Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/zFObHnSFRVBVKi03HHp_LdnUjHI.roa
File: zFObHnSFRVBVKi03HHp_LdnUjHI.roa (raw, json)
Hash identifier: VrSh3FAklnFvAI/Em5GvNcJNNwDYjrpoqpMUk6pPMuw=
Subject key identifier: CC:53:9B:1E:74:85:45:50:55:2A:2D:37:1C:7A:7F:2D:D9:D4:8C:72
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019C9942A3B0EA408674EA0B7169E8F01E17
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/zFObHnSFRVBVKi03HHp_LdnUjHI.roa
Signing time: Thu 26 Feb 2026 09:23:27 +0000
ROA not before: Thu 26 Feb 2026 09:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49127
IP address blocks: 86.106.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:42:a3:b0:ea:40:86:74:ea:0b:71:69:e8:f0:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Feb 26 09:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc539b1e74854550552a2d371c7a7f2dd9d48c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:51:6a:c7:71:3a:48:59:b2:91:e7:77:70:
e1:0b:10:cc:dd:ed:a0:84:3c:2b:81:2b:43:29:e5:
f5:fa:cd:df:be:06:92:bd:e8:f1:fe:cf:4c:e7:b3:
ba:57:c6:48:af:f8:2e:20:fe:e8:68:85:e7:1f:62:
70:d4:3c:f9:0c:f8:b3:2a:f4:75:0b:be:da:af:c6:
ae:b5:a4:fd:a8:54:bb:83:dc:bc:cb:cf:f1:15:a8:
3f:b2:ad:9c:a9:ba:6b:94:75:5b:49:99:4e:46:13:
bf:13:63:6c:2d:46:37:7b:c3:c3:cf:de:9a:df:14:
47:da:06:78:57:4c:6c:b2:f1:10:64:ec:3d:89:a5:
31:bd:97:58:32:de:81:5c:96:64:fb:cc:54:cc:8c:
ed:e4:6a:e2:40:e2:20:56:57:4f:ac:04:ab:06:dd:
f9:d8:03:fc:61:7b:08:91:6c:e2:da:b3:3f:09:e5:
2c:39:24:67:c7:4d:5e:1b:ea:d3:24:62:00:3a:5a:
dc:77:f9:48:f0:9c:f5:eb:f7:75:77:f9:90:b5:d0:
6b:81:f3:af:cc:81:ec:c5:e4:8d:ee:b6:8a:52:92:
62:f0:50:f9:ea:1d:1f:85:55:68:c2:4e:e1:94:74:
a6:0a:e1:b6:9c:d7:74:21:d6:ad:b6:59:d6:d9:a8:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:9B:1E:74:85:45:50:55:2A:2D:37:1C:7A:7F:2D:D9:D4:8C:72
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/zFObHnSFRVBVKi03HHp_LdnUjHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.75.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6f:5d:64:00:55:c4:8a:5b:91:a8:90:d5:28:1a:4c:59:da:
d6:77:0d:6f:0a:c3:7d:98:45:a0:53:25:72:66:8e:f5:03:8a:
6b:0d:0e:41:46:4a:2d:5e:8d:e7:8a:cf:3a:74:16:76:86:75:
2e:c4:54:8a:08:36:4f:a2:41:1d:a2:6d:ed:fe:de:ef:5a:c1:
ef:fb:db:c8:24:65:6b:51:29:78:3f:a5:94:e6:9e:75:77:f6:
7b:cf:33:67:15:b0:1e:be:e2:39:fc:65:12:22:27:78:12:1a:
23:7d:a8:08:16:81:1c:33:6c:4a:03:66:a7:69:c4:0c:ae:1b:
aa:21:48:be:f0:2b:65:78:6d:74:b0:ca:6d:0f:dc:ce:0f:1e:
8a:60:ce:87:f9:19:00:93:29:8c:e6:22:76:c6:e9:db:57:df:
a5:02:db:e8:01:55:9f:cc:0c:24:6e:8c:3c:4e:68:73:5f:2f:
9c:df:4f:48:aa:7e:10:41:50:a5:21:e9:80:3c:bb:db:ff:f6:
b5:c6:53:26:be:b7:72:bd:47:d6:07:1f:b3:9a:99:1d:12:7d:
b2:a9:75:a2:49:eb:ae:d2:a6:43:74:f7:25:96:09:54:38:1d:
b9:9d:57:f0:1b:96:ef:9d:6d:18:0e:ac:b8:63:a3:56:65:33:
85:43:a7:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyZQqOw6kCGdOoLcWno8B4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk
ZTg4YTYwHhcNMjYwMjI2MDkyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzUzOWIxZTc0ODU0NTUwNTUyYTJkMzcxYzdhN2YyZGQ5ZDQ4YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZRasdxOkhZspHnd3DhCxDM3e2g
hDwrgStDKeX1+s3fvgaSvejx/s9M57O6V8ZIr/guIP7oaIXnH2Jw1Dz5DPizKvR1
C77ar8autaT9qFS7g9y8y8/xFag/sq2cqbprlHVbSZlORhO/E2NsLUY3e8PDz96a
3xRH2gZ4V0xssvEQZOw9iaUxvZdYMt6BXJZk+8xUzIzt5GriQOIgVldPrASrBt35
2AP8YXsIkWzi2rM/CeUsOSRnx01eG+rTJGIAOlrcd/lI8Jz16/d1d/mQtdBrgfOv
zIHsxeSN7raKUpJi8FD56h0fhVVowk7hlHSmCuG2nNd0IdattlnW2aijCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMxTmx50hUVQVSotNxx6fy3Z1IxyMB8GA1UdIwQY
MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt
NjA0NTg0ODk1OTI1LzEvekZPYkhuU0ZSVkJWS2kwM0hIcF9MZG5VakhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1
LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmpLMA0G
CSqGSIb3DQEBCwUAA4IBAQBUb11kAFXEiluRqJDVKBpMWdrWdw1vCsN9mEWgUyVy
Zo71A4prDQ5BRkotXo3nis86dBZ2hnUuxFSKCDZPokEdom3t/t7vWsHv+9vIJGVr
USl4P6WU5p51d/Z7zzNnFbAevuI5/GUSIid4EhojfagIFoEcM2xKA2anacQMrhuq
IUi+8CtleG10sMptD9zODx6KYM6H+RkAkymM5iJ2xunbV9+lAtvoAVWfzAwkbow8
TmhzXy+c309Iqn4QQVClIemAPLvb//a1xlMmvrdyvUfWBx+zmpkdEn2yqXWiSeuu
0qZDdPcllglUOB25nVfwG5bvnW0YDqy4Y6NWZTOFQ6fy
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:42 2026 by rpki-client