Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/zYrOYxq1_DlGbKAhaGqYDX5wvGY.roa
File: zYrOYxq1_DlGbKAhaGqYDX5wvGY.roa (raw, json)
Hash identifier: fivh2QwcFRsStSBzTpk+FCHhVv/Ccn+5jvSloInEd8A=
Subject key identifier: CD:8A:CE:63:1A:B5:FC:39:46:6C:A0:21:68:6A:98:0D:7E:70:BC:66
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E01D75FCA6FA93F2067D2257B87E6DE44
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/zYrOYxq1_DlGbKAhaGqYDX5wvGY.roa
Signing time: Thu 07 May 2026 09:49:12 +0000
ROA not before: Thu 07 May 2026 09:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 87.58.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:d7:5f:ca:6f:a9:3f:20:67:d2:25:7b:87:e6:de:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 7 09:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd8ace631ab5fc39466ca021686a980d7e70bc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:4a:e3:2e:f1:f2:36:e4:85:0f:1a:33:76:
b3:a3:24:d8:1d:11:8f:ff:41:33:02:ff:0c:dd:55:
14:3a:cc:8d:52:ae:ef:17:d8:80:9a:92:f2:4e:3a:
e2:f6:50:ad:ff:d5:17:98:90:34:a3:5b:5d:24:b8:
93:37:ef:e1:ea:41:c7:e6:e3:a8:c0:39:84:a4:1c:
ce:76:29:96:52:80:51:b0:42:a2:8d:ae:1e:6d:ee:
d5:23:f8:19:6e:9a:46:38:15:75:82:d9:61:c5:76:
52:13:f7:e9:e3:d7:a8:f7:dd:a9:56:2b:04:e3:b0:
de:2f:47:ca:60:67:0a:b4:6e:3e:15:18:72:c2:86:
4f:1c:94:25:d2:2b:9a:80:11:e9:dd:18:dc:58:61:
7d:08:48:8d:f0:28:d9:08:22:fc:85:5c:fe:e8:5c:
e6:89:08:af:17:20:da:9f:5a:dc:59:18:d5:80:02:
c1:28:a9:97:b4:7e:08:9b:fb:36:61:fc:f3:42:0e:
fc:f4:f2:ef:65:06:31:3f:77:be:8b:f5:79:a9:17:
91:54:c7:2e:7a:f2:dc:6f:a9:19:2b:96:82:23:f3:
34:d9:64:57:b7:bd:71:1b:ff:31:f1:eb:10:ef:15:
b8:ad:94:6a:d2:76:db:96:35:a1:e4:f4:5f:e7:fd:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:CE:63:1A:B5:FC:39:46:6C:A0:21:68:6A:98:0D:7E:70:BC:66
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/zYrOYxq1_DlGbKAhaGqYDX5wvGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:75:eb:4c:8e:59:47:b6:ae:64:c7:d4:2d:7c:8b:5b:56:a9:
92:12:ac:e4:9b:f9:b6:05:dc:70:13:2c:39:ed:0b:4f:36:17:
f9:ec:50:81:5b:b5:c3:d9:55:f6:9f:bb:cb:3a:cf:5d:85:b5:
e4:eb:53:3e:12:7e:6d:22:f8:59:4c:3a:19:5e:45:c3:89:34:
ab:1a:c1:c1:3d:40:70:8b:30:35:53:f2:52:23:2d:7d:35:56:
2f:ed:00:39:f3:dd:64:ee:d9:4f:41:dd:31:55:37:c6:f5:f3:
79:16:9e:90:1e:45:0a:82:36:81:8d:e2:51:b0:91:f4:bb:c8:
5b:9b:e5:f7:b3:2f:24:fc:d9:ba:7b:d2:b9:4e:e2:bd:dc:f0:
94:30:62:40:24:48:d8:dd:bc:63:fa:61:bb:32:36:2e:fe:8f:
aa:e0:47:7b:75:bb:26:24:fc:7c:4c:78:89:44:e0:e0:6a:e2:
81:86:ed:eb:24:f5:46:96:23:91:9c:ce:ff:c9:c1:41:8f:c6:
0a:f6:66:58:65:36:fc:db:06:e0:89:db:91:42:c2:82:d9:33:
17:cf:c2:80:02:82:94:34:9d:47:00:bb:da:88:ec:7c:43:71:
e6:8a:8c:12:f9:f2:7c:9f:44:46:da:f0:63:f5:7e:7b:75:1d:
31:94:14:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4B11/Kb6k/IGfSJXuH5t5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwNTA3MDk0OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDhhY2U2MzFhYjVmYzM5NDY2Y2EwMjE2ODZhOTgwZDdlNzBiYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdpK4y7x8jbkhQ8aM3azoyTYHRGP
/0EzAv8M3VUUOsyNUq7vF9iAmpLyTjri9lCt/9UXmJA0o1tdJLiTN+/h6kHH5uOo
wDmEpBzOdimWUoBRsEKija4ebe7VI/gZbppGOBV1gtlhxXZSE/fp49eo992pVisE
47DeL0fKYGcKtG4+FRhywoZPHJQl0iuagBHp3RjcWGF9CEiN8CjZCCL8hVz+6Fzm
iQivFyDan1rcWRjVgALBKKmXtH4Im/s2YfzzQg789PLvZQYxP3e+i/V5qReRVMcu
evLcb6kZK5aCI/M02WRXt71xG/8x8esQ7xW4rZRq0nbbljWh5PRf5/2zVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM2KzmMatfw5RmygIWhqmA1+cLxmMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvellyT1l4cTFfRGxHYktBaGFHcVlEWDV3dkdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVzrcMA0G
CSqGSIb3DQEBCwUAA4IBAQA8detMjllHtq5kx9QtfItbVqmSEqzkm/m2BdxwEyw5
7QtPNhf57FCBW7XD2VX2n7vLOs9dhbXk61M+En5tIvhZTDoZXkXDiTSrGsHBPUBw
izA1U/JSIy19NVYv7QA5891k7tlPQd0xVTfG9fN5Fp6QHkUKgjaBjeJRsJH0u8hb
m+X3sy8k/Nm6e9K5TuK93PCUMGJAJEjY3bxj+mG7MjYu/o+q4Ed7dbsmJPx8THiJ
RODgauKBhu3rJPVGliORnM7/ycFBj8YK9mZYZTb82wbgiduRQsKC2TMXz8KAAoKU
NJ1HALvaiOx8Q3HmiowS+fJ8n0RG2vBj9X57dR0xlBTk
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:41 2026 by rpki-client