Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ZAaTnU6s_eFv366TC0JclDW0ZhE.roa
File: ZAaTnU6s_eFv366TC0JclDW0ZhE.roa (raw, json)
Hash identifier: YT//ILFoSXtbMg4NnvN2nPtXhEErfTq55aBeha2nE1E=
Subject key identifier: 64:06:93:9D:4E:AC:FD:E1:6F:DF:AE:93:0B:42:5C:94:35:B4:66:11
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368431CB166EB2B4DFE863C5EEADE02
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ZAaTnU6s_eFv366TC0JclDW0ZhE.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210816
IP address blocks: 2a10:4646:c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:43:1c:b1:66:eb:2b:4d:fe:86:3c:5e:ea:de:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6406939d4eacfde16fdfae930b425c9435b46611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:07:23:99:db:88:5c:2d:e7:90:1c:38:19:
33:7e:f5:40:9c:b6:5a:ba:64:89:cf:f1:0d:2a:cc:
a2:69:74:84:94:92:e4:74:78:92:d1:76:2a:b4:77:
8b:87:ea:ec:ed:25:7b:57:86:f7:f6:0a:75:5b:fc:
38:a0:65:81:53:80:da:27:69:04:96:04:c4:e9:06:
54:65:d5:1a:45:33:c7:79:d1:28:f6:8a:4c:9c:7e:
02:24:42:ed:49:93:dd:c3:00:3f:30:56:0c:65:71:
07:0d:40:ab:95:e9:58:1b:d8:f0:7b:2f:fe:23:d5:
4e:10:77:b4:00:df:38:cf:25:33:bf:4b:03:92:52:
71:e2:8c:84:ce:76:58:db:83:ff:61:98:05:24:36:
9c:a4:1a:57:4b:0e:5b:f3:94:29:43:fd:57:65:c5:
41:b7:53:4a:41:8c:bc:7d:a7:2b:c3:73:f4:13:58:
75:11:f1:35:7f:ea:8f:6c:63:33:5d:dd:de:2e:f0:
b1:c3:63:8c:2d:9c:48:12:e3:d7:d8:e2:10:7e:c9:
68:1a:1c:ab:50:72:97:02:82:34:e6:0f:31:39:6c:
db:5b:4d:ed:a5:ef:89:64:55:aa:58:32:c8:bc:18:
da:18:ee:06:cf:89:98:7b:e6:48:11:72:99:4c:34:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:93:9D:4E:AC:FD:E1:6F:DF:AE:93:0B:42:5C:94:35:B4:66:11
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ZAaTnU6s_eFv366TC0JclDW0ZhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:c0::/44
Signature Algorithm: sha256WithRSAEncryption
43:a3:0b:aa:ce:de:85:19:f0:bf:c7:b4:f0:c7:22:f6:73:d8:
b9:24:18:f6:f0:d5:a2:e7:4f:3f:51:33:18:99:8b:44:92:ed:
16:28:66:41:ab:2a:50:f4:58:2c:d3:98:b8:0a:8e:2a:0f:7b:
06:8e:67:97:da:ca:39:18:85:26:3b:bd:86:64:8d:b1:70:6f:
ae:ac:59:28:00:43:8b:a2:1f:c6:7c:1b:a1:45:03:cd:99:82:
d7:95:78:34:16:12:c1:70:92:d3:75:0c:40:7b:78:d5:07:b6:
86:a0:06:ae:d7:03:b7:02:f8:fb:0c:85:ad:8d:b9:c0:18:9f:
96:5c:4b:0b:31:20:95:e7:11:41:16:28:35:dd:f2:1e:c8:d1:
6d:f4:5c:97:2d:d6:72:b2:7c:ef:5e:a9:82:d7:38:e3:e9:4e:
e9:de:45:3f:00:65:18:e0:ef:1b:73:35:fb:87:fc:a6:bb:23:
ca:89:8f:79:00:67:20:c7:84:65:ff:77:61:00:9a:a7:94:b1:
ec:4f:2e:b2:69:af:ed:13:67:bd:40:bb:b7:e2:39:7a:71:ef:
9b:a9:37:5d:d1:3d:f0:cb:d3:56:e5:a4:3c:68:97:db:2f:b3:
3b:01:b3:fa:e5:f3:63:e4:d6:8f:1b:c3:7b:60:2e:0d:8d:cf:
2c:0c:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:56:33 2026 by rpki-client