Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa
File: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (raw, json)
Hash identifier: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=
Subject key identifier: 64:E5:29:70:96:E6:6B:08:5F:29:3E:97:F6:F6:E9:A9:78:05:6F:31
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690DD8B9D8B8DD38F0F5FE65B30118
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198814
IP address blocks: 2a02:17a6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:d8:b9:d8:b8:dd:38:f0:f5:fe:65:b3:01:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64e5297096e66b085f293e97f6f6e9a978056f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:3f:ee:df:d0:b6:7f:30:90:dd:db:bd:05:
e2:0c:fb:95:67:df:fc:c3:45:6a:30:07:c7:3b:14:
d2:73:b6:74:07:de:b5:6c:ba:a4:a1:64:f7:c1:75:
a4:80:a4:17:09:93:be:60:35:83:87:f2:41:cb:a2:
65:ae:80:6c:23:8b:39:84:4e:94:f4:81:77:ad:6a:
86:6c:c7:ea:de:0f:5b:c4:2a:50:7d:1d:34:cd:85:
80:07:1e:dd:19:58:54:4f:c5:fe:7c:79:b9:6e:ee:
3b:68:d9:6c:ad:7c:2d:75:d4:49:fe:fc:16:f8:a5:
0e:dd:24:58:88:4e:b0:87:97:d3:04:7a:da:c8:ab:
45:78:f8:59:83:99:ad:63:be:89:0f:9e:d3:b8:37:
46:6d:9c:b1:43:a7:a2:4c:8c:13:3a:69:fc:b9:0b:
fb:34:1e:2a:1a:cb:18:5a:c7:a1:50:31:ca:3c:5f:
3e:6b:54:47:73:75:05:fa:ce:e9:94:8d:ab:41:35:
b9:32:8f:0c:04:1f:03:80:50:ae:c2:9f:51:ed:7b:
0e:2e:f8:11:83:00:32:a8:2e:4e:f3:4a:b4:b4:b0:
54:6d:b4:d9:83:86:56:3b:ce:85:8d:48:9e:2e:91:
13:2a:01:b3:17:d9:be:d2:40:35:11:36:61:09:99:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:29:70:96:E6:6B:08:5F:29:3E:97:F6:F6:E9:A9:78:05:6F:31
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:17a6::/32
Signature Algorithm: sha256WithRSAEncryption
65:8a:e9:dd:25:ae:b2:a2:65:a5:b2:2e:49:77:d6:fa:b4:5f:
1e:a5:a2:3d:c9:25:ab:34:d6:a1:f0:d5:00:31:5f:f7:1b:1d:
f0:c7:5a:1b:5d:34:26:76:94:cf:38:02:68:14:ff:de:a6:3a:
4f:30:07:72:67:30:c8:15:ca:06:f4:c8:44:76:a6:e8:7b:7c:
a9:9d:5d:97:be:5f:1c:23:50:85:e2:89:c3:e1:05:87:78:51:
0b:38:f1:06:11:a5:90:e1:3b:ba:5f:f8:39:a2:8b:2f:e7:5e:
12:4d:7a:1a:c6:6d:b1:75:1a:99:fd:ed:4f:33:bc:b9:b2:0d:
8b:7d:25:0f:7a:b9:f4:74:0f:82:81:43:9f:f2:63:9c:7e:5a:
b6:fa:73:97:c9:47:75:ef:2f:06:11:e0:01:21:1f:39:1e:ba:
b5:66:b9:38:e4:2e:56:75:f9:ca:31:fe:24:ab:51:7a:75:58:
3c:54:d9:72:40:60:78:9b:3a:95:e6:e9:f0:ca:22:28:b4:e4:
9d:63:30:6a:4e:e2:ae:2d:c8:f1:3a:67:52:d5:38:3e:ef:40:
0a:35:14:ee:d4:58:f8:ee:7e:74:f8:57:17:5e:29:d7:33:24:
e2:eb:78:57:43:4f:cb:72:9a:49:da:5d:6a:23:8a:50:70:b3:
1b:28:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:53 2026 by rpki-client