Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZKuLhhFjbd4vj-QOHjmh7gpKxh0.roa
File: ZKuLhhFjbd4vj-QOHjmh7gpKxh0.roa (raw, json)
Hash identifier: bc7KrnBujIyAn+lEM7VVRXQp4f1kFbjJFgYcrWWL6sw=
Subject key identifier: 64:AB:8B:86:11:63:6D:DE:2F:8F:E4:0E:1E:39:A1:EE:0A:4A:C6:1D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EB6B7FDF1413B8D2A231B2EDDF3062AF7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZKuLhhFjbd4vj-QOHjmh7gpKxh0.roa
Signing time: Thu 11 Jun 2026 12:46:11 +0000
ROA not before: Thu 11 Jun 2026 12:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39690
IP address blocks: 200.102.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:b7:fd:f1:41:3b:8d:2a:23:1b:2e:dd:f3:06:2a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 11 12:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64ab8b8611636dde2f8fe40e1e39a1ee0a4ac61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:ce:23:97:3c:ab:3f:04:18:af:35:bb:a3:
0a:ee:66:16:0b:b0:66:6e:90:1f:07:5b:42:af:43:
1e:26:73:ba:6e:4a:97:40:6f:c9:96:b7:5a:a2:17:
5b:7e:5c:be:0f:03:70:cb:89:84:bb:7a:0b:6b:79:
cf:bd:73:27:8f:f7:5b:a1:6c:f3:2a:49:76:47:a1:
02:46:37:0e:5c:f1:88:ce:cc:32:9f:32:1f:5f:c7:
13:25:8d:87:f4:a9:7a:67:bb:f6:c9:97:48:3c:0b:
6f:e1:50:6a:c8:88:96:01:80:40:d1:ae:db:b9:3c:
3f:a5:1d:1c:69:10:51:86:a2:ab:3d:4d:76:dd:4e:
11:c0:e9:40:51:5c:b2:7e:8c:63:49:90:aa:37:24:
66:bb:fa:5e:0e:01:40:ec:05:d8:a0:b0:17:28:1e:
d1:c6:4b:b1:5d:7e:1a:d0:f8:2d:f4:de:93:6d:66:
09:8b:10:3d:fb:60:8e:0b:fe:a4:09:d6:85:82:83:
00:a3:01:cb:7a:32:a5:4a:8e:06:ae:14:81:17:6a:
4c:ee:08:40:68:08:3f:c1:62:3b:aa:e5:70:e8:f3:
5b:bb:1b:10:1d:50:26:61:bc:f6:7e:aa:47:fc:3b:
a4:a8:ca:ab:6f:3f:30:34:56:b8:37:db:28:6e:a5:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AB:8B:86:11:63:6D:DE:2F:8F:E4:0E:1E:39:A1:EE:0A:4A:C6:1D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZKuLhhFjbd4vj-QOHjmh7gpKxh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d0:c4:29:76:1e:d5:33:84:eb:c0:32:cb:e9:59:57:57:aa:
f7:e1:e1:30:3d:cd:d5:60:3b:69:3b:b0:7d:62:fb:74:05:5a:
19:94:de:88:bd:1e:84:22:60:8e:4d:3c:1d:d9:95:76:a6:f6:
38:e1:07:ec:c4:48:7f:96:26:76:a0:cb:53:20:33:c2:ea:59:
99:00:29:85:44:60:a0:e0:dc:0e:ea:0e:e8:34:08:aa:51:97:
d7:57:e4:3e:5b:a7:57:ae:c5:6c:f8:75:9e:3e:85:68:bf:27:
90:22:90:63:67:93:96:e9:52:63:2a:93:9c:60:d0:02:29:b5:
36:65:b5:f0:08:0c:70:67:11:38:35:d1:4a:92:91:b7:2c:01:
65:9e:35:a0:ad:6a:6f:c7:0e:d3:de:6b:e6:12:c5:c3:37:b6:
a6:93:81:1e:1a:f2:8f:8d:85:70:56:31:75:78:b6:2f:64:5e:
9d:d9:de:97:15:8d:0a:b2:c3:35:0d:c5:16:32:84:4f:eb:72:
ec:c9:3f:1e:02:fe:6f:79:f6:53:c0:c7:81:46:41:fd:5e:78:
a4:c9:2d:da:68:76:2f:2e:01:85:06:90:f8:47:af:1c:42:ec:
ce:e1:a5:19:50:0f:a4:04:11:aa:a3:46:3a:35:e9:bf:b4:6a:
24:29:73:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ62t/3xQTuNKiMbLt3zBir3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjExMTI0NjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGFiOGI4NjExNjM2ZGRlMmY4ZmU0MGUxZTM5YTFlZTBhNGFjNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl/OI5c8qz8EGK81u6MK7mYWC7Bm
bpAfB1tCr0MeJnO6bkqXQG/Jlrdaohdbfly+DwNwy4mEu3oLa3nPvXMnj/dboWzz
Kkl2R6ECRjcOXPGIzswynzIfX8cTJY2H9Kl6Z7v2yZdIPAtv4VBqyIiWAYBA0a7b
uTw/pR0caRBRhqKrPU123U4RwOlAUVyyfoxjSZCqNyRmu/peDgFA7AXYoLAXKB7R
xkuxXX4a0Pgt9N6TbWYJixA9+2COC/6kCdaFgoMAowHLejKlSo4GrhSBF2pM7ghA
aAg/wWI7quVw6PNbuxsQHVAmYbz2fqpH/DukqMqrbz8wNFa4N9sobqWuvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSri4YRY23eL4/kDh45oe4KSsYdMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvWkt1TGhoRmpiZDR2ai1RT0hqbWg3Z3BLeGgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGa2MA0G
CSqGSIb3DQEBCwUAA4IBAQCc0MQpdh7VM4TrwDLL6VlXV6r34eEwPc3VYDtpO7B9
Yvt0BVoZlN6IvR6EImCOTTwd2ZV2pvY44QfsxEh/liZ2oMtTIDPC6lmZACmFRGCg
4NwO6g7oNAiqUZfXV+Q+W6dXrsVs+HWePoVovyeQIpBjZ5OW6VJjKpOcYNACKbU2
ZbXwCAxwZxE4NdFKkpG3LAFlnjWgrWpvxw7T3mvmEsXDN7amk4EeGvKPjYVwVjF1
eLYvZF6d2d6XFY0KssM1DcUWMoRP63LsyT8eAv5vefZTwMeBRkH9XnikyS3aaHYv
LgGFBpD4R68cQuzO4aUZUA+kBBGqo0Y6Nem/tGokKXMc
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:56 2026 by rpki-client