Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zb-qMvAmfR2OpDGe0cZLSIVvIWo.roa
File: zb-qMvAmfR2OpDGe0cZLSIVvIWo.roa (raw, json)
Hash identifier: ++x6CXAooFX788zJH4AkhQssSEYco7TieZFMXOxyKgI=
Subject key identifier: CD:BF:AA:32:F0:26:7D:1D:8E:A4:31:9E:D1:C6:4B:48:85:6F:21:6A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1B743B4DBFEC3B55A58043D15F070B319
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zb-qMvAmfR2OpDGe0cZLSIVvIWo.roa
Signing time: Sat 07 Nov 2026 18:27:09 +0000
ROA not before: Sat 07 Nov 2026 18:27:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218198
IP address blocks: 48.103.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b7:43:b4:db:fe:c3:b5:5a:58:04:3d:15:f0:70:b3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 7 18:27:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdbfaa32f0267d1d8ea4319ed1c64b48856f216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:18:7a:a9:c3:c9:c5:8f:2e:e0:5a:58:13:
bc:9d:33:d8:ba:99:b9:a7:cb:46:d0:1d:21:83:d7:
28:77:71:61:c2:c0:c5:24:11:9f:42:1d:fe:7d:66:
c3:7c:b5:7e:6b:99:49:bf:86:23:ad:98:fe:ab:4d:
04:2a:1f:58:62:1a:cb:cf:a3:35:e3:45:96:b8:c1:
8f:07:56:41:5b:d8:58:75:4b:04:82:06:b7:ca:34:
f9:af:be:55:46:46:a3:a0:b3:76:e5:6f:f9:26:62:
22:0b:c9:6f:ce:d3:6e:a1:25:e9:df:15:af:6f:ef:
7a:b4:80:70:f2:e8:59:3e:d7:2d:b4:41:1c:8d:3d:
50:03:e7:96:ff:09:b4:a4:f9:c0:89:a1:95:b9:82:
b3:ab:09:6a:c0:f2:01:b0:79:b2:11:f2:73:90:90:
52:9f:44:4e:3d:de:27:64:37:70:9e:f0:91:ac:7e:
a8:65:f3:33:4b:7f:8d:4a:12:aa:a3:d3:03:12:2d:
93:03:e8:1e:7d:40:9f:21:38:f3:ec:4c:9a:0c:36:
36:57:07:7b:77:e0:ce:11:8d:d6:9f:fe:4d:9f:9d:
f6:2d:85:20:df:14:f4:a1:f0:b6:bf:5f:02:8e:5b:
5d:b5:53:4d:db:49:d1:a8:14:64:67:e0:7c:d0:de:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:AA:32:F0:26:7D:1D:8E:A4:31:9E:D1:C6:4B:48:85:6F:21:6A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zb-qMvAmfR2OpDGe0cZLSIVvIWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
48.103.140.0/24
Signature Algorithm: sha256WithRSAEncryption
74:30:b9:1f:f0:47:09:53:e4:1c:4d:af:1a:a7:b1:02:9a:b4:
79:22:81:b1:70:8a:c0:33:e6:a6:14:f4:89:0a:df:cb:1d:33:
fc:31:70:ef:77:ba:af:38:e7:13:be:40:a7:0e:41:17:4b:7b:
92:9e:44:8f:4c:92:b8:b2:59:71:64:54:ef:70:c2:2c:3a:04:
40:da:87:02:01:78:31:ec:c3:09:d4:8e:53:07:8e:4c:c3:32:
99:7a:5f:75:11:7d:ff:82:55:fc:4c:da:1c:d6:f5:c4:4d:f1:
90:e9:4e:f5:18:1a:60:81:7b:ef:bf:d6:22:c1:c5:b1:92:32:
cf:b6:07:4d:96:0a:36:c5:1c:7f:a9:10:8e:96:73:dc:86:53:
ea:54:d2:b2:3e:c0:f1:87:a7:19:7b:af:6e:10:f4:54:6f:f2:
77:ae:40:53:b0:f2:f0:f1:c1:31:10:b2:dc:8c:1f:80:5b:94:
d1:f6:17:dd:a8:fd:19:1c:d0:b2:dd:3d:46:6c:b9:ac:61:8c:
4d:4e:f2:94:69:1f:a3:1f:ed:95:02:8e:b5:eb:2f:77:38:85:
b0:0a:c8:7d:89:f1:f2:73:fe:7d:cd:e1:ec:a0:6f:83:e8:6d:
08:ed:94:ae:58:c9:0b:4d:a5:6d:ab:c4:b3:1f:93:0a:b9:d0:
cc:27:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:48:02 2026 by rpki-client