Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa
File: Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa (raw, json)
Hash identifier: 4PwFjqVYHtrMdoqJtqZUtQgbid0TJjs+0mXNy+Un5T8=
Subject key identifier: 66:F9:74:F8:DB:EB:54:4A:7C:10:8A:C2:A1:D4:95:4A:F1:6C:FC:C0
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236835B741DD7F426533DC77A4FFA55E
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39091
IP address blocks: 2a10:4646:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:b7:41:dd:7f:42:65:33:dc:77:a4:ff:a5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66f974f8dbeb544a7c108ac2a1d4954af16cfcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:40:02:11:5d:2d:08:32:0c:03:40:aa:89:
8f:a0:75:51:58:d9:97:71:3e:67:71:52:ee:ec:fa:
59:3b:b9:b3:b5:ba:c6:42:75:47:b6:bb:0a:00:a3:
b5:82:97:ec:29:d5:22:12:c6:a8:22:61:56:ab:6d:
10:24:27:ed:52:d9:29:fb:d3:cc:e1:db:ad:b4:2d:
a8:00:81:b6:33:d5:97:0a:75:ec:8e:85:eb:a5:ca:
0d:df:67:33:7e:6b:ae:10:46:e3:a2:59:50:81:2f:
8b:22:79:24:76:65:be:dc:4e:a3:a8:67:7d:81:1f:
97:cf:e8:a1:f6:f1:b6:d5:53:40:b5:73:c2:7c:82:
f0:3f:23:b8:d3:13:fa:e3:54:15:0b:c7:c9:e6:a9:
31:76:ba:91:85:5a:8c:de:6a:71:fd:a3:72:6e:29:
c1:99:4d:88:86:da:c7:73:a9:28:09:0b:10:d7:c6:
04:c1:2a:75:e2:ff:e7:2a:b4:7c:eb:30:ff:6a:10:
57:fa:20:ee:ab:04:a2:16:28:82:b5:71:65:b7:a7:
4c:be:a7:a1:fa:bf:b0:05:99:3d:f9:c1:07:f1:f1:
6a:5c:ae:ef:af:68:f4:76:e1:fc:79:99:d6:32:05:
29:5e:3c:9c:73:9a:cb:91:76:90:c8:ce:97:c0:8a:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:74:F8:DB:EB:54:4A:7C:10:8A:C2:A1:D4:95:4A:F1:6C:FC:C0
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:9::/48
Signature Algorithm: sha256WithRSAEncryption
3d:0e:9c:fc:8a:22:3e:db:8b:70:71:6a:4e:ac:35:94:bd:39:
28:b0:85:37:7b:ac:33:99:30:50:a3:f1:c8:c4:cc:f1:eb:f5:
e6:5d:85:f2:49:76:ab:a5:a0:a7:ba:a4:03:17:62:ba:9b:90:
83:e7:6a:76:59:db:8d:cb:f3:be:e0:54:e4:21:73:16:7c:48:
77:a3:2b:24:32:2e:13:71:88:46:48:0e:ec:00:4f:4b:4b:4f:
10:ec:ab:a2:2a:f6:15:3f:15:34:87:a6:5c:fc:55:5b:70:85:
ea:5f:59:2a:3a:f1:ff:7b:62:dd:cb:08:e0:cf:3f:32:f2:44:
ab:cd:60:55:dc:ef:aa:8a:92:e2:0a:b7:e7:38:2f:ee:f4:37:
60:0b:3c:00:45:00:4e:b6:0d:10:ce:c4:6f:56:11:e2:ca:a7:
aa:27:42:35:0c:b5:9c:c4:d2:11:df:2c:75:55:00:70:cd:39:
6f:66:8c:20:05:c5:9c:ba:9c:13:c3:36:de:ed:74:bf:39:d8:
02:a7:01:57:d4:91:6d:f2:2f:0c:31:97:1c:66:73:25:9e:83:
82:6d:70:14:f8:d4:ce:10:e6:06:5f:cb:bf:1b:e2:b0:35:5f:
25:98:45:bb:24:5c:62:e3:c8:42:ee:38:be:02:de:6c:ed:20:
d8:dc:9b:02
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaDW3Qd1/QmUz3Hek/6VeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2M0OTUyYjZmM2E4Y2M3YzgxNjMwZDNlODNiMmE5ODI3
MTYzZjYwHhcNMjYwNzAyMTUxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmY5NzRmOGRiZWI1NDRhN2MxMDhhYzJhMWQ0OTU0YWYxNmNmY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiutAAhFdLQgyDANAqomPoHVRWNmX
cT5ncVLu7PpZO7mztbrGQnVHtrsKAKO1gpfsKdUiEsaoImFWq20QJCftUtkp+9PM
4duttC2oAIG2M9WXCnXsjoXrpcoN32czfmuuEEbjollQgS+LInkkdmW+3E6jqGd9
gR+Xz+ih9vG21VNAtXPCfILwPyO40xP641QVC8fJ5qkxdrqRhVqM3mpx/aNybinB
mU2IhtrHc6koCQsQ18YEwSp14v/nKrR86zD/ahBX+iDuqwSiFiiCtXFlt6dMvqeh
+r+wBZk9+cEH8fFqXK7vr2j0duH8eZnWMgUpXjycc5rLkXaQyM6XwIpyYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGb5dPjb61RKfBCKwqHUlUrxbPzAMB8GA1UdIwQY
MBaAFH3MSVK286jMfIFjDT6DsqmCcWP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvWnZsMC1OdnJWRXA4RUlyQ29kU1ZTdkZzX01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQA9Dpz8iiI+24twcWpOrDWUvTkosIU3e6wzmTBQ
o/HIxMzx6/XmXYXySXarpaCnuqQDF2K6m5CD52p2WduNy/O+4FTkIXMWfEh3oysk
Mi4TcYhGSA7sAE9LS08Q7KuiKvYVPxU0h6Zc/FVbcIXqX1kqOvH/e2Ldywjgzz8y
8kSrzWBV3O+qipLiCrfnOC/u9DdgCzwARQBOtg0QzsRvVhHiyqeqJ0I1DLWcxNIR
3yx1VQBwzTlvZowgBcWcupwTwzbe7XS/OdgCpwFX1JFt8i8MMZccZnMlnoOCbXAU
+NTOEOYGX8u/G+KwNV8lmEW7JFxi48hC7ji+At5s7SDY3JsC
-----END CERTIFICATE-----
Generated at Sat Jul 11 15:56:29 2026 by rpki-client