Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/ZyTtGOArInkFDafP4V1-DLsGWGU.roa
File: ZyTtGOArInkFDafP4V1-DLsGWGU.roa (raw, json)
Hash identifier: vMj3ZtUnjOx8jgIB+BphuJXzatDBfGIG/tGiLzS4Qpk=
Subject key identifier: 67:24:ED:18:E0:2B:22:79:05:0D:A7:CF:E1:5D:7E:0C:BB:06:58:65
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 019F16DD37F110C522DD77F745FC590A0802
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/ZyTtGOArInkFDafP4V1-DLsGWGU.roa
Signing time: Tue 30 Jun 2026 04:50:24 +0000
ROA not before: Tue 30 Jun 2026 04:50:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207059
IP address blocks: 2a07:bf80::/32 maxlen: 48
2a07:bf80:de::/48 maxlen: 112
2a07:bf80:de:901::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:dd:37:f1:10:c5:22:dd:77:f7:45:fc:59:0a:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Jun 30 04:50:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6724ed18e02b2279050da7cfe15d7e0cbb065865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:2e:88:43:e7:de:85:c8:bc:ea:b2:c2:6b:
8c:ea:8c:94:34:0a:9f:ad:32:6a:75:f3:cf:41:85:
be:a9:38:0f:c5:bb:87:3b:de:bd:06:1b:c5:39:91:
79:93:97:db:a3:57:f3:af:89:ef:77:93:2b:d4:b8:
e9:66:6e:9a:9b:ad:e8:ff:4b:d8:bd:2d:af:a0:03:
b2:ec:63:86:38:49:c4:d3:3e:aa:16:e2:2c:21:26:
0b:59:69:8d:e2:f7:1c:f0:df:4e:4d:5e:70:b6:89:
4f:44:40:9f:ad:e3:45:37:75:ec:54:b1:ac:00:63:
02:8b:64:ac:02:3f:c9:1e:f8:1b:b1:c3:05:7d:6a:
c5:5e:ae:45:16:3a:48:25:2a:af:7b:f2:e8:ce:df:
b5:40:64:d0:2c:9b:c5:f8:cc:83:3d:c9:9e:be:d3:
35:c6:75:d7:71:c0:d5:81:04:ea:22:74:21:79:27:
15:9a:8d:39:1c:e5:8d:8f:b7:24:61:26:1a:0f:71:
18:e9:91:b7:14:da:fe:23:4f:01:06:e8:45:eb:dc:
e1:01:c9:46:dd:fa:fa:72:b8:97:4b:1f:8a:06:7d:
b6:2d:44:56:e6:9e:3c:04:7e:38:f1:e1:a5:70:40:
9f:54:41:94:4b:bb:af:8e:12:f8:02:2d:e4:42:10:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:ED:18:E0:2B:22:79:05:0D:A7:CF:E1:5D:7E:0C:BB:06:58:65
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/ZyTtGOArInkFDafP4V1-DLsGWGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:bf80::/32
Signature Algorithm: sha256WithRSAEncryption
42:65:b9:bb:3c:97:9a:55:83:3b:70:66:83:f0:30:e1:8c:62:
51:6a:16:1c:05:bc:ed:13:e0:27:31:92:81:71:11:30:1a:a0:
57:f7:9f:3c:cf:5a:7e:71:12:93:8b:a5:bf:66:48:eb:03:83:
dc:a4:af:0d:80:7b:22:8a:ec:13:a7:01:73:8c:0b:62:2c:4b:
54:66:ca:1f:e6:64:2d:2a:26:89:e6:3d:bb:d1:99:45:0c:71:
10:b9:04:17:b3:ab:42:54:15:b1:6f:8a:81:dc:9e:4f:cf:06:
bf:43:51:2e:37:df:6d:65:dc:2d:ec:29:da:bd:92:77:ad:73:
db:3a:49:82:f8:06:3d:8f:ff:ae:39:92:3a:4f:07:4b:b9:3d:
a9:34:8c:6f:b3:7e:eb:6c:00:b0:5c:fd:39:a9:f9:14:f7:2d:
88:4d:4e:42:fd:06:2f:cd:74:c0:a8:26:03:15:04:6a:89:11:
f3:ee:5d:6d:4b:ce:cf:3e:c3:95:d4:9e:41:f8:9f:ac:d4:81:
7f:f6:59:cc:e6:47:9c:00:10:c7:cc:99:0d:ad:9d:60:d9:90:
08:81:8c:12:5a:d9:f8:f8:5b:a1:85:86:3f:aa:73:c3:95:cd:
2c:2a:47:b9:5f:30:f0:70:59:b3:b6:ed:24:52:ae:b2:6b:54:
89:db:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 01:34:33 2026 by rpki-client