Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/zWZK-eYvxtaxAqAwiT0cX57U0uc.roa
File: zWZK-eYvxtaxAqAwiT0cX57U0uc.roa (raw, json)
Hash identifier: YTB+9XFVX6X6396HCMASKsi82tXGV59LEwN+qEH8s78=
Subject key identifier: CD:66:4A:F9:E6:2F:C6:D6:B1:02:A0:30:89:3D:1C:5F:9E:D4:D2:E7
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 01A1AFCC4B1D42F8B7C20F708181E2114711
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/zWZK-eYvxtaxAqAwiT0cX57U0uc.roa
Signing time: Fri 06 Nov 2026 07:39:23 +0000
ROA not before: Fri 06 Nov 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202923
IP address blocks: 212.114.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:cc:4b:1d:42:f8:b7:c2:0f:70:81:81:e2:11:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Nov 6 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd664af9e62fc6d6b102a030893d1c5f9ed4d2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:37:54:ff:f5:38:4c:ff:f0:3a:5a:42:15:
59:f9:ed:4d:c7:b9:39:0d:55:d1:43:2e:e3:5b:ed:
63:4d:93:57:ee:ab:95:a3:17:ab:b9:b5:e7:0a:df:
58:89:27:cd:11:26:51:9b:5e:4c:a2:ab:69:6c:06:
b3:b4:64:02:75:24:3f:cd:59:24:9f:f6:b9:41:0a:
f8:f4:b6:be:6e:4c:e5:29:a2:a5:11:9c:93:9b:ef:
d2:c6:39:7b:b4:f0:b6:85:62:b4:07:5e:09:b4:0a:
d8:03:f9:84:e1:d5:16:73:ea:6e:28:ea:49:4d:30:
e5:ef:d8:62:ef:fe:5d:12:cc:9a:be:1b:72:d6:72:
1b:78:2a:4c:4c:64:0e:28:64:70:f1:c6:e9:e5:c7:
17:e8:11:47:68:46:39:16:df:b2:1f:87:a4:f0:21:
d1:51:f4:57:9a:dd:24:cb:f9:99:d7:ad:e0:f1:7e:
62:f3:ff:1e:6d:12:ee:74:55:13:0e:74:5d:07:16:
c6:85:db:9a:1d:2e:f7:6b:97:7d:ca:ee:92:48:54:
6c:f9:3c:35:bb:9d:3e:05:d0:53:2c:c9:59:08:f0:
bf:c5:df:fa:cc:c0:da:c8:ae:d1:53:96:78:e4:05:
ed:73:b7:ab:01:80:85:ab:e1:f0:52:b6:51:95:ca:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:4A:F9:E6:2F:C6:D6:B1:02:A0:30:89:3D:1C:5F:9E:D4:D2:E7
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/zWZK-eYvxtaxAqAwiT0cX57U0uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.48.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:8f:38:a8:eb:6c:7a:f3:2c:fa:1d:98:a1:72:31:a1:2d:e2:
6b:4e:d7:28:eb:23:4c:b3:7d:e0:da:50:00:2d:8d:f8:9d:ec:
e3:87:98:7d:3b:03:24:a2:f2:10:be:e7:55:19:e7:f1:20:fe:
be:2f:53:a8:76:3a:d5:2d:5d:ed:46:dc:4c:4b:ae:8f:1b:d0:
ae:2c:27:ee:c0:e7:55:05:b0:0b:6f:2d:53:e7:6b:16:2e:50:
6b:de:d8:43:73:53:36:dd:51:7a:d2:ac:46:e9:98:aa:11:86:
c0:09:31:a2:9a:3d:0d:cb:38:08:6b:72:3b:75:8f:cc:4f:f4:
2e:f6:7a:62:d0:d2:f6:a6:38:97:10:57:6f:94:7e:8c:7f:94:
94:95:3b:aa:5f:91:79:6a:d4:f9:72:dc:96:95:5d:2b:57:1a:
5a:90:ac:d4:0e:aa:f1:83:a5:5e:8e:56:28:52:00:c5:73:45:
a5:68:01:0e:08:93:65:1f:09:be:b2:0b:99:41:82:a8:e8:80:
ea:0f:15:3c:8f:d7:7b:7c:53:9a:2e:45:e0:68:e6:6a:b9:10:
a6:4a:eb:4a:bb:39:a2:14:ab:08:d0:ee:bc:5c:89:b8:bb:92:
80:6f:fd:76:5e:92:47:e6:d5:62:1a:fb:6c:91:28:d5:97:55:
b8:7c:e1:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGvzEsdQvi3wg9wgYHiEUcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm
MjgyN2MwHhcNMjYxMTA2MDczOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDY2NGFmOWU2MmZjNmQ2YjEwMmEwMzA4OTNkMWM1ZjllZDRkMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6s3VP/1OEz/8DpaQhVZ+e1Nx7k5
DVXRQy7jW+1jTZNX7quVoxerubXnCt9YiSfNESZRm15MoqtpbAaztGQCdSQ/zVkk
n/a5QQr49La+bkzlKaKlEZyTm+/Sxjl7tPC2hWK0B14JtArYA/mE4dUWc+puKOpJ
TTDl79hi7/5dEsyavhty1nIbeCpMTGQOKGRw8cbp5ccX6BFHaEY5Ft+yH4ek8CHR
UfRXmt0ky/mZ163g8X5i8/8ebRLudFUTDnRdBxbGhduaHS73a5d9yu6SSFRs+Tw1
u50+BdBTLMlZCPC/xd/6zMDayK7RU5Z45AXtc7erAYCFq+HwUrZRlcrMjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1mSvnmL8bWsQKgMIk9HF+e1NLnMB8GA1UdIwQY
MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt
YmFiNDhkYWI0Y2Q2LzEveldaSy1lWXZ4dGF4QXFBd2lUMGNYNTdVMHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2
LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HIwMA0G
CSqGSIb3DQEBCwUAA4IBAQC5jzio62x68yz6HZihcjGhLeJrTtco6yNMs33g2lAA
LY34nezjh5h9OwMkovIQvudVGefxIP6+L1OodjrVLV3tRtxMS66PG9CuLCfuwOdV
BbALby1T52sWLlBr3thDc1M23VF60qxG6ZiqEYbACTGimj0NyzgIa3I7dY/MT/Qu
9npi0NL2pjiXEFdvlH6Mf5SUlTuqX5F5atT5ctyWlV0rVxpakKzUDqrxg6VejlYo
UgDFc0WlaAEOCJNlHwm+sguZQYKo6IDqDxU8j9d7fFOaLkXgaOZquRCmSutKuzmi
FKsI0O68XIm4u5KAb/12XpJH5tViGvtskSjVl1W4fOGc
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:33:00 2026 by rpki-client