Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ZJmKvRvuviaKeMNeQ3MbKzqnXsA.roa
File: ZJmKvRvuviaKeMNeQ3MbKzqnXsA.roa (raw, json)
Hash identifier: gmbgITnQL+vTQZ+mJr1WpO6398+83/qTBTxnrnkDe7k=
Subject key identifier: 64:99:8A:BD:1B:EE:BE:26:8A:78:C3:5E:43:73:1B:2B:3A:A7:5E:C0
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A09C5D2EA0ADDB7B4D388035A74542533A
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ZJmKvRvuviaKeMNeQ3MbKzqnXsA.roa
Signing time: Sun 13 Sep 2026 20:02:27 +0000
ROA not before: Sun 13 Sep 2026 20:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152320
IP address blocks: 2a10:fa80:14::/48 maxlen: 48
2a10:fa80:15::/48 maxlen: 48
2a10:fa81:1d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:5d:2e:a0:ad:db:7b:4d:38:80:35:a7:45:42:53:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 13 20:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64998abd1beebe268a78c35e43731b2b3aa75ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:96:22:9a:0b:3f:6a:30:ad:0c:d0:8b:d0:
06:d6:d9:77:bd:77:f0:d1:cf:78:15:59:5d:85:d2:
a9:da:c1:eb:d7:f0:5b:c0:c0:40:70:b8:dc:aa:1f:
2d:73:e3:4d:46:ff:fd:a1:48:5b:0c:33:25:f9:21:
da:b5:0b:71:8e:5f:79:60:e6:59:2c:e8:04:92:23:
a5:f2:06:9c:ea:cd:06:bf:6f:4d:29:6f:fb:ee:7a:
3a:66:42:6c:60:43:9c:07:4f:72:f2:2b:51:14:6e:
86:05:d1:3f:a3:3c:e0:6d:34:79:9f:b9:05:5a:b0:
bc:26:11:17:f4:a4:df:23:5f:38:e6:a7:91:0b:16:
45:25:12:e9:0c:ca:92:40:5f:8b:3a:9e:05:d8:3b:
6c:41:7d:91:2a:4c:fb:cd:ff:17:45:b4:f9:69:4c:
96:ea:47:1d:06:04:a8:40:91:d6:ce:13:44:ac:7e:
77:d6:07:19:a7:57:a3:8a:b7:7c:df:d9:de:f5:91:
b7:7c:79:2b:07:1d:a5:57:56:00:94:91:49:eb:55:
3a:8e:dd:eb:c6:be:19:05:28:e3:9e:07:80:f2:72:
2f:68:6e:57:aa:a8:0f:01:35:37:dc:97:66:71:af:
9c:bc:91:f4:ad:a9:49:ee:4e:34:7c:89:40:fd:3d:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:8A:BD:1B:EE:BE:26:8A:78:C3:5E:43:73:1B:2B:3A:A7:5E:C0
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ZJmKvRvuviaKeMNeQ3MbKzqnXsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:14::/47
2a10:fa81:1d00::/40
Signature Algorithm: sha256WithRSAEncryption
78:3b:fc:e3:31:24:fb:fb:60:9d:92:09:21:4b:94:39:47:5e:
e0:c7:01:09:2e:35:ef:ed:d1:1a:5c:01:6d:05:d9:79:16:78:
b5:e0:f3:2c:92:11:4c:11:95:ae:ae:0e:6e:ee:8f:af:d8:ef:
c8:c6:94:d0:85:4d:49:66:cb:9a:d3:52:e3:4d:87:fb:18:2b:
96:35:3a:97:dc:54:f5:23:aa:b6:45:5b:57:0f:e3:28:a3:b5:
a3:48:81:3d:e1:81:d5:3a:b2:16:27:bf:f9:16:ca:49:1c:19:
25:3c:d5:85:f2:a2:38:71:b0:b6:fd:5c:51:24:ea:87:3a:d1:
93:ee:17:81:ed:8a:ed:36:dd:c0:d2:25:d0:f9:ae:2c:4f:9c:
38:22:3d:f7:6c:af:87:05:22:d3:3b:cd:ca:24:80:a9:58:18:
08:a8:8b:5b:08:00:05:00:a7:eb:ca:4c:24:6d:4e:71:9a:47:
2b:79:87:82:7d:ec:de:d9:82:ec:77:b6:db:71:d7:0f:d3:4b:
f9:9f:ee:1e:1d:ee:dc:74:f8:89:a9:13:ac:f7:a9:76:b2:39:
6c:58:5f:74:92:40:66:e1:14:3b:6f:41:75:25:a7:e1:fc:20:
ed:88:94:b7:e7:2c:fa:84:f1:04:7c:36:e4:8d:e4:67:02:a8:
7e:f6:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:50:00 2026 by rpki-client