Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/zSxXam422uceBcDgVTQwKML7HzQ.roa
File: zSxXam422uceBcDgVTQwKML7HzQ.roa (raw, json)
Hash identifier: GpllbBF29LkUDq+WEWLkHp5EqGZXeUURJtYTQzOT19Y=
Subject key identifier: CD:2C:57:6A:6E:36:DA:E7:1E:05:C0:E0:55:34:30:28:C2:FB:1F:34
Certificate issuer: /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial: 019F2368D29D6E9D6F7A9F173BDD92F29789
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/zSxXam422uceBcDgVTQwKML7HzQ.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20712
IP address blocks: 2001:678:c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d2:9d:6e:9d:6f:7a:9f:17:3b:dd:92:f2:97:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd2c576a6e36dae71e05c0e055343028c2fb1f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:08:64:48:6c:8f:54:24:65:74:53:4d:4b:
32:20:3b:bd:e9:2c:5c:0d:52:4c:f4:e8:b8:dc:9d:
e3:39:30:60:4c:d7:71:14:6c:25:a0:87:2d:d7:35:
56:9c:23:64:ee:cb:41:69:cd:df:23:44:e8:16:c3:
18:d1:82:58:4b:80:ec:01:29:85:65:5b:78:11:d2:
9a:78:d3:2a:17:fb:a1:2e:30:85:09:37:dc:a3:e5:
45:48:83:7a:c6:96:b2:05:bb:a5:e2:5a:6d:1c:02:
c4:45:d4:e7:f9:14:21:f6:3d:db:67:f4:dd:d6:7e:
53:b7:bb:ab:37:4d:fa:b3:6b:83:9b:17:75:c0:03:
9f:8c:a6:21:19:d1:98:52:69:04:20:8d:8d:ed:a2:
77:62:48:5d:1b:99:fd:e4:27:58:ce:98:d9:b0:70:
6f:6f:53:0e:de:25:d5:f9:95:f6:7f:70:3c:30:58:
55:ed:ba:e0:cc:b4:31:7d:1a:16:ac:25:26:a7:8b:
86:b1:8a:e3:eb:1a:78:68:d6:00:67:79:0d:d3:6d:
b5:f4:60:56:73:85:3c:a7:32:39:64:3e:ac:ef:c3:
bd:dd:e8:47:ae:3e:66:9d:53:21:84:58:52:6f:44:
bb:a3:98:fb:b3:fb:0b:6c:a2:a0:82:99:02:a4:6d:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:57:6A:6E:36:DA:E7:1E:05:C0:E0:55:34:30:28:C2:FB:1F:34
X509v3 Authority Key Identifier:
keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/zSxXam422uceBcDgVTQwKML7HzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c40::/48
Signature Algorithm: sha256WithRSAEncryption
98:f1:1a:af:b0:cd:e7:94:c3:9d:a5:c9:86:e5:8a:ab:84:16:
68:46:8a:28:d7:b6:70:41:73:9a:7c:b3:4f:69:03:33:69:3a:
6e:5a:d9:3f:5b:7f:b7:e6:c4:30:ad:cd:34:f8:64:82:b5:c3:
ce:4e:21:9c:db:e1:9a:b4:d3:91:4e:5f:04:80:85:8e:98:4c:
6e:13:47:ce:f8:af:fb:f7:2e:84:0f:58:0e:2a:fe:f5:ad:8d:
e7:b6:14:de:80:84:8b:37:d8:39:a2:82:79:07:52:98:d2:a9:
bc:4e:40:ea:60:5f:de:1f:36:6e:b4:e6:98:2f:41:84:b0:f7:
76:12:0a:42:40:c9:a4:2c:6d:23:3a:17:33:0c:35:8f:88:19:
ee:28:a5:bc:d3:4b:f5:20:d7:cf:1b:5a:46:d7:6e:df:3b:ea:
56:76:2f:3b:f4:8c:26:c8:dd:20:59:d4:21:f9:65:b9:72:c5:
bc:1c:e1:9f:03:e2:10:06:29:5d:38:b5:e3:5c:d1:3e:5f:eb:
df:a0:e1:1c:78:bb:ab:89:5d:a4:12:0e:1e:b3:c5:48:52:7f:
d5:47:ea:0a:f4:38:d7:ac:67:7c:ff:53:41:99:03:d9:55:f0:
c5:89:79:7b:a6:8b:d0:8f:6e:29:57:03:50:d6:d1:9e:80:a7:
83:74:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:19:01 2026 by rpki-client