Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZpvSvNJgp9mPT58CS37drnTRKRs.roa
File: ZpvSvNJgp9mPT58CS37drnTRKRs.roa (raw, json)
Hash identifier: 7fq/cGbCE5mWj5bHAxsqnEvkHZr4lheRC1uAJIxLAyQ=
Subject key identifier: 66:9B:D2:BC:D2:60:A7:D9:8F:4F:9F:02:4B:7E:DD:AE:74:D1:29:1B
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FA7EADDB5349AEE20E88861330FEECF7F
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZpvSvNJgp9mPT58CS37drnTRKRs.roa
Signing time: Tue 28 Jul 2026 08:50:14 +0000
ROA not before: Tue 28 Jul 2026 08:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.76.185.0/24 maxlen: 24
87.76.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:ea:dd:b5:34:9a:ee:20:e8:88:61:33:0f:ee:cf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 28 08:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=669bd2bcd260a7d98f4f9f024b7eddae74d1291b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:c5:dc:7e:3f:00:74:58:d3:a8:53:85:05:
f0:6f:fc:4f:2f:7f:65:04:d0:3c:2d:e4:ab:67:04:
da:db:20:15:df:03:85:a0:10:3b:c6:04:c9:44:73:
94:4b:85:07:87:e7:f4:98:ce:d4:b0:78:34:19:d6:
2e:3c:7a:47:f6:7a:c4:ce:5e:32:b3:a4:b8:cc:bc:
f8:17:f7:7f:cd:11:23:aa:ee:39:a0:c8:bf:1e:a3:
56:cf:09:ab:10:74:b7:4c:cb:a4:bd:b0:77:b5:16:
99:59:c1:56:cc:02:01:f1:d9:d0:80:f8:e6:99:84:
76:0f:e0:80:77:91:3a:41:d9:b9:59:a4:3c:04:98:
a1:e6:15:14:d3:8d:0f:65:19:ac:75:2d:e5:45:c4:
21:48:8c:94:65:3f:7a:a5:1a:0b:9c:e3:97:ea:89:
52:f8:e7:bb:e3:39:e0:5a:82:11:82:90:b2:9d:d3:
f9:7c:47:0c:ba:17:03:cd:3f:8e:ae:ea:df:31:9c:
93:93:24:ae:36:50:b5:55:51:c3:c9:73:ed:da:4a:
28:d2:90:73:be:fb:3a:f4:ea:5b:6f:62:41:eb:ba:
aa:ac:ad:df:9a:d8:5a:e4:80:a2:44:d6:cc:4f:52:
ab:5c:d4:93:66:50:52:da:c1:06:25:7b:9c:ad:42:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9B:D2:BC:D2:60:A7:D9:8F:4F:9F:02:4B:7E:DD:AE:74:D1:29:1B
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ZpvSvNJgp9mPT58CS37drnTRKRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.185.0/24
87.76.214.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3c:d8:ea:53:42:89:78:f9:19:f1:0f:d2:23:f8:c4:3d:b9:
2a:e1:b5:e6:a0:53:2d:09:96:90:c1:97:54:b8:21:43:36:bb:
20:a8:eb:e6:37:42:17:cf:31:db:26:30:d4:bb:19:5f:4f:dd:
f3:2f:12:a8:35:70:0f:15:73:4b:2a:01:73:2e:c7:1e:f7:4e:
06:b3:c3:8b:87:10:15:20:2c:e4:0d:ca:db:70:e7:85:bf:a8:
83:bd:0a:25:96:92:e6:b2:7e:53:1e:14:11:8d:ef:8b:d6:e6:
18:74:dc:0d:07:5e:18:d7:e5:d9:51:ff:1f:28:06:3a:a5:1a:
7e:22:d0:94:98:53:17:17:51:08:36:94:04:89:d3:5c:f6:11:
e6:2a:43:8a:7b:39:16:8e:a4:4a:53:a0:8f:5b:8f:9a:8e:68:
26:8a:f3:b9:58:7c:fc:aa:43:53:63:4e:ec:ad:d8:57:b2:95:
9a:eb:ce:68:af:06:ec:ac:f6:8d:16:07:cc:ad:1c:5a:28:77:
31:45:93:36:25:88:57:6a:41:1a:17:97:77:7c:8e:8e:6e:d7:
69:f8:eb:39:74:e0:4d:45:66:92:32:25:8d:d1:9e:d5:8e:ff:
38:b9:a0:63:12:2d:f6:f6:03:c1:cb:ce:39:b5:a7:81:60:b7:
04:ae:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:13 2026 by rpki-client