Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZKLpjQYUKk6Xnm8oFOGq47sWMkg.roa
File: ZKLpjQYUKk6Xnm8oFOGq47sWMkg.roa (raw, json)
Hash identifier: W4E8X26eY+GzU1hCnXm7UQtWAV5+lrGRC4lV0QNFESY=
Subject key identifier: 64:A2:E9:8D:06:14:2A:4E:97:9E:6F:28:14:E1:AA:E3:BB:16:32:48
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D966391AA7E95CAF73690A022B8DD3EBC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZKLpjQYUKk6Xnm8oFOGq47sWMkg.roa
Signing time: Thu 16 Apr 2026 13:03:20 +0000
ROA not before: Thu 16 Apr 2026 13:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150423
IP address blocks: 87.82.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:63:91:aa:7e:95:ca:f7:36:90:a0:22:b8:dd:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 16 13:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64a2e98d06142a4e979e6f2814e1aae3bb163248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:52:0b:1f:61:b0:b4:ab:20:b5:d3:5e:eb:
ec:85:2a:d3:bd:41:5f:7c:6d:df:5e:55:e2:d0:2e:
22:28:2e:90:a2:6d:23:1b:cd:83:c1:4a:21:3f:b7:
0d:0b:04:9a:00:92:72:83:b4:2f:ac:4c:09:66:08:
ec:44:9f:76:62:68:da:33:0b:e9:76:f9:9c:15:79:
f6:d3:e8:f5:78:2c:23:32:ec:99:1f:15:4e:3b:1b:
92:49:94:5a:ad:62:eb:2d:b7:3c:d7:02:ec:77:46:
31:50:03:d5:4f:52:f2:53:93:df:3e:bb:95:70:97:
2c:85:b9:ad:c7:22:b1:ab:78:ef:ac:2a:ee:fd:38:
b7:d5:be:f4:d2:33:04:aa:6e:9b:3a:a6:f0:9a:ac:
cd:c5:f2:3c:2c:70:23:ab:54:27:c4:53:18:64:08:
66:03:05:6c:4c:27:98:48:e3:d2:51:1c:fc:86:61:
f2:6e:2f:15:cc:e9:bd:e4:d1:68:3b:95:c0:5d:81:
e4:45:1a:f9:83:cf:f7:ab:59:2d:8d:2a:be:77:c6:
22:ee:31:a4:ea:3a:1e:80:ff:1b:ea:82:9a:84:07:
59:a2:99:23:b2:fc:83:5a:2d:69:5e:d3:5d:27:0c:
1c:b9:a9:d6:7a:fd:c2:85:51:04:4d:60:f1:99:36:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:E9:8D:06:14:2A:4E:97:9E:6F:28:14:E1:AA:E3:BB:16:32:48
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZKLpjQYUKk6Xnm8oFOGq47sWMkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:6d:45:d6:fe:09:95:66:34:8d:1d:cc:a8:e1:75:cf:9c:60:
28:38:62:05:64:98:ba:b1:59:70:36:4c:5c:25:c4:02:88:88:
bb:2d:5c:33:e3:2f:60:c9:00:9a:04:c2:de:8b:20:35:20:e2:
ca:e4:1a:cd:ca:df:c8:fa:2e:71:de:e2:a4:02:c9:d6:49:6a:
98:e2:0d:58:6f:2d:76:00:9f:2d:68:52:6f:9f:dc:e2:51:b9:
b3:44:a3:e3:23:8c:65:e6:b4:5d:cd:f0:01:ab:27:43:18:de:
95:8f:83:73:f3:7d:b3:62:ba:02:7c:86:ad:a9:90:10:3b:8b:
2b:9a:81:60:f7:32:73:07:55:7f:0c:8b:6f:33:0c:4f:ca:f1:
08:51:aa:21:a1:7c:ad:5f:02:a4:d0:89:97:e0:83:1a:62:61:
68:98:de:cb:8d:8c:84:2e:93:a8:e9:40:e5:3f:b7:87:21:8e:
f2:6f:e6:e6:0f:07:ac:de:eb:36:26:9d:4f:17:89:1f:cb:0e:
26:2d:12:a5:6b:e1:21:a3:9f:98:12:a3:be:8a:a5:46:73:79:
89:c5:33:84:08:25:f5:97:73:8a:14:b4:37:cc:29:43:01:c9:
7b:cd:dc:70:20:2e:e1:c1:9d:68:3d:dc:04:f0:16:af:be:80:
0f:f4:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:13 2026 by rpki-client