Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/ZoXrRfWrrJXLAioBfIjygh-8ZQA.roa
File: ZoXrRfWrrJXLAioBfIjygh-8ZQA.roa (raw, json)
Hash identifier: G56zwdeM+Qud7Xg+NTn3viHBA8F6OeDVBMXlq493+2c=
Subject key identifier: 66:85:EB:45:F5:AB:AC:95:CB:02:2A:01:7C:88:F2:82:1F:BC:65:00
Certificate issuer: /CN=6f440c018544050e5ced0252080f7e8348b00a32
Certificate serial: 019F60AC2A81E5586E83D193AB7676259767
Authority key identifier: 6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/ZoXrRfWrrJXLAioBfIjygh-8ZQA.roa
Signing time: Tue 14 Jul 2026 12:48:43 +0000
ROA not before: Tue 14 Jul 2026 12:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209866
IP address blocks: 2a09:dd80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:ac:2a:81:e5:58:6e:83:d1:93:ab:76:76:25:97:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f440c018544050e5ced0252080f7e8348b00a32
Validity
Not Before: Jul 14 12:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6685eb45f5abac95cb022a017c88f2821fbc6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:c6:4d:ae:72:03:1d:20:e1:6e:24:62:7a:
f9:0e:12:cb:2c:aa:6e:6f:6b:1b:1b:c6:3e:ed:bf:
bb:be:d6:a0:e2:5c:85:f3:00:9a:10:4b:1b:c4:d1:
e2:d7:ae:4e:26:91:66:ac:0e:8d:52:47:e8:d2:f5:
9a:6a:71:28:b6:d4:9d:e3:cd:d8:c3:70:0b:64:8b:
3d:95:78:90:d6:69:ef:24:65:00:1a:b8:e2:fd:6a:
ac:35:1a:8e:27:53:32:e0:4c:95:4c:ea:f1:5d:ac:
d9:e5:ea:f0:bb:39:6c:75:ee:2b:a2:c7:e1:38:66:
fd:d5:4d:8f:72:95:49:69:a9:e7:d2:d8:79:35:cb:
22:18:5f:10:e6:bc:4b:ed:a3:83:a3:79:3c:2b:14:
78:99:df:32:d4:ef:c4:87:d9:e8:34:4a:51:f4:ce:
c5:ef:1f:cd:38:82:97:35:ac:9b:fc:2d:8c:80:92:
52:54:34:6a:84:27:fb:f8:b6:f1:43:37:79:cd:dc:
84:1c:01:c2:1e:6f:46:68:ec:4a:2a:f1:45:b8:98:
6f:0d:61:a6:d3:1c:98:f0:db:68:ec:47:34:5b:6c:
b4:fd:b7:9d:39:bd:ea:62:f3:f7:0c:b0:ee:76:d9:
02:2c:ab:44:0e:cf:6d:5c:4c:88:d4:8c:bf:b0:88:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:85:EB:45:F5:AB:AC:95:CB:02:2A:01:7C:88:F2:82:1F:BC:65:00
X509v3 Authority Key Identifier:
keyid:6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/ZoXrRfWrrJXLAioBfIjygh-8ZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
75:88:6a:7a:8d:c6:c5:ba:dc:b7:51:cf:8d:79:95:30:dc:63:
af:14:0e:a1:05:ee:f1:38:f8:23:c4:32:ba:be:42:ad:22:a2:
76:d4:38:a9:34:4a:bc:08:3e:a9:87:ae:5d:c0:01:65:a3:bd:
f3:d2:fd:3d:0f:3a:f4:86:23:bf:f5:b7:5d:ab:b5:f5:d4:5c:
22:d9:76:0d:86:fc:34:fc:5a:10:91:76:77:69:71:6d:71:5e:
ba:43:73:bb:b2:b8:8e:84:ea:b9:9e:b1:7b:e9:2d:ba:ee:95:
00:37:fe:5f:19:2c:21:ca:13:da:98:26:01:c5:fe:0b:d7:43:
4a:de:12:32:04:25:22:21:17:ba:74:e8:a7:94:61:a3:37:13:
a1:14:76:5f:4a:d9:78:8d:ff:34:15:da:aa:96:e5:9e:d4:cb:
f3:30:d4:fb:de:ab:53:3a:f9:16:df:2d:e2:8c:5a:c4:bd:68:
d7:b1:22:0f:c0:99:4d:b5:b1:bc:a9:5d:a5:b6:f5:d0:48:8b:
03:82:55:1b:1b:9c:79:d5:e9:c8:ed:a0:5f:6a:45:f9:b5:3c:
db:fa:62:32:8a:1d:d1:39:b1:8a:d3:3c:34:3c:56:c2:e8:41:
76:01:8e:9e:fb:d3:41:ed:fb:72:bb:58:57:8a:29:d4:b4:57:
0e:a1:d3:94
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9grCqB5Vhug9GTq3Z2JZdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDQwYzAxODU0NDA1MGU1Y2VkMDI1MjA4MGY3ZTgzNDhi
MDBhMzIwHhcNMjYwNzE0MTI0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Njg1ZWI0NWY1YWJhYzk1Y2IwMjJhMDE3Yzg4ZjI4MjFmYmM2NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TrGTa5yAx0g4W4kYnr5DhLLLKpu
b2sbG8Y+7b+7vtag4lyF8wCaEEsbxNHi165OJpFmrA6NUkfo0vWaanEottSd483Y
w3ALZIs9lXiQ1mnvJGUAGrji/WqsNRqOJ1My4EyVTOrxXazZ5erwuzlsde4rosfh
OGb91U2PcpVJaann0th5NcsiGF8Q5rxL7aODo3k8KxR4md8y1O/Eh9noNEpR9M7F
7x/NOIKXNayb/C2MgJJSVDRqhCf7+LbxQzd5zdyEHAHCHm9GaOxKKvFFuJhvDWGm
0xyY8Nto7Ec0W2y0/bedOb3qYvP3DLDudtkCLKtEDs9tXEyI1Iy/sIgRrQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGaF60X1q6yVywIqAXyI8oIfvGUAMB8GA1UdIwQY
MBaAFG9EDAGFRAUOXO0CUggPfoNIsAoyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBRTUFZVkVCUTVjN1FKU0NBOS1nMGl3Q2pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzYzM2MtYjE5Ni00ZjQ2LTkyMDMt
OWIxZjU5ZGZjMjM0LzEvWm9YclJmV3JySlhMQWlvQmZJanlnaC04WlFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMzYzM2MtYjE5Ni00ZjQ2LTkyMDMtOWIxZjU5ZGZjMjM0
LzEvYjBRTUFZVkVCUTVjN1FKU0NBOS1nMGl3Q2pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgndgDAN
BgkqhkiG9w0BAQsFAAOCAQEAdYhqeo3Gxbrct1HPjXmVMNxjrxQOoQXu8Tj4I8Qy
ur5CrSKidtQ4qTRKvAg+qYeuXcABZaO989L9PQ869IYjv/W3Xau19dRcItl2DYb8
NPxaEJF2d2lxbXFeukNzu7K4joTquZ6xe+ktuu6VADf+XxksIcoT2pgmAcX+C9dD
St4SMgQlIiEXunTop5RhozcToRR2X0rZeI3/NBXaqpblntTL8zDU+96rUzr5Ft8t
4oxaxL1o17EiD8CZTbWxvKldpbb10EiLA4JVGxucedXpyO2gX2pF+bU82/piMood
0TmxitM8NDxWwuhBdgGOnvvTQe37crtYV4op1LRXDqHTlA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:53:50 2026 by rpki-client