Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/ZxK-eh5F5V5sCGHqmkMBiZx765A.roa
File: ZxK-eh5F5V5sCGHqmkMBiZx765A.roa (raw, json)
Hash identifier: Ltp1uKD3CaIpjzzV3gdzBJKlOckUmZmD0RcFdHDISsk=
Subject key identifier: 67:12:BE:7A:1E:45:E5:5E:6C:08:61:EA:9A:43:01:89:9C:7B:EB:90
Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b
Certificate serial: 019CC23F7F53328FC9EE793FA0B9F9316441
Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/ZxK-eh5F5V5sCGHqmkMBiZx765A.roa
Signing time: Fri 06 Mar 2026 08:24:27 +0000
ROA not before: Fri 06 Mar 2026 08:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202858
IP address blocks: 2001:67c:298::/48 maxlen: 48
2001:67c:e8c::/48 maxlen: 48
2001:67c:16c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:3f:7f:53:32:8f:c9:ee:79:3f:a0:b9:f9:31:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b
Validity
Not Before: Mar 6 08:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6712be7a1e45e55e6c0861ea9a4301899c7beb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:e0:7c:1d:6f:ed:d1:cd:bc:2d:e0:ac:96:
40:81:66:04:35:a1:57:6c:83:97:f5:6d:ee:ba:83:
6c:80:e9:9c:c6:8a:69:67:ce:9c:01:2d:5e:f6:6c:
c4:cb:ea:3b:ad:6f:5c:3f:43:f5:79:b6:a8:82:f0:
5e:93:08:d9:ce:34:33:85:8e:a4:68:59:26:5a:00:
4c:13:92:ea:2e:4b:ed:de:c4:3e:8a:9d:95:35:ef:
4e:be:38:09:94:de:76:c8:3a:75:11:01:06:f1:d2:
b3:ef:5d:3d:0a:1c:68:8b:da:4f:a4:93:78:14:ac:
b3:81:e8:2a:0c:1d:34:7b:2b:a8:ce:37:74:0b:d0:
9e:b9:e4:6f:39:3b:75:d7:04:b7:3a:69:25:bc:ee:
66:5f:b7:6c:44:09:7d:77:93:9a:f3:e6:72:bf:63:
0c:1b:e6:77:e3:27:20:a1:f2:b3:2b:a7:f9:71:68:
3f:be:76:2b:7a:33:67:95:e0:bc:c1:aa:94:15:c7:
25:25:d5:6c:0f:c3:b4:43:e5:1f:e7:6c:f6:f1:23:
32:b9:ba:ee:fa:21:4d:59:dd:68:15:7c:b9:ba:8c:
1b:3b:3b:9e:33:e9:66:11:a7:81:04:79:16:67:7b:
7a:11:44:71:73:09:b1:d2:72:95:4a:65:73:90:b6:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:BE:7A:1E:45:E5:5E:6C:08:61:EA:9A:43:01:89:9C:7B:EB:90
X509v3 Authority Key Identifier:
keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/ZxK-eh5F5V5sCGHqmkMBiZx765A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:298::/48
2001:67c:e8c::/48
2001:67c:16c8::/48
Signature Algorithm: sha256WithRSAEncryption
a9:7c:9c:4e:e0:46:47:33:36:0b:61:7f:e5:07:e3:28:d2:88:
bf:fc:3b:d0:32:97:eb:e5:74:a1:50:7b:55:ef:63:28:42:91:
2c:d4:30:77:5a:41:c6:aa:1b:57:37:0a:75:93:26:2f:ff:cf:
5f:02:d2:13:eb:fc:ac:b3:85:6f:c4:92:3d:24:a3:00:75:53:
e2:d8:94:65:8e:85:20:6a:a0:32:8a:09:21:a3:47:c0:b6:c8:
5e:90:e2:a3:d2:5d:2a:e1:da:77:4d:81:ac:41:39:fd:66:5e:
6c:83:ac:29:91:eb:c0:e5:68:5a:e1:28:6c:83:f0:83:58:99:
35:15:be:38:f8:d2:58:f4:c7:c9:bb:fe:77:09:8b:07:b4:b2:
06:61:57:2d:f7:24:fd:d4:1b:ba:84:10:ee:de:15:2d:66:d7:
ae:5e:76:a5:78:c4:08:56:77:d5:35:5f:a0:0a:ab:35:7a:91:
01:ed:c9:5a:0e:13:5e:6c:d3:c9:08:24:19:0a:14:94:17:b2:
e6:4e:b3:54:db:c8:e2:7e:4d:86:1b:29:b3:bb:5c:a6:41:01:
7d:c6:2f:9c:00:b1:d1:7d:45:3b:06:f5:48:6f:40:50:8e:60:
65:a6:d2:6d:4e:20:1d:c0:bc:58:d0:f9:f1:66:3e:5a:51:6e:
35:eb:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:15:22 2026 by rpki-client