Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/z0LmpxG3jgNE8liyUkrZM-cAB2I.roa
File: z0LmpxG3jgNE8liyUkrZM-cAB2I.roa (raw, json)
Hash identifier: 08OsyQUWpFdj2wJXNiIg4dP6KpzSLFEv3SwW/6iBpFY=
Subject key identifier: CF:42:E6:A7:11:B7:8E:03:44:F2:58:B2:52:4A:D9:33:E7:00:07:62
Certificate issuer: /CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Certificate serial: 019F23687547FDA9BF3C3E59069FF02ED1F5
Authority key identifier: DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/z0LmpxG3jgNE8liyUkrZM-cAB2I.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 2a0a:c640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:75:47:fd:a9:bf:3c:3e:59:06:9f:f0:2e:d1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbca0894a9ba3242f116a77c3a853fdb98d71920
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf42e6a711b78e0344f258b2524ad933e7000762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:74:91:e3:19:3c:97:6d:2a:ea:46:e1:c9:
8d:94:53:fa:2c:62:eb:53:67:1d:3d:02:4c:8c:76:
a1:f4:1b:e3:82:35:0a:be:aa:12:dd:1c:b7:8c:8f:
fe:31:c4:9e:de:51:29:1d:a9:1c:b2:83:63:03:3e:
76:7a:24:e6:58:a0:45:68:a4:b9:85:c2:c4:a1:14:
82:b0:97:8c:e4:85:c6:b7:f0:14:a1:0b:ce:4e:57:
c9:34:2d:bc:84:62:98:00:d2:bb:d5:00:4e:39:7b:
1a:5a:a6:65:c0:df:95:94:6b:1a:4c:46:4d:ce:40:
fd:de:ab:e2:e5:b8:90:77:56:3d:aa:e2:b3:77:d0:
d0:9d:20:ec:7f:7f:c0:44:cd:63:5b:29:b7:cc:70:
c7:b8:cf:12:45:96:40:89:16:38:38:a0:03:eb:23:
53:57:16:77:f1:f9:35:f9:b6:ef:33:af:d3:56:dc:
2a:3a:a9:a6:a4:87:f5:62:c8:9c:9d:32:f4:ba:a7:
9c:4e:a1:10:34:c7:33:90:93:06:9c:7a:fa:8f:20:
e5:d1:ee:cc:c1:7a:18:be:c3:ae:82:4b:f6:bc:1a:
f7:a4:e0:de:ea:13:59:88:c0:a5:69:44:b5:37:77:
a2:ca:06:5d:ce:94:a2:5c:22:91:aa:9f:26:91:af:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:E6:A7:11:B7:8E:03:44:F2:58:B2:52:4A:D9:33:E7:00:07:62
X509v3 Authority Key Identifier:
keyid:DB:CA:08:94:A9:BA:32:42:F1:16:A7:7C:3A:85:3F:DB:98:D7:19:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28oIlKm6MkLxFqd8OoU_25jXGSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/z0LmpxG3jgNE8liyUkrZM-cAB2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/28oIlKm6MkLxFqd8OoU_25jXGSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c640::/29
Signature Algorithm: sha256WithRSAEncryption
07:5f:61:04:2d:7d:82:47:f8:8f:5b:6b:f0:6a:56:a5:15:cd:
4e:74:9a:85:99:a5:34:80:26:8a:81:a3:67:b0:23:24:92:13:
84:7b:a8:3f:64:f2:a7:ce:bb:65:74:da:a2:5d:13:aa:06:f4:
93:33:61:60:85:e4:52:3e:61:94:f7:08:1a:c1:b5:31:7c:cc:
a7:c2:53:b7:2c:b3:6b:29:e8:5b:3b:17:b7:48:b9:82:ec:1e:
cb:3b:ac:e9:3b:42:65:95:fa:46:35:ff:42:b0:07:80:3e:92:
3a:1d:71:e4:73:7c:d7:02:54:16:98:db:50:f9:b6:6e:bd:f1:
d4:6d:02:e7:e3:d5:0d:cd:1d:db:a8:7e:6f:66:e5:60:5d:2e:
8d:22:f5:fc:fd:e9:c2:57:3c:d6:b0:d2:63:19:d9:ab:50:8a:
c9:d7:f2:1f:76:bd:e7:3e:30:37:72:7b:40:de:c5:3f:dc:61:
c3:d6:55:54:a3:97:49:6c:a4:e2:ec:d9:41:16:44:21:0a:0e:
3c:76:a4:7c:7f:16:e3:10:91:27:0b:d7:31:68:09:b0:4d:de:
fb:f5:20:95:b7:08:7a:a0:f8:75:ad:38:d7:33:e3:f0:64:fd:
37:90:ae:ab:e8:61:89:57:23:49:74:d1:65:41:3f:2b:bf:33:
aa:f9:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:08:04 2026 by rpki-client