Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/_CZRu_XgTJJnfzSMpJxRLFjE0O8.roa
File: _CZRu_XgTJJnfzSMpJxRLFjE0O8.roa (raw, json)
Hash identifier: odo0FJMEud/xZzGBH9uivR0drRE3u2vk/gkGO882mlo=
Subject key identifier: FC:26:51:BB:F5:E0:4C:92:67:7F:34:8C:A4:9C:51:2C:58:C4:D0:EF
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A063181FF17765F8C7AD334F583CD69D6A
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/_CZRu_XgTJJnfzSMpJxRLFjE0O8.roa
Signing time: Wed 02 Sep 2026 17:08:40 +0000
ROA not before: Wed 02 Sep 2026 17:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:a640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:18:1f:f1:77:65:f8:c7:ad:33:4f:58:3c:d6:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 2 17:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc2651bbf5e04c92677f348ca49c512c58c4d0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:05:15:9e:bb:47:22:56:df:6b:6f:06:3e:
d0:24:1a:c8:8c:09:98:c5:32:99:a4:1a:81:bc:0c:
6e:fa:3b:97:8d:23:8f:97:ca:f4:ac:e0:24:06:33:
f3:94:c7:f4:a0:49:76:6a:5d:6a:9a:f3:cd:62:1a:
bd:3e:4e:0a:aa:36:52:ea:a3:43:c1:e2:9a:00:0d:
68:d2:fa:d3:30:68:07:d0:70:83:bb:6e:64:f2:78:
f6:e3:db:0f:80:39:4d:17:4d:ff:05:b7:80:ba:39:
22:ce:bb:34:fb:7d:1e:11:e5:99:e4:e2:a2:8d:9b:
df:e9:7b:03:d3:01:78:99:7c:8b:eb:d6:4e:e1:ca:
33:8e:f4:c1:51:b2:7d:2f:1c:fa:93:89:8f:c5:f4:
31:65:9f:70:de:fb:ba:51:98:83:65:5b:29:1b:ea:
4d:20:a1:16:3a:c8:76:c8:d4:c6:75:38:ea:87:56:
c2:2a:d5:82:03:6c:57:1c:0d:72:9b:62:71:2a:d4:
1d:c4:33:36:47:1b:54:44:3f:0f:55:76:64:74:3e:
f2:cf:dc:e4:56:f1:f7:3b:34:f7:81:23:36:4d:63:
e7:79:36:d6:58:5d:e7:06:f3:e5:c5:fc:49:09:5a:
3f:b8:e2:2e:31:0f:70:23:52:9a:d3:84:b6:fa:a6:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:51:BB:F5:E0:4C:92:67:7F:34:8C:A4:9C:51:2C:58:C4:D0:EF
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/_CZRu_XgTJJnfzSMpJxRLFjE0O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a640::/29
Signature Algorithm: sha256WithRSAEncryption
15:23:3f:4e:35:43:42:bb:69:24:9d:92:53:ad:bd:e9:8b:b7:
98:1e:75:71:ac:2f:2d:c1:1b:a2:de:45:d6:64:33:6c:07:eb:
2d:41:7c:b9:4d:e4:f9:14:ec:bd:d7:16:e7:08:08:17:2f:8f:
56:60:5f:43:3f:95:3b:cc:33:8b:62:27:a3:3b:e0:de:25:8b:
ef:72:41:5f:d8:d2:a8:1d:5b:b1:6b:a8:65:70:13:f3:b4:a3:
9d:fb:5b:1f:68:32:9e:c8:ff:88:b0:36:99:86:14:9f:de:8f:
39:30:cf:90:4a:9b:66:78:b6:e9:ff:57:5e:87:7b:57:b6:37:
95:63:a8:c3:34:44:86:49:83:00:70:d9:e9:6c:3a:81:29:c9:
1f:05:84:32:da:49:6b:82:42:cd:68:8b:8e:a8:b8:d4:04:97:
77:ee:0a:bb:23:ca:15:82:77:da:b8:9b:0c:28:dc:78:44:36:
00:95:c2:e3:e4:d2:8d:dc:b8:d3:1a:79:17:35:ef:9d:0d:19:
b4:8b:95:11:9e:f1:6f:5d:14:80:fd:2a:15:ea:20:e9:55:2f:
46:54:4d:5a:02:3c:46:b1:b4:87:5f:32:13:9d:e8:ef:c5:a4:
b8:bb:75:64:1e:48:bf:52:96:e0:9e:b9:5e:cc:92:72:de:14:
2e:25:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:57:08 2026 by rpki-client