Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/zgu285HIUDX_FfAU2g0C9dCoPqs.roa
File: zgu285HIUDX_FfAU2g0C9dCoPqs.roa (raw, json)
Hash identifier: BUCgc1r0kJzlH4EQ3Njx05+dZ35V9ufoTD2Lecacvbw=
Subject key identifier: CE:0B:B6:F3:91:C8:50:35:FF:15:F0:14:DA:0D:02:F5:D0:A8:3E:AB
Certificate issuer: /CN=9396435e56fec7abd028bdc3c25868d2fb8e71bd
Certificate serial: 01A1826EF207151A4E029CA4AF2EE7ED45C0
Authority key identifier: 93:96:43:5E:56:FE:C7:AB:D0:28:BD:C3:C2:58:68:D2:FB:8E:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/zgu285HIUDX_FfAU2g0C9dCoPqs.roa
Signing time: Wed 28 Oct 2026 12:14:31 +0000
ROA not before: Wed 28 Oct 2026 12:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 192.129.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:6e:f2:07:15:1a:4e:02:9c:a4:af:2e:e7:ed:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9396435e56fec7abd028bdc3c25868d2fb8e71bd
Validity
Not Before: Oct 28 12:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce0bb6f391c85035ff15f014da0d02f5d0a83eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:17:39:be:a1:d1:d3:6e:93:cc:2f:00:de:
38:19:f9:e6:48:0e:c3:d6:ce:ef:c5:21:a3:7e:8b:
45:16:e7:7a:0d:da:e4:a5:75:62:93:df:ac:91:47:
93:42:d4:84:6e:cf:cd:b5:28:81:9e:27:93:8a:6c:
c8:e6:01:e2:4e:5e:b1:2c:49:ad:9c:9d:8d:55:36:
b3:49:93:7f:5e:5b:a4:6f:67:4a:89:42:86:66:f8:
01:67:7a:a4:a1:37:9d:0e:48:a5:d6:f7:08:85:3b:
1c:db:75:af:f2:f6:7d:c0:fd:d6:f1:17:da:33:de:
29:b3:9b:34:3a:53:7e:99:92:ed:fc:85:b9:9a:4e:
43:e7:d7:ad:ad:20:e8:cb:8e:86:46:65:ab:45:db:
02:02:07:1e:62:f4:8f:65:34:09:9a:66:a8:de:e1:
76:90:b1:e5:ac:4f:0c:54:76:91:1f:4e:ca:25:73:
ef:ad:1e:ae:6d:31:63:94:17:d0:48:d0:c0:ef:db:
4c:47:a7:d3:6f:f5:a2:b8:57:05:1e:02:6a:ff:4a:
f1:38:da:69:25:d4:bd:69:73:5f:04:67:47:86:8a:
92:3b:85:e7:b2:c1:27:23:8f:4a:6c:a6:1c:7f:4f:
be:48:e5:f3:57:97:4a:58:cb:b0:37:fd:bd:ec:eb:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:B6:F3:91:C8:50:35:FF:15:F0:14:DA:0D:02:F5:D0:A8:3E:AB
X509v3 Authority Key Identifier:
keyid:93:96:43:5E:56:FE:C7:AB:D0:28:BD:C3:C2:58:68:D2:FB:8E:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/zgu285HIUDX_FfAU2g0C9dCoPqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.129.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:92:cf:c9:a8:d2:85:37:c0:0a:47:b9:a0:15:9e:11:1d:2e:
97:ea:98:7e:c6:d3:2f:36:2e:0f:e0:d5:57:61:e8:ff:1b:47:
69:c1:eb:3f:dc:d8:de:2a:6a:4c:3c:07:54:74:80:69:89:85:
f8:80:45:3d:b6:9e:c7:67:5f:c4:b4:a0:85:41:4d:2b:d7:2d:
9f:a6:c9:3a:a0:26:cb:45:0c:63:71:e3:7b:98:3e:ca:28:75:
1d:2d:94:3b:43:79:64:67:c1:4f:fe:25:c0:06:fb:c2:15:64:
b1:49:3c:02:04:af:2e:92:15:f6:ca:32:21:71:ae:1d:35:7a:
e8:3b:7f:41:c5:4f:5b:8c:02:a7:70:55:34:1b:a3:42:a3:95:
1e:0e:b6:93:8f:0d:32:12:90:46:f5:64:ff:26:ad:71:f6:30:
e9:44:2a:c1:32:72:7b:33:b7:8e:bd:d5:86:12:19:eb:7b:b7:
9e:a5:ca:21:b3:8a:e2:93:21:53:6c:15:77:1d:55:1b:5c:b9:
af:82:21:ca:cf:70:74:1d:d6:d0:6b:9c:0c:82:c6:29:56:4c:
cc:ee:22:87:95:09:40:d7:7f:a8:0a:22:06:a5:b4:53:f8:eb:
c4:f9:61:9d:16:d4:d1:58:90:e4:fd:ac:be:6b:7d:19:10:61:
cc:cd:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:58 2026 by rpki-client