Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/zwd0Cw2qrsjx74Y3VwNyMZ2PICU.roa
File: zwd0Cw2qrsjx74Y3VwNyMZ2PICU.roa (raw, json)
Hash identifier: 2n8Nzm4GrcOHmtLP1SVQ8ehvD1IveIPAioYuATNEf7w=
Subject key identifier: CF:07:74:0B:0D:AA:AE:C8:F1:EF:86:37:57:03:72:31:9D:8F:20:25
Certificate issuer: /CN=1d35b7f5320ae3c8f6a156c55b19f4986017db73
Certificate serial: 01A00F6EFF9D59A02DB8F21B11B491FA2307
Authority key identifier: 1D:35:B7:F5:32:0A:E3:C8:F6:A1:56:C5:5B:19:F4:98:60:17:DB:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTW39TIK48j2oVbFWxn0mGAX23M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/zwd0Cw2qrsjx74Y3VwNyMZ2PICU.roa
Signing time: Mon 17 Aug 2026 11:15:27 +0000
ROA not before: Mon 17 Aug 2026 11:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3188
IP address blocks: 46.28.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/HTW39TIK48j2oVbFWxn0mGAX23M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/HTW39TIK48j2oVbFWxn0mGAX23M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTW39TIK48j2oVbFWxn0mGAX23M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:6e:ff:9d:59:a0:2d:b8:f2:1b:11:b4:91:fa:23:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d35b7f5320ae3c8f6a156c55b19f4986017db73
Validity
Not Before: Aug 17 11:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf07740b0daaaec8f1ef8637570372319d8f2025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:53:26:8f:55:94:65:92:98:cd:e5:b4:d0:
8a:b0:0d:3b:37:91:dd:9b:6c:e1:c9:bc:d0:03:50:
75:9a:8d:56:97:7c:a2:de:ac:65:51:09:d1:9a:44:
96:76:76:bc:98:99:ec:95:98:20:3f:c7:5d:5c:5d:
7a:99:21:6b:0d:8e:08:83:bf:b5:71:bd:be:3f:d5:
42:7c:4e:d5:00:a0:77:e3:3f:49:b5:17:84:a6:4b:
f9:9c:45:ac:79:26:70:88:7a:50:2c:fe:eb:ec:5a:
b9:5b:56:eb:85:49:3d:9d:2f:cc:23:e6:db:ae:d8:
f8:b6:90:28:65:1c:be:41:e9:ce:86:a8:48:b5:c7:
35:bd:35:ea:b7:fd:74:b4:d7:fb:9a:88:fd:cb:56:
da:36:e0:cf:4d:0a:45:16:3e:1f:75:a9:f5:39:08:
22:9c:44:1b:f6:4d:ad:33:a1:7a:87:c0:99:45:b5:
d2:3a:fb:86:17:ac:b3:4f:1b:07:fd:85:9c:5c:05:
20:cc:9a:42:86:d9:df:9c:17:95:3a:f7:00:0c:94:
29:7f:e3:e9:8d:20:31:de:ef:6b:60:70:37:a1:7b:
89:2a:4d:87:e1:ec:c4:a9:f6:f9:60:bc:8b:c7:cf:
04:8a:a1:ce:f0:ec:3e:ba:12:dc:d9:68:2a:d2:aa:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:74:0B:0D:AA:AE:C8:F1:EF:86:37:57:03:72:31:9D:8F:20:25
X509v3 Authority Key Identifier:
keyid:1D:35:B7:F5:32:0A:E3:C8:F6:A1:56:C5:5B:19:F4:98:60:17:DB:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTW39TIK48j2oVbFWxn0mGAX23M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/zwd0Cw2qrsjx74Y3VwNyMZ2PICU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b86685-f3d5-4bd3-85cf-a351dfc4c8ae/1/HTW39TIK48j2oVbFWxn0mGAX23M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.238.0/24
Signature Algorithm: sha256WithRSAEncryption
94:13:78:ec:bc:f5:49:1b:f8:5c:3f:5d:3d:c6:ce:1f:8c:e0:
f2:7f:e0:4a:10:6d:87:3e:40:dd:84:41:83:a2:78:c7:8a:7c:
b2:99:9f:85:2d:96:6f:b7:02:df:87:92:d0:2d:a9:fa:78:04:
38:61:d0:68:12:0d:fc:a9:26:56:c2:7d:5d:93:e9:b8:0f:7c:
8e:4e:16:fa:7e:11:0d:71:d7:2a:6d:e7:78:d9:cd:c9:34:35:
7e:5d:05:ae:bb:62:5a:0c:82:b7:e4:6e:a3:76:a5:62:59:96:
78:ad:a7:ba:bd:60:fc:d6:fd:b1:e0:2d:3e:bd:66:11:a4:7d:
e9:b0:02:11:15:9c:78:1c:c7:f5:3d:36:f0:d0:af:35:02:48:
48:a7:8d:05:47:4f:ea:0d:04:e8:bb:f3:b7:70:bb:0e:e7:35:
3c:29:3b:a7:70:cc:51:1f:f2:45:26:87:49:34:9b:9f:3c:23:
85:d0:2c:9c:3c:17:a7:95:cc:9d:a6:e0:e8:b4:dc:30:1e:db:
e1:6a:97:26:74:bb:79:5e:5f:f5:4d:e2:52:93:73:58:88:26:
19:ac:32:b2:75:71:44:1d:9a:6c:31:a6:85:88:48:da:6a:f0:
e1:f0:05:67:92:af:86:8c:36:62:3f:5d:25:55:ba:20:70:d1:
8f:51:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:16:50 2026 by rpki-client