Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zR2sqjjgnsAxC2ccB5ZmLbxd6Z8.roa
File: zR2sqjjgnsAxC2ccB5ZmLbxd6Z8.roa (raw, json)
Hash identifier: OITLylWk735qRPv5EjEHS0xoRlgP1xeJQ0EZNCD8ID8=
Subject key identifier: CD:1D:AC:AA:38:E0:9E:C0:31:0B:67:1C:07:96:66:2D:BC:5D:E9:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019C853F5FBE0B546A72AFFE103C289F45D5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zR2sqjjgnsAxC2ccB5ZmLbxd6Z8.roa
Signing time: Sun 22 Feb 2026 12:07:28 +0000
ROA not before: Sun 22 Feb 2026 12:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210957
IP address blocks: 2a0e:97c0:970::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 20:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:85:3f:5f:be:0b:54:6a:72:af:fe:10:3c:28:9f:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 22 12:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd1dacaa38e09ec0310b671c0796662dbc5de99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:0a:b4:c4:9d:6c:19:fa:dc:01:b0:b1:40:
ae:5f:c0:93:a6:6a:cf:e1:99:e2:c6:99:3a:77:40:
7e:c8:8d:a0:1e:6a:1d:34:2b:ef:a7:4c:79:0a:9f:
60:42:4a:b7:cb:74:08:bf:b9:f6:8a:95:f0:5e:12:
81:ef:b0:c9:03:a6:59:0f:27:80:78:3d:b4:48:2a:
48:9e:90:ce:b2:63:da:07:b0:7f:e0:8e:9f:36:b4:
fe:90:7f:22:05:07:2c:18:64:36:80:9c:4f:e7:4c:
fe:27:35:13:fb:6b:13:34:4a:b7:49:3d:7e:81:e6:
8f:e7:97:a7:4f:40:22:5a:58:9a:71:95:cd:83:57:
b9:91:b1:bf:8d:f0:80:90:c6:e1:f4:ba:c8:c1:cb:
ce:89:b3:c2:bb:5d:fc:18:a4:52:28:de:65:ca:42:
78:27:84:f9:16:e4:7f:a8:30:93:aa:12:81:ce:72:
97:df:22:76:48:a2:83:9e:fb:9b:5b:21:1f:30:8f:
5b:d0:04:6f:a3:51:3c:01:55:e9:59:be:9b:4d:56:
56:18:49:0d:08:f3:4c:70:c0:a8:48:d5:92:9e:09:
59:61:3d:7d:49:89:da:ba:b4:c5:5a:84:c8:0e:a1:
76:c9:f7:d9:13:1e:bd:fd:96:ee:55:0f:59:45:22:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:AC:AA:38:E0:9E:C0:31:0B:67:1C:07:96:66:2D:BC:5D:E9:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zR2sqjjgnsAxC2ccB5ZmLbxd6Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:970::/44
Signature Algorithm: sha256WithRSAEncryption
18:56:19:43:75:5d:b2:d7:81:5b:27:77:f2:79:e2:98:f9:30:
0f:da:39:ac:60:f5:23:0f:f7:36:21:e6:69:8d:26:ef:33:9d:
57:d4:ff:d4:5d:35:37:b6:34:e2:f5:91:7b:5c:3a:ac:ff:0a:
97:b8:be:2b:ad:93:2b:75:05:97:90:11:e3:24:24:9a:39:8b:
a6:1a:e4:d6:78:c1:cd:4c:ab:aa:41:6f:17:61:19:eb:e7:c0:
18:6e:09:9c:e0:91:44:6d:ae:4e:b1:37:c8:c6:a0:68:e9:cf:
da:75:c8:96:4e:87:4b:d4:b1:b7:d7:10:01:30:0b:9e:81:af:
8f:5b:0c:62:c0:c6:94:83:0c:bf:92:45:37:c5:02:fe:cd:05:
2e:2e:92:66:89:52:bf:66:25:4c:e3:a1:1b:32:41:4e:6f:99:
35:06:e7:67:2e:24:4f:4f:e0:74:d1:45:0a:78:6a:dd:02:54:
14:84:7c:b9:cf:0b:12:82:77:fb:78:a6:4e:dd:c6:3f:e2:0e:
9a:59:36:7d:33:8d:24:58:98:78:eb:83:81:a3:ac:6a:1a:b2:
63:00:43:ec:a9:1a:7a:f5:13:f3:cf:4f:41:b4:1d:c8:f7:81:
1c:d2:17:bb:fa:fd:ea:fe:80:8a:46:19:57:c9:9d:9f:67:30:
ba:fb:f8:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZyFP1++C1Rqcq/+EDwon0XVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwMjIyMTIwNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDFkYWNhYTM4ZTA5ZWMwMzEwYjY3MWMwNzk2NjYyZGJjNWRlOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvIKtMSdbBn63AGwsUCuX8CTpmrP
4Znixpk6d0B+yI2gHmodNCvvp0x5Cp9gQkq3y3QIv7n2ipXwXhKB77DJA6ZZDyeA
eD20SCpInpDOsmPaB7B/4I6fNrT+kH8iBQcsGGQ2gJxP50z+JzUT+2sTNEq3ST1+
geaP55enT0AiWliacZXNg1e5kbG/jfCAkMbh9LrIwcvOibPCu138GKRSKN5lykJ4
J4T5FuR/qDCTqhKBznKX3yJ2SKKDnvubWyEfMI9b0ARvo1E8AVXpWb6bTVZWGEkN
CPNMcMCoSNWSnglZYT19SYnaurTFWoTIDqF2yffZEx69/ZbuVQ9ZRSIocwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM0drKo44J7AMQtnHAeWZi28XemfMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvelIyc3Fqamduc0F4QzJjY0I1Wm1MYnhkNlo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAlw
MA0GCSqGSIb3DQEBCwUAA4IBAQAYVhlDdV2y14FbJ3fyeeKY+TAP2jmsYPUjD/c2
IeZpjSbvM51X1P/UXTU3tjTi9ZF7XDqs/wqXuL4rrZMrdQWXkBHjJCSaOYumGuTW
eMHNTKuqQW8XYRnr58AYbgmc4JFEba5OsTfIxqBo6c/adciWTodL1LG31xABMAue
ga+PWwxiwMaUgwy/kkU3xQL+zQUuLpJmiVK/ZiVM46EbMkFOb5k1BudnLiRPT+B0
0UUKeGrdAlQUhHy5zwsSgnf7eKZO3cY/4g6aWTZ9M40kWJh464OBo6xqGrJjAEPs
qRp69RPzz09BtB3I94Ec0he7+v3q/oCKRhlXyZ2fZzC6+/jI
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:50 2026 by rpki-client