Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZediFr-kiNcab3zFz4eXtCdrDDY.roa
File: ZediFr-kiNcab3zFz4eXtCdrDDY.roa (raw, json)
Hash identifier: ADnthEU+Brh9wA//ELyNS+LJVvpzl9jC3U47kC784aw=
Subject key identifier: 65:E7:62:16:BF:A4:88:D7:1A:6F:7C:C5:CF:87:97:B4:27:6B:0C:36
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019C93DE0616A0EE0685DF01BAF5340861CB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZediFr-kiNcab3zFz4eXtCdrDDY.roa
Signing time: Wed 25 Feb 2026 08:15:27 +0000
ROA not before: Wed 25 Feb 2026 08:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211750
IP address blocks: 87.76.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:de:06:16:a0:ee:06:85:df:01:ba:f5:34:08:61:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Feb 25 08:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65e76216bfa488d71a6f7cc5cf8797b4276b0c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:fc:df:e7:85:43:bb:6f:47:12:e4:f4:a8:
73:90:96:11:71:ca:01:62:0a:d7:d0:3b:ff:d8:ff:
45:0d:d0:3f:3f:05:51:8d:54:12:0d:ad:1b:8e:d4:
ca:70:9c:10:79:79:f8:03:50:2c:56:98:c8:90:50:
59:ed:e7:67:6c:95:bd:be:f8:7e:37:8f:da:08:ea:
ee:bd:b3:87:26:eb:6f:63:df:5a:da:f9:84:8b:2f:
cc:5b:c7:d6:55:89:2a:60:6c:43:a1:d0:61:8f:9e:
ad:6f:65:d1:8d:00:02:9a:1d:59:b3:13:82:a1:7d:
6e:7c:cb:05:18:23:45:91:4b:23:aa:80:e3:61:bf:
a3:cd:e1:cb:da:38:c3:e7:70:31:46:fe:5d:29:9e:
07:17:d3:ec:e1:78:7d:39:ab:8a:14:d5:b6:2e:1e:
17:14:ea:72:10:df:7e:e4:7a:e6:d8:39:68:a5:21:
7a:4f:1d:e5:fa:6e:c0:bf:51:53:9f:49:4c:d2:c4:
8c:21:cf:dc:2d:15:dc:bb:c7:4c:cd:34:c9:4c:86:
a5:9a:8c:1b:8d:be:6a:6a:64:80:20:89:93:d2:20:
63:b4:8b:f8:4d:93:d6:e4:63:b8:44:c1:bf:4c:f1:
ba:c5:53:85:25:e1:4c:f8:7e:5c:a1:18:5b:3c:44:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:62:16:BF:A4:88:D7:1A:6F:7C:C5:CF:87:97:B4:27:6B:0C:36
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZediFr-kiNcab3zFz4eXtCdrDDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.218.0/24
Signature Algorithm: sha256WithRSAEncryption
59:81:d1:42:82:3b:f5:9a:80:d6:f6:51:26:1b:ba:3f:12:cf:
4f:70:08:d1:e7:b0:f8:03:2d:e0:18:97:c1:4d:a9:0a:aa:3b:
fe:41:72:db:ad:41:ab:dd:64:eb:8f:29:60:c1:7f:d9:7c:02:
42:dc:11:95:ab:45:55:54:1d:89:97:bd:5d:bf:51:39:b0:06:
ee:a8:b2:aa:2d:5c:0c:98:8f:95:ff:89:b5:d4:1d:de:da:19:
82:8b:c5:26:34:51:ea:27:d1:0e:51:8e:a9:81:28:f9:30:9b:
ed:de:ee:37:d2:98:8b:1a:5a:c1:c6:3f:7f:bf:db:b9:35:8e:
40:e9:75:63:45:a8:37:2a:01:86:d0:3b:2a:da:64:4f:6c:a7:
f4:ba:e5:9a:8a:cd:fe:63:d8:dc:25:20:6c:0f:5b:a7:9a:e3:
7d:a7:00:90:02:04:36:fb:1f:eb:30:ec:e1:37:dd:a2:e0:b8:
73:1c:04:58:54:57:18:09:0d:ed:cb:5d:8b:97:63:02:95:59:
4f:a5:77:a2:0e:e1:6e:bf:26:ef:d7:85:22:65:64:72:5b:aa:
93:f8:a7:ad:84:f1:bd:6c:3d:65:93:a4:c8:4b:87:a0:17:c2:
a8:01:b5:e0:ad:c0:bd:8d:62:f3:16:e0:47:ed:46:f9:3c:79:
95:af:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:14 2026 by rpki-client