Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zoolDrvwWWdM8WWdCmTPBiqEvUA.roa
File: zoolDrvwWWdM8WWdCmTPBiqEvUA.roa (raw, json)
Hash identifier: s7r4weaWENBIjm/FR/DdgfdjO6l61GIRUMx+dermNw8=
Subject key identifier: CE:8A:25:0E:BB:F0:59:67:4C:F1:65:9D:0A:64:CF:06:2A:84:BD:40
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A1A1C6EA0038B1F2290C9D2E0DE50D6520
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zoolDrvwWWdM8WWdCmTPBiqEvUA.roa
Signing time: Tue 03 Nov 2026 14:18:50 +0000
ROA not before: Tue 03 Nov 2026 14:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47690
IP address blocks: 188.255.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:c6:ea:00:38:b1:f2:29:0c:9d:2e:0d:e5:0d:65:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 3 14:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce8a250ebbf059674cf1659d0a64cf062a84bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:07:ca:a8:27:aa:21:93:90:cb:b3:7a:64:
86:6e:fa:0f:2b:c3:c7:01:ec:7d:46:19:fc:0d:fd:
7f:08:7c:de:8a:bb:1b:1a:56:5d:c8:fa:40:bb:e6:
48:22:61:5c:83:02:b6:d0:5a:bd:01:67:03:b7:b9:
6f:78:d7:13:55:fe:97:14:8a:ea:59:bb:9c:28:d1:
2c:89:c7:d8:00:e4:dc:e3:38:87:d2:73:e6:f0:24:
2a:40:7c:2c:d5:3e:5a:ea:83:94:df:5f:60:65:10:
4d:5e:99:f0:0e:cb:eb:36:17:18:92:36:0f:d7:4d:
9c:74:17:a8:4d:9c:f2:85:c2:f2:27:13:28:17:1c:
1c:88:d0:49:a4:1c:c9:18:28:9c:85:80:28:02:96:
b4:df:6f:5b:56:98:48:23:6f:9b:bc:5f:a9:3a:22:
3c:6b:78:7d:d9:86:99:9b:3b:17:d6:95:ed:88:e7:
38:c7:5c:9e:b1:65:8e:af:76:ef:4c:60:ff:0a:18:
95:86:e4:c4:ed:04:e7:f8:62:77:3b:c8:05:17:fa:
6d:67:ed:62:ae:d2:3d:c8:3c:f7:45:7f:0a:d4:31:
8e:85:b0:ce:62:d6:6c:0f:7c:fa:a6:27:c6:07:5e:
aa:ae:24:53:5d:6a:65:f2:c3:cd:b9:37:10:cf:ae:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:25:0E:BB:F0:59:67:4C:F1:65:9D:0A:64:CF:06:2A:84:BD:40
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zoolDrvwWWdM8WWdCmTPBiqEvUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.242.0/24
Signature Algorithm: sha256WithRSAEncryption
46:68:c1:76:a4:ba:c6:6a:92:3f:77:70:ba:58:b6:39:cf:fd:
cd:ca:50:7f:57:eb:4f:e4:fa:03:90:2e:fd:3e:26:81:96:52:
f3:09:c3:e2:df:31:9c:9d:54:e4:8e:f7:4e:b0:4a:d7:a5:15:
58:65:0c:e9:99:8c:17:89:2d:2f:80:4b:86:a4:83:9c:3b:fe:
31:c5:aa:26:43:ef:8c:9c:33:85:88:3e:32:c6:18:6b:1a:55:
ce:f5:c5:b2:44:a0:d6:73:93:e9:43:ea:40:14:da:b6:98:63:
4d:8f:0d:d3:9f:bc:b1:5c:5d:d3:5b:aa:2a:87:15:78:6e:87:
28:74:69:5b:66:fc:8b:f1:48:da:6c:84:c5:1d:9c:47:68:07:
e4:28:1d:c4:38:76:a3:35:f3:09:db:8a:52:a6:01:75:a0:99:
5d:ab:a7:96:51:25:22:0f:30:98:15:5e:d7:f7:a3:38:04:45:
4f:e3:e3:f6:dc:d0:b7:8e:6a:aa:bf:1c:56:ee:9d:d4:30:35:
7a:20:c1:ba:e1:f3:f0:30:cc:a2:af:e4:35:e0:14:05:f6:c5:
64:a4:0e:b9:e4:b2:f1:57:71:51:5f:66:55:ed:4b:81:9d:d8:
9c:64:87:42:27:8f:34:99:c3:ad:80:df:d9:d5:30:b8:d6:39:
d0:e3:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:35 2026 by rpki-client