Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zdie2Dc0ACZucI2yC3qVbImt7L8.roa
File: zdie2Dc0ACZucI2yC3qVbImt7L8.roa (raw, json)
Hash identifier: Mj0/Y0JYiywSkk+kofHalP9ulPdb4vQsJQBd8v65Nko=
Subject key identifier: CD:D8:9E:D8:37:34:00:26:6E:70:8D:B2:0B:7A:95:6C:89:AD:EC:BF
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A1A2D240BA3C41C418EC02B649A41E3F3C
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zdie2Dc0ACZucI2yC3qVbImt7L8.roa
Signing time: Tue 03 Nov 2026 19:10:50 +0000
ROA not before: Tue 03 Nov 2026 19:10:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 2a0f:63c0::/29 maxlen: 29
2a13:bd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:d2:40:ba:3c:41:c4:18:ec:02:b6:49:a4:1e:3f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Nov 3 19:10:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdd89ed8373400266e708db20b7a956c89adecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:83:6e:ee:2b:5d:fd:ef:df:57:63:11:24:
cc:94:4d:97:cb:58:cc:6a:ef:4a:5a:7f:76:1f:bb:
8f:fe:d4:d6:e0:ea:31:6b:d4:32:bb:76:81:52:21:
c9:25:23:23:69:c1:7b:b2:0c:1e:70:03:8b:a8:f1:
65:61:b9:2a:b3:45:05:ac:ee:e6:a4:bf:b4:26:6d:
aa:ce:7c:8d:e5:a5:dd:79:32:09:01:78:70:41:93:
d7:15:88:f1:35:b6:c0:0c:5f:45:c4:6b:34:bc:46:
39:93:16:70:5d:a8:7b:66:54:2f:d6:24:3e:e5:65:
c0:9e:b0:34:76:fd:f1:44:62:3c:57:da:66:c8:51:
42:f3:e6:66:2c:cc:71:22:f9:41:8c:23:4f:d9:88:
3c:64:7b:8f:19:e6:99:28:87:bf:08:d1:0d:c7:65:
9f:9a:90:6f:17:91:c1:b7:47:77:61:21:95:59:0b:
d7:ed:a5:30:01:4d:c1:4f:3d:14:9a:4d:9e:a8:52:
5d:05:19:6a:f4:7e:5c:21:6f:10:83:92:85:6e:3b:
c8:ac:ed:57:1d:4f:7f:0d:65:e7:6f:c1:3f:44:f2:
ed:3d:89:e7:80:c7:c7:b4:cb:db:86:5f:cd:1b:80:
d1:c3:c6:fc:12:3f:5c:ab:b4:2f:29:a5:1b:cf:f5:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:9E:D8:37:34:00:26:6E:70:8D:B2:0B:7A:95:6C:89:AD:EC:BF
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zdie2Dc0ACZucI2yC3qVbImt7L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c0::/29
2a13:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
9e:f6:37:e6:3b:82:38:93:f8:e2:b2:a5:28:69:6e:99:3e:26:
41:06:cb:f8:0d:bb:1b:60:7b:ea:b2:f1:a9:f5:49:0c:03:3a:
97:13:36:7e:37:9c:2c:3e:c4:28:b8:26:17:22:20:60:dc:2e:
12:73:c9:ef:3f:ab:5c:66:f7:cb:49:f7:24:90:e2:50:95:ab:
f1:c5:63:db:4d:8a:ce:91:cf:37:b8:52:23:f0:6b:53:fe:de:
73:25:0e:c8:31:fc:7d:3c:62:0f:b3:88:83:3a:42:34:55:44:
e4:aa:89:95:ad:ba:9d:00:ad:1f:50:c9:24:10:cb:d5:34:02:
88:de:d3:87:9f:47:ce:48:69:0c:82:08:c0:c3:b9:83:30:c4:
bc:3c:05:20:a9:8d:ea:64:bc:61:7f:47:d8:54:3b:9f:b6:63:
ac:85:58:90:fb:37:fe:43:8e:9d:44:89:7e:bd:ec:b4:6d:1c:
38:d1:28:b8:e9:d0:e5:fa:d7:41:5f:83:4e:59:b5:32:52:47:
a7:74:2d:d6:ae:81:cd:e2:78:60:c0:b5:bd:9d:34:dc:40:d2:
9c:d7:a6:d7:e2:8e:74:a6:75:52:a4:4d:12:6c:c5:e9:b4:e6:
cf:c6:5d:c3:e2:84:f0:62:46:cf:98:bc:99:4d:3d:d1:fc:79:
22:39:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:57 2026 by rpki-client