Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZbHiCOqc4fiLICXZWOtFA8XtGJ8.roa
File: ZbHiCOqc4fiLICXZWOtFA8XtGJ8.roa (raw, json)
Hash identifier: x4vlRxoEenAkwjECvkdCIl7cD4hKQK3zUcOJ9kAHb0s=
Subject key identifier: 65:B1:E2:08:EA:9C:E1:F8:8B:20:25:D9:58:EB:45:03:C5:ED:18:9F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A14169919B774639D5EF971AF4E76B7C46
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZbHiCOqc4fiLICXZWOtFA8XtGJ8.roa
Signing time: Thu 15 Oct 2026 21:13:19 +0000
ROA not before: Thu 15 Oct 2026 21:13:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215290
IP address blocks: 2a0d:ad44::/32 maxlen: 32
2a11:b4c0::/32 maxlen: 32
2a12:6482::/32 maxlen: 32
2a12:bc84::/32 maxlen: 32
2a12:d801::/32 maxlen: 32
2a12:f986::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:69:91:9b:77:46:39:d5:ef:97:1a:f4:e7:6b:7c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 15 21:13:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65b1e208ea9ce1f88b2025d958eb4503c5ed189f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:ea:f4:f1:a3:4d:7b:82:73:f8:57:be:59:
6e:15:34:9e:fc:63:b2:6c:de:f5:b1:c9:78:6a:5b:
a5:ce:e8:d8:c7:43:8f:cd:e9:f0:96:26:c8:ab:c3:
43:8e:92:f1:93:6a:25:9d:0f:87:08:6d:87:3b:6f:
3b:74:63:0d:a4:43:95:98:d1:a4:3f:c6:6a:bd:cd:
bd:ec:82:b3:1e:1d:6d:5c:dc:54:a6:c8:05:89:74:
d3:76:23:83:d0:63:8c:99:0e:a7:bf:cd:f9:93:8f:
82:b2:ae:e3:86:37:51:69:8d:89:32:7c:b4:a0:ec:
fe:f2:ef:b8:6c:cb:03:6b:e9:d7:8d:a8:fc:10:ae:
b7:5c:2e:82:6d:41:b6:1f:f8:ad:93:ab:3d:2b:87:
43:3c:67:2e:b6:b8:62:a5:4e:03:db:67:bc:10:18:
a2:a7:e5:a3:f9:b4:03:e2:9f:be:c2:24:9a:eb:7c:
0b:56:3c:72:9a:75:dc:86:d0:2c:66:4c:67:2c:37:
44:a8:3f:71:d6:45:0f:4e:e8:50:6d:9a:c4:ac:99:
b0:5e:78:a8:5f:4d:99:8c:15:a9:cf:d5:ed:df:cf:
cf:32:e5:b2:c9:ab:e6:3b:d9:2e:92:6d:94:ee:92:
3d:37:4d:4b:09:0a:61:38:d5:1e:af:3d:f8:5c:d6:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:E2:08:EA:9C:E1:F8:8B:20:25:D9:58:EB:45:03:C5:ED:18:9F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZbHiCOqc4fiLICXZWOtFA8XtGJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad44::/32
2a11:b4c0::/32
2a12:6482::/32
2a12:bc84::/32
2a12:d801::/32
2a12:f986::/32
Signature Algorithm: sha256WithRSAEncryption
49:66:0d:89:aa:b9:97:b7:18:ab:ed:2d:35:fd:98:f0:8c:c2:
ca:bd:48:d9:01:a3:26:fa:73:f8:78:c2:5f:1e:3a:89:f3:ab:
fb:d1:3c:15:e9:35:47:6e:1f:9d:df:26:20:7f:71:98:d4:8f:
1c:90:4f:03:69:c6:7c:fd:89:fe:40:a3:8e:ba:c8:d1:ff:8a:
cf:35:30:bc:68:d0:14:37:dd:36:38:89:e7:71:f7:2e:d7:d8:
e0:f0:86:1a:db:be:b8:af:59:2a:c0:34:6c:8e:47:ab:00:7f:
b3:6f:a0:2c:8d:9e:24:92:40:60:4a:2b:c3:ce:4a:ce:22:ff:
8f:78:ef:80:cd:ec:81:ae:88:e5:06:be:bc:b9:de:02:17:84:
6d:d3:2c:12:07:e9:5c:69:d1:9d:8d:24:a1:94:fc:cb:ba:91:
68:ea:a3:ec:6f:31:4d:7f:68:7d:2e:7e:2d:b2:b0:cd:c6:a1:
8f:14:14:27:e8:87:14:2b:3f:ed:82:f2:3f:87:70:6c:99:91:
bc:04:99:d0:24:9d:87:23:6b:5a:8f:8a:07:a7:35:31:5f:7c:
e8:3e:f7:1e:6b:dc:23:a4:72:9a:c6:e8:89:b9:8f:02:d5:03:
2d:99:39:97:13:38:8c:4a:7c:26:17:ab:d7:3b:e7:21:29:1a:
96:7f:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:23 2026 by rpki-client