Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZGPP0vsRQm6JGvh9kZ3A2QXXSyI.roa
File: ZGPP0vsRQm6JGvh9kZ3A2QXXSyI.roa (raw, json)
Hash identifier: EAMUFZVvWb0ilVQRb8Z3YVb2cUnTwdcDBbIt984C3ik=
Subject key identifier: 64:63:CF:D2:FB:11:42:6E:89:1A:F8:7D:91:9D:C0:D9:05:D7:4B:22
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECC4B005E8FEE4BB05EEAC00F3D288A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZGPP0vsRQm6JGvh9kZ3A2QXXSyI.roa
Signing time: Mon 14 Sep 2026 07:23:03 +0000
ROA not before: Mon 14 Sep 2026 07:23:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201354
IP address blocks: 2a0e:97c0:b70::/48 maxlen: 48
2a0e:97c0:b71::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:cc:4b:00:5e:8f:ee:4b:b0:5e:ea:c0:0f:3d:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:23:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6463cfd2fb11426e891af87d919dc0d905d74b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:c8:59:ae:b4:41:35:45:df:73:29:40:42:
9f:7f:d2:a4:4e:98:ad:92:b4:12:6d:38:ca:ca:26:
d4:cc:4f:c7:62:06:2c:f0:12:d7:1e:d0:04:bd:f1:
e9:39:80:a9:d3:2c:53:2d:50:6a:73:9f:f3:65:e1:
c3:df:9a:ee:85:c1:f3:37:ec:02:90:73:fa:9b:3c:
0c:5b:e4:e3:4d:8a:af:0e:c0:1f:09:34:20:fe:f2:
3c:4c:02:99:44:e3:1b:f8:d2:1d:73:d4:31:99:ef:
77:08:b4:fa:74:16:87:98:23:8f:80:93:d9:a9:37:
fa:3e:69:1d:6c:a5:d2:f5:f3:88:f2:fd:42:9e:27:
3f:5b:01:b9:5a:80:67:b7:67:05:a9:6c:16:20:f3:
ab:e8:6c:19:aa:b2:0d:94:44:86:59:9c:1c:73:21:
c4:9a:13:8f:94:ff:5e:0a:92:11:ab:f1:18:4d:3f:
9c:6f:74:ef:75:55:21:ef:13:7f:20:33:ca:df:a6:
34:bb:f4:be:08:0c:18:30:9f:d8:65:cd:dd:5f:b0:
a8:ca:88:e3:1e:3f:e1:19:c9:f6:12:b1:61:eb:45:
a3:1c:19:0c:52:6d:1f:a1:13:78:7a:b4:b4:dc:01:
4c:f6:3c:40:c7:e3:86:66:b6:23:e8:41:c9:13:74:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:CF:D2:FB:11:42:6E:89:1A:F8:7D:91:9D:C0:D9:05:D7:4B:22
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZGPP0vsRQm6JGvh9kZ3A2QXXSyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b70::/47
Signature Algorithm: sha256WithRSAEncryption
4b:7b:b4:70:df:b3:2b:b5:8b:d1:35:87:36:4c:cd:62:1d:4a:
9d:a4:96:e4:8e:84:e5:9d:9a:a0:cf:56:9a:2c:26:1f:ea:24:
5d:62:82:2f:c8:f4:20:f5:9a:3a:22:4f:5f:5a:48:ab:8e:dd:
91:11:bc:49:28:45:2f:9a:99:d4:c6:6d:cf:56:08:1c:1d:03:
90:fe:4f:8a:c0:f0:25:db:2f:0f:f4:64:bc:91:38:00:f9:63:
eb:7d:03:67:09:4b:af:ac:e9:1b:54:49:23:3b:06:f3:57:1a:
10:b0:9c:ba:d9:92:56:e7:76:69:e4:2b:62:25:9a:6a:a1:ba:
ac:f9:ff:ce:1b:27:be:5e:9b:65:50:3e:9f:81:0b:4c:92:17:
b0:9d:a3:16:55:7d:b4:42:03:2c:a7:ab:b1:43:02:7e:1c:06:
c9:4e:79:ce:4d:31:a9:ad:51:c6:11:ce:ab:26:a3:3b:d9:36:
77:c8:2f:b5:b5:e9:86:47:54:d8:a0:cf:24:42:6b:2e:f5:84:
8f:40:f5:3a:42:c9:a0:cc:72:3f:69:c5:fb:24:d6:98:70:64:
7e:1f:35:34:ee:62:01:f8:89:ce:31:03:b1:09:96:56:70:f6:
80:25:9a:1f:e6:df:19:63:38:6a:32:99:a2:44:be:91:b9:2c:
8c:e4:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:16 2026 by rpki-client