHlxVuXMkkc71cTXojU
JKnFcftFBBBlBOfmlQJiBWgaJJAfc1RBUI5VJZoYjLkENile4FT8l6CGytIvSTNR
R1vBIbv+DzJ37qOfB1oOlUAOCHYaRfI6kJKuW5q90pSBTs/ou7/5ApSL6s4i71bn
xw1rhTYj6G9nCmq9Dj1j1jnQ/jnFlqfz7VXr2RP6RMJ+
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:42 2026 by rpki-client