Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/zsyPeh8m8sjguCrl4OEWWZFzySo.roa
File: zsyPeh8m8sjguCrl4OEWWZFzySo.roa (raw, json)
Hash identifier: TcB5Dwpz6Z4jJ4wGIGEdlsvXaH5/dLHAqc6cpVGM8N0=
Subject key identifier: CE:CC:8F:7A:1F:26:F2:C8:E0:B8:2A:E5:E0:E1:16:59:91:73:C9:2A
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019CD4263A943D3F6CC5E2CA515CA6BC6D2A
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/zsyPeh8m8sjguCrl4OEWWZFzySo.roa
Signing time: Mon 09 Mar 2026 19:50:00 +0000
ROA not before: Mon 09 Mar 2026 19:50:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215103
IP address blocks: 2a01:ecc0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d4:26:3a:94:3d:3f:6c:c5:e2:ca:51:5c:a6:bc:6d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Mar 9 19:50:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cecc8f7a1f26f2c8e0b82ae5e0e116599173c92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:6d:56:30:5b:b8:40:6f:f3:7e:48:98:df:
f3:62:fa:f7:d2:09:76:1f:ef:f2:af:c8:65:27:2b:
11:b2:1e:c9:b1:e6:bb:c7:e9:e5:eb:fa:ae:3e:85:
f5:91:69:b5:1e:f2:a7:f2:94:fa:db:60:9c:7d:1a:
3f:fc:34:d5:f3:16:12:40:2c:d0:18:0a:1d:18:0b:
45:e2:ed:8b:80:08:31:ac:90:6d:5f:70:ce:4a:cd:
b2:e8:b1:71:53:96:d0:dc:29:d2:13:3b:87:5d:7d:
d9:ff:ed:46:52:e6:d6:48:97:f0:81:17:85:7a:d0:
ca:54:f1:ab:4f:c7:d1:14:ad:eb:64:bf:ce:b4:9e:
d4:f0:e4:8f:9b:75:54:1d:35:28:30:78:d8:7d:d4:
f1:3d:39:a2:34:88:c1:ff:6d:fa:c6:30:75:fa:86:
65:f7:b4:5d:5e:dc:d9:a4:96:c5:7e:6c:90:c2:7c:
5e:7b:fe:17:27:a9:55:bc:b0:21:4e:a4:28:51:ad:
01:9f:a5:72:5c:10:13:f9:b3:b1:e7:c5:31:64:b1:
c2:35:80:05:78:77:a6:04:d9:18:6f:a9:53:5d:28:
3a:80:ec:e3:77:97:27:d9:ec:2a:1a:43:d2:8b:cd:
6f:6c:1a:0a:d7:5c:b9:be:a4:90:ef:6b:a7:d1:41:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CC:8F:7A:1F:26:F2:C8:E0:B8:2A:E5:E0:E1:16:59:91:73:C9:2A
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/zsyPeh8m8sjguCrl4OEWWZFzySo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:9::/48
Signature Algorithm: sha256WithRSAEncryption
af:87:ed:db:1a:34:00:6c:9f:91:80:cb:d7:3e:3e:45:45:aa:
cc:fc:94:f3:97:4d:28:d6:66:71:56:8e:4a:54:f6:1f:c6:93:
0c:b9:e3:a4:20:84:a8:d3:ef:50:0e:25:b5:8d:23:9a:53:c1:
8e:e6:19:45:ce:fb:dd:3b:20:3b:cd:4a:0a:b9:85:ad:57:1a:
4f:7f:71:ee:40:9f:19:45:5c:71:28:e7:57:9d:02:90:25:aa:
3e:52:72:d9:94:19:35:01:51:ca:ab:73:7d:46:98:7f:58:4b:
35:7b:10:1c:4b:04:3c:c3:a3:d4:2d:a0:d5:ac:d1:ad:89:26:
4f:b3:6d:05:2a:b9:97:d0:77:40:28:0a:bd:13:9d:a0:53:2e:
a1:3c:23:b2:e8:53:03:5a:85:d4:3b:4d:31:c6:70:49:8c:27:
85:b1:80:03:21:74:19:58:69:97:7c:08:a0:58:30:6a:e3:0e:
2c:1e:39:58:81:96:2e:d8:29:e0:2e:dd:47:68:6c:9f:e1:29:
de:1b:23:ee:8c:dc:f5:29:14:f6:02:4f:21:3d:ec:2f:29:38:
21:bf:84:71:e0:bc:92:b5:2a:f1:40:ee:18:11:c9:9a:ee:80:
02:c3:87:39:d9:aa:08:5c:51:fb:73:11:11:a5:d7:89:92:96:
5e:c7:29:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZzUJjqUPT9sxeLKUVymvG0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0
ZWU1YmUwHhcNMjYwMzA5MTk1MDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWNjOGY3YTFmMjZmMmM4ZTBiODJhZTVlMGUxMTY1OTkxNzNjOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQVtVjBbuEBv835ImN/zYvr30gl2
H+/yr8hlJysRsh7Jsea7x+nl6/quPoX1kWm1HvKn8pT622CcfRo//DTV8xYSQCzQ
GAodGAtF4u2LgAgxrJBtX3DOSs2y6LFxU5bQ3CnSEzuHXX3Z/+1GUubWSJfwgReF
etDKVPGrT8fRFK3rZL/OtJ7U8OSPm3VUHTUoMHjYfdTxPTmiNIjB/236xjB1+oZl
97RdXtzZpJbFfmyQwnxee/4XJ6lVvLAhTqQoUa0Bn6VyXBAT+bOx58UxZLHCNYAF
eHemBNkYb6lTXSg6gOzjd5cn2ewqGkPSi81vbBoK11y5vqSQ72un0UEpfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM7Mj3ofJvLI4Lgq5eDhFlmRc8kqMB8GA1UdIwQY
MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt
NjM0NTE1NDg5NzlkLzEvenN5UGVoOG04c2pndUNybDRPRVdXWkZ6eVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk
LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgHswAAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQCvh+3bGjQAbJ+RgMvXPj5FRarM/JTzl00o1mZx
Vo5KVPYfxpMMueOkIISo0+9QDiW1jSOaU8GO5hlFzvvdOyA7zUoKuYWtVxpPf3Hu
QJ8ZRVxxKOdXnQKQJao+UnLZlBk1AVHKq3N9Rph/WEs1exAcSwQ8w6PULaDVrNGt
iSZPs20FKrmX0HdAKAq9E52gUy6hPCOy6FMDWoXUO00xxnBJjCeFsYADIXQZWGmX
fAigWDBq4w4sHjlYgZYu2CngLt1HaGyf4SneGyPujNz1KRT2Ak8hPewvKTghv4Rx
4LyStSrxQO4YEcma7oACw4c52aoIXFH7cxERpdeJkpZexyk7
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:34:20 2026 by rpki-client