Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zp5mNKMjkc02lvIEnlf9-rGwXZc.roa
File: zp5mNKMjkc02lvIEnlf9-rGwXZc.roa (raw, json)
Hash identifier: OWbALcZeGPk1C0GZcUpthotEup6BtyzVTCzg3SGZkRk=
Subject key identifier: CE:9E:66:34:A3:23:91:CD:36:96:F2:04:9E:57:FD:FA:B1:B0:5D:97
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D90332273C486AEC497C83A4E352
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zp5mNKMjkc02lvIEnlf9-rGwXZc.roa
Signing time: Tue 22 Sep 2026 10:37:08 +0000
ROA not before: Tue 22 Sep 2026 10:37:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a0e:a280::/29 maxlen: 29
2a0e:a3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d9:03:32:27:3c:48:6a:ec:49:7c:83:a4:e3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce9e6634a32391cd3696f2049e57fdfab1b05d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:07:33:ef:9e:0e:4d:2e:c7:dc:4d:17:1a:
f7:9d:a5:54:c8:0a:b6:81:f0:d5:f7:54:0e:86:74:
0b:3b:6f:1a:1c:fd:34:9b:0b:95:e4:98:61:70:c5:
96:25:d1:99:e2:ef:48:a9:5f:01:61:a6:93:a9:b5:
cc:e8:cf:fd:6d:92:f4:a3:02:b5:ea:a8:d2:80:8a:
7e:7d:97:5e:17:47:7c:1c:83:90:f9:42:ad:36:49:
d4:e5:4c:37:8a:fb:55:aa:b3:08:a6:66:52:5c:12:
55:40:71:e9:74:e6:fb:b9:58:6f:b1:18:7b:1c:79:
87:b2:0b:06:b4:91:39:26:f4:85:60:5b:98:1d:ef:
e3:bd:2d:c0:6d:f0:6d:42:3a:b0:cc:84:8c:86:aa:
48:c3:7a:6a:89:2a:a8:c3:0d:59:ec:91:61:df:4e:
c8:8b:7b:b0:a3:87:50:7c:51:a3:b2:7b:4b:58:4f:
d8:41:99:12:62:d8:fd:18:15:d8:14:56:5d:c4:44:
24:a0:1b:d8:e5:ef:4b:63:a2:cf:4e:01:1c:eb:d9:
4b:af:6d:d8:76:9a:32:26:fd:da:2b:90:9d:e0:92:
71:0c:fc:9f:c3:62:e2:49:ec:09:f3:f6:c1:3e:09:
f2:75:43:28:c7:18:c3:3e:72:18:22:d5:36:54:a3:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9E:66:34:A3:23:91:CD:36:96:F2:04:9E:57:FD:FA:B1:B0:5D:97
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zp5mNKMjkc02lvIEnlf9-rGwXZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a280::/29
2a0e:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
a7:b3:77:f5:21:77:7f:48:03:2b:07:72:37:fc:f2:73:ee:d8:
1e:2d:dd:ea:8b:31:91:04:24:87:d2:61:f8:54:17:da:aa:e6:
30:1c:92:29:cd:7e:8e:46:44:a3:bd:33:9b:39:50:82:f9:0c:
4c:70:a0:5e:63:af:fe:ba:52:a6:ce:69:f5:80:8f:bc:35:ce:
b7:20:60:c4:e6:4b:ed:e2:76:07:43:af:44:1d:67:11:ca:47:
eb:9b:f5:54:c9:e0:48:9b:bc:84:ae:e4:cd:30:4e:c0:06:f3:
4b:79:b4:d8:31:09:04:14:19:b9:f8:81:67:9a:a6:39:3b:ea:
c0:97:b0:e5:aa:c7:20:5f:2b:6b:8c:ba:df:d5:a9:b9:80:07:
50:b0:58:c5:51:04:ef:50:09:c0:32:35:e3:a0:42:40:e7:04:
0a:ff:b6:e9:da:66:23:ee:7e:dd:5b:2e:cb:b0:85:06:28:22:
4b:bd:2a:f6:62:6e:93:7a:f2:63:5a:ac:d2:9c:f0:a4:56:ce:
9a:cc:be:81:bd:5e:98:c6:f1:10:c1:f7:18:f9:2d:5b:07:76:
fd:c9:54:70:54:ad:73:40:7f:af:0a:2f:0e:47:6e:8f:7e:1b:
35:78:7b:96:0e:c7:4f:ae:80:0b:5f:b7:2a:04:0a:e3:74:19:
80:2e:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:20:22 2026 by rpki-client