Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/zVzmtIW79vYzVdxl3Ev_k-D8lRM.roa
File: zVzmtIW79vYzVdxl3Ev_k-D8lRM.roa (raw, json)
Hash identifier: rsZZLUT7xX0MX/vLrZe0txU4g4LajyO19vYkrLkauuc=
Subject key identifier: CD:5C:E6:B4:85:BB:F6:F6:33:55:DC:65:DC:4B:FF:93:E0:FC:95:13
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1564CD83BEEE72D00C361F4181CA52965
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/zVzmtIW79vYzVdxl3Ev_k-D8lRM.roa
Signing time: Mon 19 Oct 2026 22:33:58 +0000
ROA not before: Mon 19 Oct 2026 22:33:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 2a06:9801:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:4c:d8:3b:ee:e7:2d:00:c3:61:f4:18:1c:a5:29:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 19 22:33:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd5ce6b485bbf6f63355dc65dc4bff93e0fc9513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:04:ff:41:4f:58:b3:e4:e2:47:6a:2d:c6:
3b:e8:99:b4:f7:ed:3f:51:5b:10:d4:e9:de:ad:20:
44:e7:c4:ba:3c:e4:88:b9:52:a8:5c:60:13:95:d9:
77:13:b3:f8:11:a9:27:14:b7:1d:87:16:f1:f2:8a:
31:b4:42:72:32:b6:1e:5e:2e:ac:0a:de:10:4d:ae:
90:c3:94:a4:43:0d:e9:91:96:46:d3:42:c9:6d:8c:
9c:bc:3c:b1:6d:7a:38:81:af:aa:67:43:d7:e6:9f:
46:59:eb:70:76:d9:0c:86:e8:5b:25:e2:f0:1e:f7:
a5:55:95:59:32:5b:2e:53:76:77:cf:c3:50:b8:07:
67:ca:4f:5c:0d:18:15:e2:76:a0:51:82:7e:73:ef:
6c:af:e7:94:73:5a:78:3a:d9:8f:dc:a2:73:49:8e:
0f:46:e3:15:2b:a7:81:78:61:2d:10:2f:8e:67:0e:
2d:cd:ae:f2:e4:60:7a:af:d8:8e:09:ed:f7:44:51:
07:75:5a:a9:b7:10:57:ae:78:e0:0a:4c:e2:a1:d1:
79:94:eb:a3:a8:57:47:1f:ec:7e:94:6a:1e:e3:8a:
7e:06:9d:e9:ed:6a:e1:7d:b6:9f:3c:fa:40:33:6d:
4e:fa:a3:28:bc:d9:1a:dd:a9:da:b6:84:91:f4:d4:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:E6:B4:85:BB:F6:F6:33:55:DC:65:DC:4B:FF:93:E0:FC:95:13
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/zVzmtIW79vYzVdxl3Ev_k-D8lRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:3000::/40
Signature Algorithm: sha256WithRSAEncryption
96:a1:61:75:7b:33:6b:5c:ef:5d:95:6c:4d:43:2f:e3:7a:df:
61:26:1d:14:d3:58:c8:a5:a0:1f:ff:88:ae:b7:65:58:58:03:
2d:be:80:79:c4:aa:ad:f8:f7:43:19:5d:5b:9e:8f:05:d3:16:
10:b8:f8:8a:2d:3b:cd:58:d8:ac:e4:ad:42:5e:16:13:96:99:
e3:0d:f3:84:ac:e5:3b:b6:15:2a:a7:18:23:ec:b3:f4:02:7c:
3e:5e:3f:a4:2a:cb:20:b0:0d:36:93:a7:a6:59:0d:a6:84:25:
7d:89:eb:7c:3f:a6:a6:3a:97:17:8a:f1:4d:9e:5d:d8:ca:9d:
93:24:a8:1e:12:fa:0c:28:f9:5d:c7:f7:11:63:56:2e:23:1f:
60:6c:3e:01:28:a7:5c:7c:ca:d4:c4:6b:38:ce:aa:ab:ca:5d:
20:06:40:31:11:40:b9:cf:f1:57:fe:41:78:72:b0:85:e8:bd:
a7:5e:1f:e3:23:72:f6:dc:fe:3b:f1:39:90:f9:3f:4d:46:69:
6c:9b:25:b8:ac:4b:a8:bc:1d:c8:22:19:89:9c:6d:f5:e6:9b:
5f:56:54:00:7c:2b:1e:8f:a8:70:0f:9e:fc:fb:60:b8:c6:cc:
44:9b:96:08:e3:43:44:96:45:0a:71:b1:a3:ae:0d:f3:1c:04:
5a:72:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:37 2026 by rpki-client