Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/zVH7TsogvTWZkDPFsup5JHRQzsQ.roa
File: zVH7TsogvTWZkDPFsup5JHRQzsQ.roa (raw, json)
Hash identifier: UFxTTYncwMtCrIxHwqLvGgeBxLCeEkeKjBfv2GH6Oq0=
Subject key identifier: CD:51:FB:4E:CA:20:BD:35:99:90:33:C5:B2:EA:79:24:74:50:CE:C4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019DEA211402F0CB1EE072695BC6AF1902A3
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/zVH7TsogvTWZkDPFsup5JHRQzsQ.roa
Signing time: Sat 02 May 2026 19:18:49 +0000
ROA not before: Sat 02 May 2026 19:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203359
IP address blocks: 2a0d:e247::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ea:21:14:02:f0:cb:1e:e0:72:69:5b:c6:af:19:02:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 2 19:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd51fb4eca20bd35999033c5b2ea79247450cec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:0f:ea:5f:99:d5:3a:07:0f:0e:f8:23:bb:
c4:34:e5:69:bf:b9:e9:12:df:06:13:9b:89:ce:b1:
07:1c:37:91:ed:26:9d:cc:66:ee:2a:2d:f4:b5:e1:
b7:be:81:0f:76:e8:3f:35:bb:f1:3c:f4:22:ba:14:
ef:22:d0:4e:46:e6:dd:95:13:0c:7e:6c:23:f8:b9:
ca:b7:88:13:86:88:c1:5c:a8:6d:2f:56:7f:21:8c:
f8:1e:f6:4d:27:8b:1b:9b:70:8b:37:5f:c9:cb:fa:
bc:7f:d4:19:00:20:0d:2a:bf:25:cf:93:ec:ca:e4:
cb:44:77:d0:fa:5d:2e:32:9c:1d:4a:fe:8b:9d:2e:
d8:e8:80:ac:f6:80:5f:03:e4:22:a8:a2:88:20:e9:
55:b6:36:90:61:a9:17:db:08:fa:61:fa:e5:08:f2:
e4:09:64:4b:b4:c2:58:47:1c:3a:60:d9:fb:cc:d9:
b3:e4:0f:54:21:fe:7d:02:2f:03:21:9a:79:92:5f:
34:8b:14:d3:5a:b6:bf:1d:42:77:eb:3b:46:cb:67:
d1:d2:33:96:6a:7a:a9:05:1d:75:63:85:06:38:86:
c8:3b:38:c1:96:66:af:a3:ae:9d:e3:7b:2f:e5:c3:
f4:07:b8:75:1e:77:b0:48:50:64:3a:3e:e3:f8:dd:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:FB:4E:CA:20:BD:35:99:90:33:C5:B2:EA:79:24:74:50:CE:C4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/zVH7TsogvTWZkDPFsup5JHRQzsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:e247::/32
Signature Algorithm: sha256WithRSAEncryption
03:c1:ec:5d:08:db:3d:e4:07:a6:82:3b:dc:15:3c:f0:29:90:
55:9e:f4:56:b7:c4:ec:de:b1:ce:2a:26:2d:db:9c:3b:9d:11:
9e:d6:6d:aa:8b:7a:b5:6b:da:d7:1d:5e:47:b5:86:24:e0:2b:
f2:32:92:4e:54:9e:30:f3:32:ba:26:94:ef:76:ad:c5:4d:da:
49:c7:52:d1:60:56:96:3c:4f:f4:84:6e:be:07:f1:c5:b6:61:
c8:cd:0a:0a:a2:e6:db:48:32:d9:bf:4a:bb:aa:06:ed:68:6d:
31:56:92:55:d0:48:d1:ed:5e:59:f1:30:49:9b:f6:78:25:77:
9e:f9:47:72:72:0d:00:eb:e6:ce:6b:32:2f:f5:fd:ba:0c:63:
85:1f:aa:79:d2:42:00:0c:30:f6:3b:a9:33:ce:19:f1:22:92:
99:09:2b:2f:e1:72:9a:bf:d2:3f:74:80:a7:50:df:55:09:eb:
b2:58:3f:db:cb:3c:00:ad:8c:7c:d0:44:a7:de:6f:71:7e:79:
88:5e:00:cb:1d:2e:68:1e:16:4e:1b:32:f1:63:8c:e5:06:15:
ab:78:71:86:e9:e5:e7:d9:b5:ba:d5:f8:ec:31:0b:16:25:80:
c5:02:0e:91:74:d9:cb:94:c6:5f:63:3d:9d:10:10:2a:20:d6:
b3:96:a1:91
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ3qIRQC8Mse4HJpW8avGQKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNTAyMTkxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDUxZmI0ZWNhMjBiZDM1OTk5MDMzYzViMmVhNzkyNDc0NTBjZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGoP6l+Z1ToHDw74I7vENOVpv7np
Et8GE5uJzrEHHDeR7SadzGbuKi30teG3voEPdug/NbvxPPQiuhTvItBORubdlRMM
fmwj+LnKt4gThojBXKhtL1Z/IYz4HvZNJ4sbm3CLN1/Jy/q8f9QZACANKr8lz5Ps
yuTLRHfQ+l0uMpwdSv6LnS7Y6ICs9oBfA+QiqKKIIOlVtjaQYakX2wj6YfrlCPLk
CWRLtMJYRxw6YNn7zNmz5A9UIf59Ai8DIZp5kl80ixTTWra/HUJ36ztGy2fR0jOW
anqpBR11Y4UGOIbIOzjBlmavo66d43sv5cP0B7h1HnewSFBkOj7j+N3mvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM1R+07KIL01mZAzxbLqeSR0UM7EMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvelZIN1Rzb2d2VFdaa0RQRnN1cDVKSFJRenNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg3iRzAN
BgkqhkiG9w0BAQsFAAOCAQEAA8HsXQjbPeQHpoI73BU88CmQVZ70VrfE7N6xziom
LducO50RntZtqot6tWva1x1eR7WGJOAr8jKSTlSeMPMyuiaU73atxU3aScdS0WBW
ljxP9IRuvgfxxbZhyM0KCqLm20gy2b9Ku6oG7WhtMVaSVdBI0e1eWfEwSZv2eCV3
nvlHcnINAOvmzmsyL/X9ugxjhR+qedJCAAww9jupM84Z8SKSmQkrL+Fymr/SP3SA
p1DfVQnrslg/28s8AK2MfNBEp95vcX55iF4Ayx0uaB4WThsy8WOM5QYVq3hxhunl
59m1utX47DELFiWAxQIOkXTZy5TGX2M9nRAQKiDWs5ahkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:15:09 2026 by rpki-client