Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ZW49T-EF9sD4oMGX0teIq89-wdQ.roa
File: ZW49T-EF9sD4oMGX0teIq89-wdQ.roa (raw, json)
Hash identifier: ecFVWg/f7sqDB7B5E7OkA3m4Sw9Gn9wf9T3KAIQS1B8=
Subject key identifier: 65:6E:3D:4F:E1:05:F6:C0:F8:A0:C1:97:D2:D7:88:AB:CF:7E:C1:D4
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019F002B777D1A9C57A81396AA65871F772C
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ZW49T-EF9sD4oMGX0teIq89-wdQ.roa
Signing time: Thu 25 Jun 2026 19:04:36 +0000
ROA not before: Thu 25 Jun 2026 19:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:2b:77:7d:1a:9c:57:a8:13:96:aa:65:87:1f:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jun 25 19:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=656e3d4fe105f6c0f8a0c197d2d788abcf7ec1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:78:59:89:78:d7:ca:29:2b:6a:3e:fe:06:
6b:6a:0e:d3:fb:97:5c:5a:f4:2c:68:05:cb:ae:c3:
f4:95:fe:e6:28:7e:7a:83:9f:dd:3c:52:1b:4f:ce:
98:2a:4b:dc:b3:65:79:dc:72:45:03:af:89:01:18:
3c:6c:7a:cd:91:fe:3f:20:18:36:39:b1:0a:86:99:
37:cf:67:1b:ed:32:23:b9:e9:d1:15:be:31:be:2e:
c8:77:8d:0a:18:eb:85:40:30:9a:cb:1c:99:09:7c:
49:46:cc:12:06:cd:c1:e3:00:9d:f7:29:28:6b:c9:
55:c8:bd:de:e2:43:1c:a6:4c:ff:7d:8a:6d:13:39:
af:a4:91:ac:74:1e:88:a6:59:40:39:17:0d:82:f4:
2e:c5:71:31:58:bf:b6:98:0e:bd:a4:9f:2f:d7:95:
57:cb:46:b8:18:23:2e:9c:1e:bd:cf:49:ca:18:62:
4d:61:b8:1a:6a:6e:b1:11:73:4d:78:76:b2:2e:42:
f3:56:c1:23:4b:ed:6c:b3:64:e1:bc:9a:a6:90:7a:
b0:c7:c7:12:11:90:ce:84:1f:2d:19:76:87:bc:ed:
56:eb:a3:ee:f8:54:25:91:ca:d2:03:ba:01:4a:06:
9a:ed:51:92:b0:85:bb:f7:90:d3:7a:5b:cb:79:c6:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6E:3D:4F:E1:05:F6:C0:F8:A0:C1:97:D2:D7:88:AB:CF:7E:C1:D4
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ZW49T-EF9sD4oMGX0teIq89-wdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f4c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:6d:46:ac:7a:79:0c:6b:5e:e1:08:e5:c0:5f:67:d0:38:e1:
f5:cb:ac:95:37:6c:fe:8d:54:3c:e7:5f:23:82:8c:f4:ac:55:
3e:58:74:63:dc:5a:42:02:e8:66:b1:47:df:f8:ce:52:73:2a:
c8:07:2f:d4:bd:7c:b2:11:cd:0d:7b:2b:ed:50:4d:da:0b:08:
d8:3b:20:81:96:c2:8d:03:96:43:7a:88:0d:cc:35:ed:be:b6:
19:5e:0e:ef:fb:c3:86:d5:9b:e6:c8:5f:41:9b:c8:14:b4:2e:
00:7b:ce:c2:71:7b:cc:77:c6:00:b9:31:75:2e:c9:23:69:72:
a0:58:b1:e8:c8:11:76:1b:60:fd:10:92:d1:85:a1:b9:ec:71:
b4:d1:a6:ae:c8:e4:2f:56:99:53:a4:3d:02:5c:2f:41:6e:83:
fd:95:88:75:b1:3d:c6:0d:92:b4:b2:ab:e9:cb:e0:56:9c:89:
79:12:49:ed:be:3e:e8:74:3d:55:f7:bc:62:a1:69:ae:53:cc:
d5:25:6e:4f:9c:f8:a8:7e:69:08:35:5e:62:79:1c:a1:08:8b:
90:e5:79:72:33:26:3f:36:db:f6:6b:4b:f6:bc:0f:0e:58:37:
e0:f5:b6:2a:e4:d3:93:c0:1b:1e:8a:6d:92:7c:d4:ca:4b:61:
0c:e4:00:ac
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8AK3d9GpxXqBOWqmWHH3csMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjYwNjI1MTkwNDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTZlM2Q0ZmUxMDVmNmMwZjhhMGMxOTdkMmQ3ODhhYmNmN2VjMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU54WYl418opK2o+/gZrag7T+5dc
WvQsaAXLrsP0lf7mKH56g5/dPFIbT86YKkvcs2V53HJFA6+JARg8bHrNkf4/IBg2
ObEKhpk3z2cb7TIjuenRFb4xvi7Id40KGOuFQDCayxyZCXxJRswSBs3B4wCd9yko
a8lVyL3e4kMcpkz/fYptEzmvpJGsdB6IpllAORcNgvQuxXExWL+2mA69pJ8v15VX
y0a4GCMunB69z0nKGGJNYbgaam6xEXNNeHayLkLzVsEjS+1ss2ThvJqmkHqwx8cS
EZDOhB8tGXaHvO1W66Pu+FQlkcrSA7oBSgaa7VGSsIW795DTelvLecZqrQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGVuPU/hBfbA+KDBl9LXiKvPfsHUMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvWlc0OVQtRUY5c0Q0b01HWDB0ZUlxODktd2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgH0wDAN
BgkqhkiG9w0BAQsFAAOCAQEAkW1GrHp5DGte4QjlwF9n0Djh9cuslTds/o1UPOdf
I4KM9KxVPlh0Y9xaQgLoZrFH3/jOUnMqyAcv1L18shHNDXsr7VBN2gsI2DsggZbC
jQOWQ3qIDcw17b62GV4O7/vDhtWb5shfQZvIFLQuAHvOwnF7zHfGALkxdS7JI2ly
oFix6MgRdhtg/RCS0YWhuexxtNGmrsjkL1aZU6Q9AlwvQW6D/ZWIdbE9xg2StLKr
6cvgVpyJeRJJ7b4+6HQ9Vfe8YqFprlPM1SVuT5z4qH5pCDVeYnkcoQiLkOV5cjMm
Pzbb9mtL9rwPDlg34PW2KuTTk8AbHoptknzUykthDOQArA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:54 2026 by rpki-client