Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZfsFxYrUt21DSR4r5HuMpJmoXbI.roa
File: ZfsFxYrUt21DSR4r5HuMpJmoXbI.roa (raw, json)
Hash identifier: q7GFEFXDG3k6T3jOP5LncfCKwdj4SRAZpz/JFt/eK2U=
Subject key identifier: 65:FB:05:C5:8A:D4:B7:6D:43:49:1E:2B:E4:7B:8C:A4:99:A8:5D:B2
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F2772D15F430AEA1DBE2B8C3FEC45AA2A
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZfsFxYrUt21DSR4r5HuMpJmoXbI.roa
Signing time: Fri 03 Jul 2026 10:07:43 +0000
ROA not before: Fri 03 Jul 2026 10:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2a0d:d940:120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:72:d1:5f:43:0a:ea:1d:be:2b:8c:3f:ec:45:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 3 10:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65fb05c58ad4b76d43491e2be47b8ca499a85db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:01:da:63:d7:78:df:17:48:ee:31:f3:35:
69:37:65:8e:2d:ca:01:8d:cf:aa:26:9f:0f:dd:dd:
bd:3e:39:d8:dc:21:37:b4:e3:95:64:14:b9:df:0d:
ab:e1:17:5d:ee:9a:1a:3b:24:c3:ab:1c:bc:fb:39:
f5:8c:19:42:fd:55:70:96:25:99:c4:f6:81:e2:81:
b1:ac:63:bf:b0:48:64:02:9a:8d:4a:84:91:d6:cc:
70:d9:9c:5a:2e:a7:e8:9e:c0:34:bf:54:c4:00:3c:
62:fa:00:6e:64:32:b6:f2:dc:f5:96:49:88:33:9d:
28:74:5e:18:98:ea:78:89:d0:70:c5:32:ae:c9:0b:
13:d6:c0:51:3e:dd:d6:df:28:7f:d1:13:53:ae:b8:
37:a3:19:0b:5c:d9:e2:46:0a:28:02:e3:98:30:28:
da:14:40:cf:a3:d8:cf:6a:17:c9:2a:f5:17:46:fa:
88:ed:3b:e5:65:5c:20:74:da:0c:b8:5f:ee:9b:17:
73:dc:ca:63:05:87:a9:e9:9e:1b:4f:23:29:04:a6:
07:04:58:2f:ad:4c:f0:a8:05:d8:d4:d5:77:24:8d:
e7:fc:38:cd:66:75:c9:6c:30:fb:70:33:f4:2c:cd:
5f:d3:c0:0b:43:2b:c5:c9:e2:e8:e5:fd:f5:f9:cf:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FB:05:C5:8A:D4:B7:6D:43:49:1E:2B:E4:7B:8C:A4:99:A8:5D:B2
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZfsFxYrUt21DSR4r5HuMpJmoXbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:120::/44
Signature Algorithm: sha256WithRSAEncryption
43:c6:53:22:14:18:57:65:be:dc:0c:60:67:37:8c:db:29:57:
e8:08:f1:72:19:0f:9d:5c:86:06:cd:a4:32:3d:2b:1e:b6:68:
40:ec:d7:8e:f1:ae:af:d7:0f:4f:d8:33:53:9f:6b:be:be:c6:
99:3a:86:bc:0e:f3:a6:2e:9c:66:75:45:84:b2:c1:69:ab:bb:
0c:5c:14:7e:9d:65:5d:bf:58:be:54:65:be:e2:88:55:7c:51:
a8:f1:74:a7:5f:31:78:9b:c9:e5:cd:23:a7:66:67:17:0d:e3:
dd:38:c4:c4:b3:0d:f6:24:33:ec:3a:5f:d9:f0:16:ca:e6:2e:
0a:c6:4d:af:96:e7:d2:22:44:84:5c:8c:23:eb:5f:0a:8e:13:
d8:2b:c8:5e:bd:b2:77:f8:77:4d:c9:0c:34:6e:87:f7:85:de:
f6:41:66:28:d4:83:e2:9f:eb:1d:8d:73:7b:b7:4a:52:93:cf:
71:e2:d0:a9:22:e0:c2:1d:c9:4b:27:c5:a8:a2:4b:f9:7e:7a:
06:1c:1a:c7:8c:d3:ec:64:84:ec:b3:5a:20:01:f3:7f:40:69:
74:5e:5f:21:fa:74:b4:47:8f:02:3e:92:04:92:7b:ff:98:9c:
0d:23:97:b2:a5:bb:d1:21:41:8b:13:bb:a9:29:60:86:b9:0b:
82:31:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:09 2026 by rpki-client