Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zbZqr_6Cqy7yMcthWDqkKRFV0_U.roa
File: zbZqr_6Cqy7yMcthWDqkKRFV0_U.roa (raw, json)
Hash identifier: RccRkMDd2prNqwft8DF11VMjt9PssJecqUMdzBVb7pQ=
Subject key identifier: CD:B6:6A:AF:FE:82:AB:2E:F2:31:CB:61:58:3A:A4:29:11:55:D3:F5
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019EEE14FFCB7B1016F3523DF579C7BFF9BE
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zbZqr_6Cqy7yMcthWDqkKRFV0_U.roa
Signing time: Mon 22 Jun 2026 06:46:54 +0000
ROA not before: Mon 22 Jun 2026 06:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219392
IP address blocks: 2a03:5840:158::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:14:ff:cb:7b:10:16:f3:52:3d:f5:79:c7:bf:f9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jun 22 06:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdb66aaffe82ab2ef231cb61583aa4291155d3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:4a:6f:0e:0e:7f:18:27:25:c8:63:2b:4f:
a9:c3:ae:b8:42:fc:c9:e6:e1:ac:81:e3:a4:58:a7:
e1:ba:81:ad:a1:39:d1:80:82:25:57:c4:1b:96:a6:
de:97:1d:17:08:87:31:d3:af:70:56:b7:04:e9:0a:
55:b7:ea:00:ff:c3:fb:db:f1:15:42:10:8b:57:b2:
80:e0:a6:ac:1d:80:af:69:aa:d4:ee:35:aa:e6:ac:
83:89:11:aa:24:5a:01:55:a2:29:65:eb:2d:b1:82:
0d:f3:03:78:d6:de:63:1a:45:28:23:68:1c:7a:be:
b1:6e:b8:06:9b:62:9d:30:a1:3c:63:76:cc:88:b9:
49:03:22:ff:8f:18:08:7e:18:e7:a1:29:ee:01:68:
0e:c9:e7:46:a5:22:8a:38:d1:df:be:5a:e2:11:b8:
d1:b1:28:9d:e5:85:bb:f4:a2:7b:23:bc:96:be:c0:
92:22:48:04:c2:1b:a2:05:77:43:2a:d3:74:09:73:
7b:ed:8d:dd:9e:8b:a9:37:3e:bb:ee:db:d1:32:f5:
e2:e6:71:97:9e:16:48:2e:af:76:2e:89:d8:c3:f8:
85:f9:c0:6b:7e:f9:aa:fc:70:49:63:22:17:c2:17:
6f:05:5d:8f:17:72:95:be:b9:ab:d6:fc:f3:44:24:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:6A:AF:FE:82:AB:2E:F2:31:CB:61:58:3A:A4:29:11:55:D3:F5
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zbZqr_6Cqy7yMcthWDqkKRFV0_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:158::/48
Signature Algorithm: sha256WithRSAEncryption
86:8c:ab:98:20:20:f2:88:ab:7f:e9:4b:ea:fc:d6:7c:83:01:
fe:24:e5:b2:7a:8d:6a:69:fd:c3:31:b0:71:fa:c0:0e:a4:b2:
20:bf:2f:76:22:9b:01:c5:3d:de:51:7f:33:03:1a:78:43:ac:
42:86:38:2e:90:72:09:74:ad:cb:cc:37:5e:ec:43:45:13:24:
c3:2d:86:f5:63:da:82:3a:4d:c1:9b:ed:f5:1c:9d:0d:26:7e:
55:d8:d0:c6:e9:b1:ba:13:21:0a:6a:80:37:d8:83:70:cb:98:
05:2d:8f:02:c8:12:7d:f9:ff:6c:6c:21:28:66:a2:60:67:18:
e4:c6:b6:04:c4:fd:dd:c3:d5:27:df:db:6d:ff:27:fa:30:88:
f0:60:c9:eb:fe:1f:94:91:b3:0a:d0:32:07:83:a3:6c:8b:08:
60:17:45:86:4e:ad:66:b7:c0:de:57:b2:92:ed:8d:d2:0d:26:
75:43:5d:e2:ee:18:42:f7:42:9c:12:cc:a0:2c:fb:46:12:99:
58:c6:17:a3:85:ff:75:dc:57:ae:4b:8f:3b:1f:33:85:19:e0:
66:a9:0f:59:3d:bf:de:ec:4e:c5:38:75:1a:82:b2:1f:1a:d7:
5d:54:f8:72:d4:62:88:99:cf:5d:01:0b:f7:00:8a:de:60:e5:
20:ac:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:42 2026 by rpki-client