Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zimPcGDUo8EzyJxzla1Wc4am6YY.roa
File: zimPcGDUo8EzyJxzla1Wc4am6YY.roa (raw, json)
Hash identifier: M+lyYGw7UtNSetZyA69qKy++r//o+wIQw+1/FkeWFcY=
Subject key identifier: CE:29:8F:70:60:D4:A3:C1:33:C8:9C:73:95:AD:56:73:86:A6:E9:86
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F661BD042C5F854B2890C5F62987CF7BE
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zimPcGDUo8EzyJxzla1Wc4am6YY.roa
Signing time: Wed 15 Jul 2026 14:08:46 +0000
ROA not before: Wed 15 Jul 2026 14:08:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152492
IP address blocks: 85.239.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:1b:d0:42:c5:f8:54:b2:89:0c:5f:62:98:7c:f7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 15 14:08:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce298f7060d4a3c133c89c7395ad567386a6e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:cf:2d:c0:f3:ee:c1:c5:fc:f9:ad:4b:53:
c4:63:f9:83:6f:8c:4f:6a:be:82:ec:3b:18:a0:77:
0b:d0:2e:31:91:3f:be:27:6c:da:d4:b8:5e:b2:ca:
6d:d4:44:1b:f6:47:e0:73:d0:38:20:46:2d:85:70:
55:20:c5:7b:37:d0:79:b4:ac:2d:b3:fb:26:70:6f:
91:e7:5d:3c:fc:73:0a:b1:8a:9b:97:fe:e5:15:cd:
79:7b:d7:27:41:28:b1:21:3a:1a:29:5c:7f:ac:09:
ac:dc:8e:0a:ec:36:45:2e:02:95:30:e3:d8:3f:3c:
80:20:c6:07:b7:8b:a9:69:fe:8e:2f:58:07:26:b4:
51:77:34:42:21:f3:0c:90:48:8c:1e:12:55:12:93:
57:14:ff:6c:59:70:39:a1:15:9b:f6:41:72:b6:fb:
67:c5:52:43:9f:f7:b7:da:88:8b:6d:d3:df:37:3c:
f7:1d:2e:99:44:8a:ac:29:ac:2d:bc:2a:65:a3:54:
cd:e8:d7:8e:f5:4a:a0:67:9b:07:2e:7f:c5:d6:0b:
a8:ad:41:0b:ff:29:4b:05:e2:80:be:7a:aa:c8:40:
a5:cd:63:47:a2:6f:30:1c:a8:07:fc:9e:c9:26:83:
b2:16:fe:a4:e0:fc:d6:8c:70:fc:51:30:af:c4:20:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:8F:70:60:D4:A3:C1:33:C8:9C:73:95:AD:56:73:86:A6:E9:86
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zimPcGDUo8EzyJxzla1Wc4am6YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.156.0/24
Signature Algorithm: sha256WithRSAEncryption
68:30:06:17:7e:dd:a2:7c:66:4f:00:b9:b1:03:82:8a:e4:90:
23:b8:9a:2b:15:2f:87:35:39:20:7c:6d:6e:35:29:3e:f0:f4:
e3:d3:11:fe:fa:cb:00:6d:7a:c9:3b:4d:d1:3e:0d:91:22:5a:
e3:ad:4f:91:67:f4:57:08:33:7d:b6:b1:37:69:d3:f4:b4:10:
e0:eb:6b:c0:58:96:6e:5b:87:13:3c:48:1c:b8:8d:d2:cc:57:
56:b2:a6:9f:2a:95:04:92:63:bb:b3:94:cb:0f:b2:f0:d1:63:
64:b5:dc:81:5a:0a:ef:8d:86:95:c2:d1:ad:d6:8a:10:5c:3d:
44:41:67:1d:af:bb:9b:41:33:5e:dd:00:2b:60:67:b1:77:49:
63:b0:22:72:54:98:25:3d:50:36:c3:f8:16:43:21:30:8e:72:
9a:b9:64:c7:2d:c2:e3:8a:6d:f0:17:e0:f1:b0:1d:d6:3c:f7:
87:5e:8b:55:b5:a8:f3:97:93:49:ac:4c:69:b4:c7:bf:54:70:
60:17:46:ab:ca:48:70:65:e6:25:a9:9c:ed:c3:34:9f:14:c7:
9d:42:d9:7a:db:7a:fd:d3:75:55:a8:4d:16:79:fa:67:55:68:
d8:4c:d6:ba:8c:a2:84:9e:1f:98:66:46:aa:f4:50:c3:e4:dc:
2a:2b:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 14:15:42 2026 by rpki-client