Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZEiB2wxlJWHnrS15E7N0oShg1ws.roa
File: ZEiB2wxlJWHnrS15E7N0oShg1ws.roa (raw, json)
Hash identifier: 6jdYhBLcezNDlAopsned+x5ybqBEsGg4t85VGQmQ+zM=
Subject key identifier: 64:48:81:DB:0C:65:25:61:E7:AD:2D:79:13:B3:74:A1:28:60:D7:0B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E0AE9898A22BB360E43C70A562AEB3F0A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZEiB2wxlJWHnrS15E7N0oShg1ws.roa
Signing time: Sat 09 May 2026 04:05:37 +0000
ROA not before: Sat 09 May 2026 04:05:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204085
IP address blocks: 2a02:2fc0:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0a:e9:89:8a:22:bb:36:0e:43:c7:0a:56:2a:eb:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 9 04:05:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=644881db0c652561e7ad2d7913b374a12860d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:7c:4e:b0:5f:1b:99:c0:5b:95:5b:54:85:
40:ea:cd:7c:44:cd:68:a5:88:dc:e1:15:57:3c:7f:
6d:a9:0b:aa:0a:b8:19:29:ef:e2:76:f8:1b:97:f7:
93:94:d6:ed:d3:1e:cd:a3:cd:a8:5d:e0:6e:46:3c:
4e:31:94:99:7c:0f:34:57:33:92:ed:20:18:cc:36:
d5:4c:3a:eb:c7:15:5d:af:34:75:4c:7a:80:64:73:
48:36:1e:d1:9a:f9:39:97:58:31:d1:ba:e9:0e:23:
69:03:dc:30:50:49:f2:54:c0:bd:c7:03:03:db:eb:
f3:d5:24:d4:8b:8f:57:9b:d6:15:cd:28:9d:80:15:
50:a1:a8:93:df:11:b6:0f:a3:d0:93:ac:e6:10:8b:
09:aa:0b:08:f3:b3:b2:c4:9e:64:64:df:1c:23:d9:
7a:1d:08:d2:f9:2e:4b:c2:bc:32:24:b3:87:14:93:
da:08:74:d1:06:bb:76:f0:06:a0:e9:c9:5c:0e:5d:
55:54:85:2f:fb:f5:d9:5f:21:35:e4:0a:70:34:ca:
f4:3b:18:3a:7d:ba:0b:06:19:2f:41:98:3f:a7:ec:
92:51:8b:31:7e:f6:12:ba:2a:a4:ce:58:01:d1:77:
be:fe:74:23:3c:a7:dc:ea:88:ee:11:55:15:27:67:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:81:DB:0C:65:25:61:E7:AD:2D:79:13:B3:74:A1:28:60:D7:0B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZEiB2wxlJWHnrS15E7N0oShg1ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:2a::/48
Signature Algorithm: sha256WithRSAEncryption
ae:8b:2e:a2:60:8f:6d:1c:9f:d9:19:32:cf:5e:eb:55:f5:f5:
4b:b3:c7:17:47:ec:b9:11:c3:4b:32:d0:bc:b4:83:06:ad:b2:
c6:22:90:72:42:ee:06:b8:10:ec:80:38:91:78:55:52:d4:29:
6f:18:36:ad:8f:ec:3e:1b:44:a2:5d:30:43:77:95:d0:4c:31:
a6:9f:4f:c8:49:30:09:86:33:51:da:d4:9f:68:b4:8d:ec:ab:
cc:24:70:d2:f5:6c:32:b0:79:20:9e:a5:6a:15:0c:ea:c9:b5:
9f:17:83:1c:f4:e5:3c:eb:8d:53:70:d3:15:cf:f9:a8:b5:bf:
3a:6a:92:f1:12:2b:be:55:64:3c:97:b3:7e:dd:e3:6b:5d:7a:
10:76:a1:bb:be:32:a6:27:29:d6:f6:9d:78:95:13:4e:d3:9b:
67:81:88:21:c8:f1:16:df:24:d7:32:f4:a6:17:cb:0e:95:47:
ea:1f:2b:2f:17:19:2d:f1:9d:b9:1c:f7:53:11:37:9e:0e:c5:
77:52:ad:b2:dc:c5:93:da:c3:0b:88:6b:01:99:86:98:43:e0:
6a:03:e9:d1:81:5d:74:5c:c5:e7:20:12:c4:5d:bb:f5:d9:a7:
11:6f:e1:e6:9d:f8:c2:87:1b:69:4a:6b:09:a0:47:1d:fc:96:
a6:26:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:50 2026 by rpki-client