Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/ZsN2D0GkV-4EfhVKq3WfNfIwS0U.roa
File: ZsN2D0GkV-4EfhVKq3WfNfIwS0U.roa (raw, json)
Hash identifier: cTvDhoMPqXlBnhnTVg8nEl53wP/iErLeVlhSpoVd9mM=
Subject key identifier: 66:C3:76:0F:41:A4:57:EE:04:7E:15:4A:AB:75:9F:35:F2:30:4B:45
Certificate issuer: /CN=c355b258cb67f03659a2c8673ae8197f68956e39
Certificate serial: 01A0FD16E31FADEC9F2078264BFED82E867D
Authority key identifier: C3:55:B2:58:CB:67:F0:36:59:A2:C8:67:3A:E8:19:7F:68:95:6E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1WyWMtn8DZZoshnOugZf2iVbjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/ZsN2D0GkV-4EfhVKq3WfNfIwS0U.roa
Signing time: Fri 02 Oct 2026 14:48:50 +0000
ROA not before: Fri 02 Oct 2026 14:48:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a0e:6980:3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1WyWMtn8DZZoshnOugZf2iVbjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:16:e3:1f:ad:ec:9f:20:78:26:4b:fe:d8:2e:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355b258cb67f03659a2c8673ae8197f68956e39
Validity
Not Before: Oct 2 14:48:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66c3760f41a457ee047e154aab759f35f2304b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:27:e8:87:91:4f:9b:17:e6:1c:74:90:bb:
c5:8e:64:c8:09:a7:4b:4b:92:04:cd:b1:f9:e6:58:
f6:96:e2:f3:32:40:cb:d4:d9:03:2e:d4:fb:75:9e:
52:71:81:0c:78:7b:7e:a7:41:cd:1c:b0:ba:4f:3e:
2b:a9:e2:04:a9:43:5a:61:8a:0a:5d:66:62:82:01:
5c:82:1d:4b:ef:7c:f5:0e:9d:43:41:e7:c1:e3:b7:
d2:c5:3a:62:93:16:5b:25:e0:88:96:86:52:4e:8d:
47:d5:11:0d:1d:11:e2:a9:24:27:47:66:a0:04:b9:
ce:e3:85:12:ea:7b:24:52:cd:8f:3e:1e:31:9b:38:
8e:15:f5:92:de:8b:57:56:87:3d:de:a0:5f:d6:1f:
ea:15:75:49:fb:22:f0:8a:b5:d9:10:56:b4:aa:22:
07:b9:50:13:66:5f:d1:2c:c4:98:7b:53:43:14:8c:
a8:1c:d6:52:f9:83:53:c0:0c:0a:3a:4d:80:cf:dc:
b5:d5:4a:a4:38:6b:64:26:31:00:a1:51:f5:aa:45:
42:5f:ee:56:8e:aa:5f:7b:ed:00:16:3b:6e:72:ba:
75:93:6a:0e:f4:5d:8a:e1:b2:c4:c7:59:e7:b3:5b:
97:49:ce:ec:6c:f4:97:af:2b:df:1c:f6:3a:83:ba:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C3:76:0F:41:A4:57:EE:04:7E:15:4A:AB:75:9F:35:F2:30:4B:45
X509v3 Authority Key Identifier:
keyid:C3:55:B2:58:CB:67:F0:36:59:A2:C8:67:3A:E8:19:7F:68:95:6E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1WyWMtn8DZZoshnOugZf2iVbjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/ZsN2D0GkV-4EfhVKq3WfNfIwS0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6980:3e8::/48
Signature Algorithm: sha256WithRSAEncryption
54:a2:70:d7:29:72:25:32:e9:8b:f1:25:e3:fc:08:b4:9f:a7:
1a:bb:cd:e5:cf:21:45:5b:58:fd:1c:48:b9:22:7e:33:62:8e:
78:27:61:91:1b:44:2e:ef:8b:e6:0f:57:82:a1:84:5c:6a:ee:
fa:67:d8:16:4b:1e:57:85:89:c3:7b:02:18:9c:e0:0b:cb:95:
53:64:9a:d5:41:7d:b5:f4:fb:9c:b7:a2:a4:cd:96:25:0c:80:
3c:89:85:ca:b5:5a:12:42:1b:9f:60:10:01:41:6f:c9:02:ac:
73:55:05:45:bc:ad:be:98:da:f4:c9:40:53:58:96:6f:59:51:
ba:c8:92:98:34:ce:4a:67:6a:3a:35:2a:86:18:4e:d7:6a:da:
d6:2c:30:5d:c3:42:7e:81:f9:46:f7:41:63:f2:36:32:77:3e:
7f:28:06:35:60:09:13:8b:dd:f1:3f:41:32:c0:c2:ae:25:eb:
a1:f3:96:6c:0f:6d:dc:1d:e0:3c:5f:d1:32:bf:d7:d2:e9:b1:
d0:3a:bd:b3:6b:8c:8a:bc:b6:94:a9:2d:d2:3d:02:0e:13:3b:
75:b4:fb:e9:65:2b:69:ed:9e:cd:9b:23:e5:e0:48:62:42:f4:
f1:57:09:9b:4b:38:3f:db:95:fa:ad:45:63:de:41:eb:b4:93:
67:ed:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 16:24:38 2026 by rpki-client