Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZklW7LhbaFu82lH41rXWm1nkwPY.roa
File: ZklW7LhbaFu82lH41rXWm1nkwPY.roa (raw, json)
Hash identifier: U1OifPBvLLkIl2vJ9HTTxA1YOh4MtW5wuoZi6Jxagwg=
Subject key identifier: 66:49:56:EC:B8:5B:68:5B:BC:DA:51:F8:D6:B5:D6:9B:59:E4:C0:F6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1295EB7FE4610A349159B4614F66E4D9C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZklW7LhbaFu82lH41rXWm1nkwPY.roa
Signing time: Sun 11 Oct 2026 05:10:35 +0000
ROA not before: Sun 11 Oct 2026 05:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216215
IP address blocks: 2a05:9a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:5e:b7:fe:46:10:a3:49:15:9b:46:14:f6:6e:4d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 11 05:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=664956ecb85b685bbcda51f8d6b5d69b59e4c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:b2:88:df:5d:e5:61:3a:cb:9b:1e:73:e4:
08:e8:89:76:2b:59:d1:3e:60:78:26:aa:24:71:a4:
c0:93:c9:a9:bd:5e:f3:b1:2b:b5:3b:af:f5:e0:70:
e4:a3:ac:a2:08:0a:cd:71:77:c4:75:ac:5e:eb:72:
51:d1:3e:fe:d0:63:88:68:23:b3:25:02:4c:eb:c9:
65:7e:bb:ca:c0:cb:09:ac:91:13:7d:b5:31:97:73:
e2:12:d5:ea:7c:c7:94:98:5f:a1:f4:c9:30:61:09:
05:cc:54:cb:c6:52:ae:31:cc:2b:a4:d0:02:26:fe:
9b:bb:74:85:e5:4d:4b:db:33:9d:dc:39:9a:12:b7:
b9:81:32:a2:31:62:70:8c:08:1a:a6:44:82:22:13:
ba:2c:7b:21:66:dd:00:b2:d5:0b:bf:27:f9:d4:53:
29:19:e1:7e:f1:a8:c6:11:e1:56:f3:f4:42:5f:5f:
62:84:fe:33:16:38:69:e0:32:16:93:36:04:64:9c:
10:ea:da:f7:9f:3e:18:b3:23:92:b3:35:ec:f0:ed:
a4:5e:7b:b9:d5:5b:83:08:ff:19:b1:f7:3f:22:15:
9d:a1:86:4b:ba:91:c4:28:f1:cd:47:c4:80:6e:d6:
77:24:7c:f9:53:ec:e8:1d:83:5f:28:09:ba:52:57:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:56:EC:B8:5B:68:5B:BC:DA:51:F8:D6:B5:D6:9B:59:E4:C0:F6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZklW7LhbaFu82lH41rXWm1nkwPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
8c:0e:db:f0:60:3a:47:f6:b8:52:b5:7f:92:73:0b:62:b5:d1:
75:c3:75:5b:93:d1:8b:01:42:b7:31:ab:26:5e:d7:a6:91:17:
49:bd:15:68:8e:ad:80:60:4e:37:33:20:db:86:26:28:bf:f7:
43:22:93:12:30:fc:bd:9b:ab:00:70:2d:fa:37:4b:34:95:91:
c5:be:50:27:e9:5c:ae:9e:d5:a5:d5:ac:8c:89:9f:36:a5:12:
9c:b5:1b:4a:b3:65:09:be:d3:88:8c:0e:e9:4f:bf:5f:51:1b:
08:e1:d3:a6:30:69:e5:8f:77:6f:13:fe:33:ea:34:70:9e:52:
68:3f:ea:1a:68:ca:9e:0d:69:27:2a:ac:a2:eb:13:70:41:dc:
cc:d1:95:1a:77:8d:2d:43:53:87:fe:9c:4a:e5:e9:ff:fd:1e:
aa:1e:dc:f3:58:c7:56:7a:b0:2e:b9:6d:dd:5a:86:ca:f9:b3:
98:93:c0:4b:c2:ba:15:7b:fa:85:53:04:7a:d2:ec:d0:a4:4c:
a1:70:6d:2d:2c:29:54:e7:b4:da:9f:00:17:f1:26:5e:14:ee:
fd:61:e4:59:20:95:5a:30:c1:cb:e6:d6:9a:17:7a:3e:f3:b0:
a9:0b:f9:c2:2f:f6:dc:71:74:73:9f:e7:df:87:d9:ea:17:5b:
16:a8:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:32 2026 by rpki-client