Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZZI71rxZPsI63kTfQ76Aqa1bICs.roa
File: ZZI71rxZPsI63kTfQ76Aqa1bICs.roa (raw, json)
Hash identifier: ZqKa4z2AerGMC/SK2EPAvgRQl7FaQFZEVuRVd5PHCIA=
Subject key identifier: 65:92:3B:D6:BC:59:3E:C2:3A:DE:44:DF:43:BE:80:A9:AD:5B:20:2B
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0C989D09BEC2103F4F8C3B6A12AA7AF42
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZZI71rxZPsI63kTfQ76Aqa1bICs.roa
Signing time: Tue 22 Sep 2026 14:34:07 +0000
ROA not before: Tue 22 Sep 2026 14:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200081
IP address blocks: 2a0e:4001:1000::/36 maxlen: 36
2a0e:4006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:89:d0:9b:ec:21:03:f4:f8:c3:b6:a1:2a:a7:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 22 14:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65923bd6bc593ec23ade44df43be80a9ad5b202b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:02:8b:12:66:e1:a2:a9:c9:05:94:34:f8:
2b:a8:d2:2e:27:cd:d7:0b:6a:8f:58:9b:a4:ae:9a:
0e:df:fd:b8:f2:87:71:e4:e7:eb:98:d9:09:1f:ae:
db:74:84:ac:dc:c9:db:57:ed:b9:d1:fb:66:14:5b:
15:ba:e6:f9:1e:8a:8b:3b:5e:c5:f0:5d:10:bd:14:
81:11:5e:1d:54:04:12:b7:f7:6b:d6:b7:75:7c:07:
61:76:4b:2b:03:75:9d:f2:a7:e5:d8:f0:7f:9b:7b:
cd:cd:ee:d1:de:78:a6:be:0d:d6:ce:2e:f5:09:9c:
8e:a4:bc:19:57:4c:3e:7f:a8:0f:f7:e8:25:3b:d9:
60:be:89:57:49:94:7f:b5:4a:ef:dd:b3:4b:4f:e3:
33:84:9f:bb:71:87:f9:e0:7f:a0:01:47:53:7d:a2:
d3:83:fb:80:33:e3:42:fe:41:16:8d:28:70:e8:72:
8d:51:79:d0:11:c5:b0:f5:db:70:9a:5c:f9:c0:58:
36:89:6f:19:ee:3d:a0:fc:7b:66:16:a1:df:23:0b:
3c:f1:f4:2e:c3:8d:36:54:9f:43:b3:f7:0f:c7:8f:
c0:91:e3:4d:a2:c0:47:7b:7b:cf:e1:d5:29:ca:b1:
7a:ce:1d:35:87:9f:07:4c:51:26:2d:48:d7:a2:93:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:3B:D6:BC:59:3E:C2:3A:DE:44:DF:43:BE:80:A9:AD:5B:20:2B
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZZI71rxZPsI63kTfQ76Aqa1bICs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:1000::/36
2a0e:4006::/32
Signature Algorithm: sha256WithRSAEncryption
1a:81:c0:d7:b0:9c:18:b2:e3:a5:c3:cd:5e:75:90:46:bd:8c:
0f:c5:79:42:a9:53:f9:88:c3:15:ae:4f:1f:f1:2e:44:4b:3d:
88:9b:03:a5:61:a9:cb:6a:3d:51:60:ea:f8:16:ab:98:af:a2:
fb:8e:17:20:e4:04:a8:00:8e:49:0d:e0:48:a6:16:5e:14:29:
f7:bf:11:d6:b8:cb:ec:0d:80:c7:99:d9:59:b9:3a:56:e1:56:
32:6a:b2:d9:43:d6:88:74:8f:08:29:b9:a8:34:e1:86:8d:2a:
3f:c2:da:10:cb:55:09:69:b6:41:6a:12:eb:f2:5e:e8:ff:3c:
66:4a:ff:ab:b8:cb:de:66:53:3e:ad:2a:69:69:05:9d:b6:96:
ac:1e:07:af:ad:6b:ca:5d:eb:4f:f0:22:68:3e:ae:7c:ee:1f:
12:bb:d7:96:b8:61:df:32:a8:50:af:8c:94:ef:a5:01:3f:b0:
51:b5:6e:15:53:b7:95:f8:cc:0a:e9:21:c3:ae:13:e5:b1:25:
5f:2e:c8:89:f5:b5:12:a4:d1:7a:73:31:75:cf:50:25:af:0a:
1c:87:e5:32:ce:19:b2:10:f9:5f:5b:9a:12:52:06:9e:94:9b:
7b:8e:6b:1e:f5:b7:73:3c:4c:44:b5:80:b8:72:95:15:1d:53:
ed:1a:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:48 2026 by rpki-client