Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ZRJDYrdKK80Gen5g91m3b4qaTlE.roa
File: ZRJDYrdKK80Gen5g91m3b4qaTlE.roa (raw, json)
Hash identifier: aoGDilkeCyM9TBusBIn5pAOX7wOEuLruDKTdsqOdnwg=
Subject key identifier: 65:12:43:62:B7:4A:2B:CD:06:7A:7E:60:F7:59:B7:6F:8A:9A:4E:51
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F2314F6BD7CB928CF8EF43D557A85D0AE
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ZRJDYrdKK80Gen5g91m3b4qaTlE.roa
Signing time: Thu 02 Jul 2026 13:46:44 +0000
ROA not before: Thu 02 Jul 2026 13:46:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200084
IP address blocks: 2a06:9801:cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:14:f6:bd:7c:b9:28:cf:8e:f4:3d:55:7a:85:d0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 2 13:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65124362b74a2bcd067a7e60f759b76f8a9a4e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:b6:3f:c5:20:64:9f:54:28:67:d7:8c:58:
a4:8e:e4:df:6e:46:45:f3:83:44:58:0b:c6:37:77:
e5:57:e0:bf:d8:8f:0b:7d:bf:28:60:da:7f:50:c1:
53:19:dc:87:3f:3c:45:80:11:1b:90:94:40:a1:83:
5e:ed:ae:8e:37:f5:56:4d:d4:bc:b7:e3:3e:61:41:
8d:07:ea:33:7e:c0:17:51:ad:c2:f4:77:f7:24:a5:
e7:da:e5:88:0d:47:03:df:c4:f4:c4:d2:5e:05:24:
74:9f:b0:8b:6d:7c:70:1e:21:dc:92:5f:92:ab:e8:
89:42:2e:ff:8e:5b:50:91:41:a6:24:41:e8:ff:14:
e2:c9:8f:6b:bd:9f:49:72:c4:99:45:fc:69:bd:69:
59:0a:3f:33:bc:a5:e2:0b:25:a3:c8:03:3a:bb:ae:
fd:24:84:37:5b:1c:63:38:8d:c8:5c:72:5b:72:a0:
6a:ed:52:dc:72:e4:48:14:fb:3a:77:0c:f8:86:88:
dc:e9:97:fa:df:09:cc:0d:f2:da:52:4e:c0:3d:0f:
04:6c:6a:41:91:73:f5:32:de:b8:76:7f:df:e5:4a:
78:1c:f1:66:20:9b:6a:fb:04:bd:20:da:fe:1e:9b:
66:a8:dc:d2:fc:9e:12:75:c0:df:ad:6c:6d:cc:20:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:12:43:62:B7:4A:2B:CD:06:7A:7E:60:F7:59:B7:6F:8A:9A:4E:51
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ZRJDYrdKK80Gen5g91m3b4qaTlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:cc::/48
Signature Algorithm: sha256WithRSAEncryption
59:2d:19:b3:92:1b:1b:f6:fb:57:0f:2b:94:d0:cf:fb:f6:26:
56:0d:5a:e8:3a:04:30:a8:ec:d6:1d:6e:b1:73:9b:20:41:1d:
ed:96:39:97:7d:32:e2:90:18:79:89:6f:44:81:df:5d:7a:3e:
aa:e8:0c:db:f2:be:31:b3:e4:79:91:3b:5e:8f:75:b7:48:53:
c5:0a:b0:2f:25:21:d9:7a:ba:b4:14:d3:18:a5:03:71:fc:4d:
dc:7f:3f:2c:d7:13:35:73:67:9e:c7:c9:c6:64:42:b0:54:a2:
c1:98:04:85:bf:a3:16:d9:b9:79:fe:b0:94:c5:b9:c5:c3:d8:
e9:42:e4:d5:83:e3:6c:c2:39:c9:3a:e8:61:d9:06:71:db:15:
7d:cf:ce:13:f9:74:a0:8a:b2:74:c1:2e:9a:95:82:79:ba:2d:
d7:ff:04:87:4e:31:4c:64:e3:92:1b:6b:37:d9:39:7b:1c:9b:
ad:92:3e:c5:24:70:ad:40:3d:63:42:1e:ac:ad:f8:7e:fb:93:
5f:c8:db:12:6c:6c:0d:83:69:3f:c1:1a:73:0f:c3:2f:8c:5a:
c2:59:55:f9:d3:04:7c:7f:be:3f:d7:86:77:b7:fc:1e:c9:85:
ef:a8:b7:8d:57:15:c3:f7:38:1c:94:0f:b8:2f:4d:e4:a1:de:
ef:51:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:23 2026 by rpki-client