Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa
File: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (raw, json)
Hash identifier: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=
Subject key identifier: DB:3A:0A:14:C7:06:7D:A2:14:22:2D:20:8E:05:48:E9:63:F9:5B:23
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 019C48369FC0D5ACB19F7CDF73FC6CC04814
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa
Signing time: Tue 10 Feb 2026 15:41:05 +0000
ROA not before: Tue 10 Feb 2026 15:41:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:4780:a4::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:36:9f:c0:d5:ac:b1:9f:7c:df:73:fc:6c:c0:48:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Feb 10 15:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db3a0a14c7067da214222d208e0548e963f95b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:98:2e:c6:27:b6:46:03:65:3e:7b:f7:45:
50:ed:c9:d5:9c:ab:af:45:bc:7d:8c:2e:d6:6c:d5:
5d:38:87:8a:1f:a8:33:ab:d4:27:0e:fc:58:c8:05:
5e:9a:e8:02:58:bc:0d:e0:27:0a:7a:84:62:0e:07:
26:5f:53:7a:15:bc:41:49:08:0a:7f:9c:17:0e:db:
f3:26:53:49:e8:4b:b1:a3:e1:3f:93:d3:38:32:e9:
5b:16:78:c4:b6:e4:aa:ae:35:d7:4a:08:20:2a:cd:
bc:10:b8:80:c5:23:f9:33:43:41:d5:43:7f:07:db:
44:71:fc:69:86:3f:02:4b:63:9a:fa:0c:50:45:98:
50:59:7d:3b:60:b6:65:74:7f:4c:cc:d9:e2:dc:3d:
c1:0d:21:b1:58:36:3e:48:0d:79:5a:9e:4a:c8:24:
00:b4:64:98:13:e6:e4:fb:15:59:20:7b:ef:b9:2c:
12:4e:d8:c2:dc:04:99:90:ed:49:43:6b:84:7b:81:
c4:9b:fd:20:f4:d9:21:c1:7b:6d:34:15:47:5f:0e:
a2:bf:c5:25:3f:64:45:8a:81:89:56:65:51:c4:51:
9b:20:6e:16:92:1e:ae:30:0b:f0:0f:4f:ef:fc:63:
29:d9:13:e8:8e:ff:0a:9f:8a:ac:84:35:2e:db:53:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3A:0A:14:C7:06:7D:A2:14:22:2D:20:8E:05:48:E9:63:F9:5B:23
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4780:a4::/46
Signature Algorithm: sha256WithRSAEncryption
40:67:97:2a:0c:d9:81:51:f4:5c:bd:00:39:6e:e2:89:b0:a5:
ea:c8:78:92:ee:6e:5d:41:6d:4a:45:ac:9f:bc:e3:b7:73:e5:
35:8a:bb:cb:7a:2e:be:e9:03:b3:21:9d:6c:17:8e:93:5e:1d:
28:a0:60:b1:03:31:31:7d:5a:4b:f3:17:d8:1a:8a:34:15:bd:
64:64:dc:e8:04:0e:fc:61:d3:e8:91:ca:66:2a:d4:f5:f6:92:
0c:14:d4:1b:b0:d5:87:1a:74:6c:ff:cd:8f:14:68:1c:91:4a:
d9:82:d6:b4:ca:27:b7:43:82:da:85:d3:be:3e:0a:c0:43:78:
03:45:2d:94:7a:5b:5e:9e:32:d0:00:1e:a4:b9:dc:ad:53:c4:
18:00:13:7d:4a:7f:79:e3:62:80:00:d4:dc:42:5f:9b:eb:96:
4d:cf:8b:e5:51:a8:73:4e:54:7b:e8:3c:d9:bd:4c:c5:9d:ef:
77:d9:7b:fd:fa:8f:28:52:4c:bf:dc:bb:8b:27:ec:c9:f9:66:
4a:7b:e8:5e:75:3e:ce:dc:b4:36:a7:5a:3f:90:eb:e5:fc:99:
2f:b4:10:07:e4:d7:58:e1:7b:d7:11:a1:ee:1c:42:15:a5:43:
11:1d:92:c3:47:c4:a9:c2:04:40:42:7e:82:8c:50:1a:fc:b4:
73:0a:92:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:50:48 2026 by rpki-client