Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/zl4PeBigGChfqf8ipaakoyrIBlM.roa
File: zl4PeBigGChfqf8ipaakoyrIBlM.roa (raw, json)
Hash identifier: cI1BNWhyM1vqRoDr1+2mP3dfACrhsx6zgxLvQtOyq2o=
Subject key identifier: CE:5E:0F:78:18:A0:18:28:5F:A9:FF:22:A5:A6:A4:A3:2A:C8:06:53
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019F9DF6F0827AF9A2ED0253E052CE8DDD10
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/zl4PeBigGChfqf8ipaakoyrIBlM.roa
Signing time: Sun 26 Jul 2026 10:27:14 +0000
ROA not before: Sun 26 Jul 2026 10:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219172
IP address blocks: 87.199.154.0/24 maxlen: 24
87.199.155.0/24 maxlen: 24
136.148.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:f6:f0:82:7a:f9:a2:ed:02:53:e0:52:ce:8d:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jul 26 10:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce5e0f7818a018285fa9ff22a5a6a4a32ac80653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:3e:ad:f8:1f:fa:8e:93:3b:6d:24:30:86:
2a:6d:ce:01:62:e4:e6:6f:b1:e9:82:6f:62:58:73:
2b:c6:11:d0:5f:d4:7c:d6:97:47:18:48:73:7a:a1:
d4:24:50:3f:8c:a5:45:73:3d:9a:fb:21:83:2e:27:
a9:24:99:4b:a2:2d:85:8d:01:d8:ea:a7:23:6e:2c:
36:40:60:f4:a3:98:e9:4e:1d:6e:3c:8c:a2:7e:58:
8d:2b:6b:dc:6b:d1:d2:30:97:ee:41:35:67:58:42:
fa:00:cc:ba:53:61:28:f9:e8:3f:8b:0b:14:20:60:
3b:ac:4f:a1:eb:f8:57:7a:1a:a1:f9:83:98:ea:b6:
b6:ae:16:8e:c8:d2:17:10:86:62:11:48:66:3b:8d:
55:ff:db:d0:32:ba:b6:f5:42:f2:ce:aa:a8:69:53:
49:77:2a:4b:6f:65:35:bf:7c:3d:df:21:ce:25:39:
4d:40:3f:ca:47:66:39:83:48:8d:c4:16:a8:3b:c7:
34:3b:43:60:bb:3b:5e:d0:6d:10:0a:2d:96:81:70:
fc:a9:80:b3:fc:ab:9e:f4:43:33:f0:43:d0:81:5b:
0e:56:7f:5c:6f:c1:37:8e:2e:bf:a7:45:c0:85:96:
e5:ca:2c:e4:39:d1:f8:c1:79:c5:d9:34:cf:96:37:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:0F:78:18:A0:18:28:5F:A9:FF:22:A5:A6:A4:A3:2A:C8:06:53
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/zl4PeBigGChfqf8ipaakoyrIBlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.154.0/23
136.148.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:78:b2:f3:49:63:43:77:4a:d1:0a:34:05:50:dc:c3:28:aa:
54:fb:45:9c:a1:64:9a:30:11:fc:92:06:f5:c8:db:00:e5:a5:
30:a9:df:a7:6a:9c:d0:2c:c0:55:a7:77:39:e3:0d:3a:01:be:
e0:3b:bd:ae:f0:47:46:49:b3:d9:65:da:1d:ac:48:94:d3:c2:
00:2c:7e:a3:11:b1:35:ce:df:a7:5c:06:8a:a8:aa:70:a6:ee:
62:88:c2:11:2b:ad:b1:22:70:78:65:a5:d0:b4:fd:74:ff:89:
f0:ca:19:5e:d0:d0:1e:18:d7:62:52:15:ed:5e:7e:a2:c5:c2:
de:67:b8:f7:2b:e4:cd:48:0c:e2:f9:5b:1b:c8:99:c3:80:5e:
6f:ab:c5:f4:68:c6:f8:93:b5:e8:4d:67:b8:f2:14:81:42:09:
13:68:00:4c:32:37:92:56:38:1a:c6:ad:67:c4:4a:62:b6:3f:
6a:d3:f9:7e:cc:f0:e9:d1:cf:5d:3e:de:bb:6e:a6:6b:30:71:
e9:14:f2:ec:27:ea:f2:40:d7:26:f6:f9:e7:66:0b:e2:7f:59:
4b:35:ad:e7:e5:d7:37:6a:2a:4d:24:c1:2c:39:b5:16:4e:63:
2d:71:bc:e1:7a:ef:db:37:8d:cf:35:2a:a0:4b:58:ee:59:31:
dc:8e:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:40:59 2026 by rpki-client