Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zsAk4N1qIOGS1ig406ULeIAlpt8.roa
File: zsAk4N1qIOGS1ig406ULeIAlpt8.roa (raw, json)
Hash identifier: 2EYgBB0Le+EIPY8F4AMl6PbsdFDmd+lsBaHuvctZjsM=
Subject key identifier: CE:C0:24:E0:DD:6A:20:E1:92:D6:28:38:D3:A5:0B:78:80:25:A6:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A15F3223A37AA33EFD2FA3A309592C9337
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zsAk4N1qIOGS1ig406ULeIAlpt8.roa
Signing time: Wed 21 Oct 2026 16:01:23 +0000
ROA not before: Wed 21 Oct 2026 16:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23340
IP address blocks: 2a0f:1480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:32:23:a3:7a:a3:3e:fd:2f:a3:a3:09:59:2c:93:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 21 16:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cec024e0dd6a20e192d62838d3a50b788025a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:94:45:aa:9f:20:a2:13:57:68:ac:9b:1a:
d1:66:c3:93:c1:60:29:d5:40:22:b2:8d:6d:5c:37:
2f:cf:3d:f8:aa:ac:f7:82:78:4f:46:c1:be:50:17:
04:c5:98:a5:e4:8c:ac:17:1b:ce:f8:2e:b5:e7:ae:
c0:20:52:1d:f9:26:92:f8:88:37:23:9a:5e:6b:d1:
96:75:e5:7f:52:0e:a4:52:db:29:e2:15:e5:7f:c0:
04:c1:21:92:2f:39:6f:95:b7:4b:eb:c5:0b:06:76:
bb:b1:4e:39:50:ad:f3:db:d8:26:0d:6c:6e:ce:03:
5d:43:cb:bc:4c:da:d1:67:a1:00:2a:78:32:56:e7:
84:ce:85:6a:46:68:7a:07:41:09:d3:f3:5b:d9:0e:
fe:96:90:bf:35:b0:6b:b3:fe:74:c1:cf:08:36:a3:
9a:a0:7a:bf:8a:c3:c6:7f:77:2f:83:a5:92:79:1b:
05:24:74:20:d9:45:d2:9b:f2:a9:e5:69:b4:9b:00:
61:7b:8d:8d:ee:70:8e:4f:1a:0b:7a:72:f4:3f:86:
5d:de:8e:e1:81:99:08:c4:65:5b:41:f5:83:5f:6c:
90:23:0d:3c:83:cf:fe:96:43:e9:85:fb:e9:8b:fa:
e3:da:ad:d6:c4:65:be:20:ab:af:34:a7:bb:02:99:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:24:E0:DD:6A:20:E1:92:D6:28:38:D3:A5:0B:78:80:25:A6:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zsAk4N1qIOGS1ig406ULeIAlpt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1480::/29
Signature Algorithm: sha256WithRSAEncryption
9c:a2:18:01:34:b5:d0:c1:72:8f:9f:7b:01:c0:ae:bc:56:7b:
37:3d:33:2e:ac:2d:4d:75:7c:9f:05:c7:dc:6e:e4:8d:5d:2a:
ae:91:26:13:cc:3e:c3:bc:2f:1f:37:e8:ba:2d:ef:fc:4d:b3:
2f:25:01:19:62:91:88:4e:62:ee:78:40:8c:bf:86:12:1e:3d:
d2:22:3f:83:c7:2e:ae:a2:9c:35:dd:91:4f:b3:77:c6:cc:94:
e8:fe:e4:f3:2f:23:8b:c5:bd:21:21:c3:8a:ad:57:bd:82:c9:
86:dd:e4:d7:b4:fa:e6:1b:44:e8:bf:00:30:dc:c8:ac:df:41:
2b:1a:90:da:c0:a8:71:5d:16:7d:0a:45:ff:49:04:5a:5f:85:
80:e2:6c:86:97:a6:d4:4f:c6:8f:7d:81:4d:1b:5f:e6:d3:8c:
3a:fd:57:01:fd:09:3c:3d:de:1a:e9:a5:cd:3a:10:b0:4b:e2:
44:48:23:c9:c0:69:1f:1a:e8:d4:50:19:8c:89:fa:9a:db:cd:
5e:e4:3f:a1:19:7c:3d:50:50:25:69:56:01:a7:d8:df:fa:12:
2b:64:95:09:f0:3a:f2:5f:75:de:79:c6:82:40:40:d8:4d:93:
bc:46:a1:cf:58:54:0b:d0:34:1e:3a:8f:df:36:75:4e:24:14:
13:5e:4d:49
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaFfMiOjeqM+/S+jowlZLJM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYxMDIxMTYwMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWMwMjRlMGRkNmEyMGUxOTJkNjI4MzhkM2E1MGI3ODgwMjVhNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnaURaqfIKITV2ismxrRZsOTwWAp
1UAiso1tXDcvzz34qqz3gnhPRsG+UBcExZil5IysFxvO+C61567AIFId+SaS+Ig3
I5pea9GWdeV/Ug6kUtsp4hXlf8AEwSGSLzlvlbdL68ULBna7sU45UK3z29gmDWxu
zgNdQ8u8TNrRZ6EAKngyVueEzoVqRmh6B0EJ0/Nb2Q7+lpC/NbBrs/50wc8INqOa
oHq/isPGf3cvg6WSeRsFJHQg2UXSm/Kp5Wm0mwBhe42N7nCOTxoLenL0P4Zd3o7h
gZkIxGVbQfWDX2yQIw08g8/+lkPphfvpi/rj2q3WxGW+IKuvNKe7AplopQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM7AJODdaiDhktYoONOlC3iAJabfMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvenNBazROMXFJT0dTMWlnNDA2VUxlSUFscHQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg8UgDAN
BgkqhkiG9w0BAQsFAAOCAQEAnKIYATS10MFyj597AcCuvFZ7Nz0zLqwtTXV8nwXH
3G7kjV0qrpEmE8w+w7wvHzfoui3v/E2zLyUBGWKRiE5i7nhAjL+GEh490iI/g8cu
rqKcNd2RT7N3xsyU6P7k8y8ji8W9ISHDiq1XvYLJht3k17T65htE6L8AMNzIrN9B
KxqQ2sCocV0WfQpF/0kEWl+FgOJshpem1E/Gj32BTRtf5tOMOv1XAf0JPD3eGuml
zToQsEviREgjycBpHxro1FAZjIn6mtvNXuQ/oRl8PVBQJWlWAafY3/oSK2SVCfA6
8l913nnGgkBA2E2TvEahz1hUC9A0HjqP3zZ1TiQUE15NSQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:52 2026 by rpki-client