Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZfO9let0AU6CZsNqcMjMVbb6PDE.roa
File: ZfO9let0AU6CZsNqcMjMVbb6PDE.roa (raw, json)
Hash identifier: r4qBv7A49kLsyisKdDjJ4g5tT7ZregpG7FOsMxM5JEA=
Subject key identifier: 65:F3:BD:95:EB:74:01:4E:82:66:C3:6A:70:C8:CC:55:B6:FA:3C:31
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A1D496C796F2E9B9585F808ECD5BAF6443
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZfO9let0AU6CZsNqcMjMVbb6PDE.roa
Signing time: Fri 13 Nov 2026 11:06:53 +0000
ROA not before: Fri 13 Nov 2026 11:06:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f040::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a0e:d300::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:96:c7:96:f2:e9:b9:58:5f:80:8e:cd:5b:af:64:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Nov 13 11:06:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65f3bd95eb74014e8266c36a70c8cc55b6fa3c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:ca:16:c8:3e:8d:20:c8:a9:b7:86:de:55:
d1:81:b4:17:f7:40:cd:48:b1:29:6c:f9:15:71:08:
af:d3:80:15:06:2c:74:c9:02:5e:d0:1c:06:00:4e:
d7:37:6b:0c:f6:d9:10:63:43:c6:63:8b:61:8c:75:
31:93:f7:54:9e:55:79:ab:c0:1d:31:1d:93:39:3c:
93:80:45:30:99:da:7a:d3:de:04:f8:00:92:e4:ff:
32:e4:c6:ac:30:72:25:1c:7a:48:a6:e6:13:8f:7f:
e7:93:cd:b9:70:d3:65:59:aa:dc:02:a8:0c:30:63:
ce:7b:4a:41:da:e1:1b:1b:be:67:a5:4f:50:27:a1:
14:88:96:db:4b:11:65:66:a3:61:87:d0:42:38:4c:
4f:13:df:13:6e:d4:ba:66:fc:a4:8a:99:d0:8a:51:
c5:3f:98:74:80:2a:c5:dd:8d:b2:f1:0c:ef:d9:0f:
cf:bd:88:64:6d:9c:b0:42:91:6c:84:e3:bb:b2:f3:
ed:d0:41:1b:4b:38:24:be:f9:06:2e:14:36:15:d3:
ea:d3:13:d7:bc:c4:16:f2:24:22:5b:4f:b6:28:8e:
19:63:ff:05:e8:6d:95:4f:7a:7a:83:ff:ce:db:50:
f3:b5:07:7f:9a:96:d9:83:d8:b6:4c:7a:2d:b6:1e:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:BD:95:EB:74:01:4E:82:66:C3:6A:70:C8:CC:55:B6:FA:3C:31
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZfO9let0AU6CZsNqcMjMVbb6PDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
2a0b:b480::/29
2a0e:d300::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:be40::/29
2a13:d0c0::/29
2a13:dd40::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
75:5a:c8:d6:b0:5a:99:34:dd:bd:d9:cf:33:2e:eb:1d:99:ac:
80:d4:6e:b4:5e:9c:1d:3d:0d:03:22:0f:5d:93:0b:8e:7d:d1:
45:29:35:12:76:7a:55:e3:b1:e4:40:9d:a9:9b:cd:c5:d3:48:
45:37:37:c3:0e:36:c4:91:37:77:21:4e:f1:bb:0c:f5:f3:e1:
9f:db:81:29:33:d6:76:ee:6b:90:f5:58:46:0a:8e:6c:ed:7b:
1c:7f:d6:8b:d9:e5:94:4d:74:4e:53:0b:8b:66:da:86:c0:04:
5f:87:d9:6a:40:63:dc:dc:4b:d3:e4:40:f5:b7:2a:c1:f9:5f:
28:2b:12:02:3f:31:e5:74:e3:ac:d9:80:a4:20:28:e6:27:fd:
75:28:14:78:02:68:fa:fc:d9:3d:8f:c3:b6:27:95:8c:28:19:
91:6b:e0:4b:2a:09:2c:a9:71:7d:3e:61:a1:a4:99:cc:e8:43:
a7:be:ca:af:1d:04:7e:3e:b1:05:37:c2:3d:1e:c6:11:d5:13:
f1:41:26:5f:9e:42:6a:c8:21:0f:3f:c9:d4:2b:a9:2f:0a:84:
8b:b4:1c:fd:1b:5b:4f:bb:22:34:d9:60:b0:47:c9:36:b7:5c:
bf:97:8a:e3:7e:e8:b0:e4:51:aa:0f:3c:00:9f:6b:0f:a9:43:
f7:c3:5f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:11 2026 by rpki-client