Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/CzSO4rLkoqRCYiUwCUVJ-JfXDOU.roa
File: CzSO4rLkoqRCYiUwCUVJ-JfXDOU.roa (raw, json)
Hash identifier: SClLLPAbDrUVomSbxSTyKBbiATv7wEL0aGKB1aDIy/4=
Subject key identifier: 0B:34:8E:E2:B2:E4:A2:A4:42:62:25:30:09:45:49:F8:97:D7:0C:E5
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 01A00F5F6FDE49F1E76FD44E737392326CE2
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/CzSO4rLkoqRCYiUwCUVJ-JfXDOU.roa
Signing time: Mon 17 Aug 2026 10:58:27 +0000
ROA not before: Mon 17 Aug 2026 10:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 2a0c:2e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:5f:6f:de:49:f1:e7:6f:d4:4e:73:73:92:32:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Aug 17 10:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b348ee2b2e4a2a442622530094549f897d70ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:d5:9e:19:9a:ff:a3:aa:cd:30:7f:b7:c0:
1a:43:c8:f2:59:da:ab:05:e0:b9:09:ac:72:e7:67:
00:5c:19:09:e8:33:ef:d5:44:f7:c8:ae:e6:09:2f:
f3:2a:4d:21:1f:23:0d:7b:6f:b5:7d:5c:c9:24:94:
c9:49:52:10:e5:0a:27:96:06:6c:94:3d:60:76:e7:
c9:b7:1e:8f:b8:04:c5:21:33:e0:98:4c:42:a7:fd:
f5:7e:11:a2:d2:99:5c:23:96:d3:b7:3b:3b:e1:75:
a8:1d:4d:b8:ef:5c:1d:a9:cb:62:9d:4d:7b:dd:da:
46:fb:83:24:09:9d:4f:78:8c:2e:0b:0e:c7:b7:db:
cf:a6:66:8d:eb:81:c2:28:99:d1:cf:60:a4:b2:26:
d7:3c:c8:bb:48:63:c4:46:a0:f5:93:ac:ee:b1:f8:
63:fa:c0:37:1f:6e:50:17:6e:88:18:10:75:5c:ba:
7f:a3:70:4d:30:d8:d0:2d:16:c2:6a:48:9c:16:ae:
a8:b1:c1:d1:38:08:01:5c:6d:64:20:24:dc:8b:f9:
0d:0a:0c:c3:65:f9:10:70:c9:3e:52:d4:7b:dd:2f:
f3:c6:85:16:ef:a7:de:61:27:a5:ad:ae:39:23:11:
54:fe:3c:4a:d3:44:5d:ce:7c:cf:92:f7:b4:de:80:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:34:8E:E2:B2:E4:A2:A4:42:62:25:30:09:45:49:F8:97:D7:0C:E5
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/CzSO4rLkoqRCYiUwCUVJ-JfXDOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
ac:92:14:11:f8:80:c2:47:9e:3c:82:b6:80:55:b6:a7:f4:b3:
44:7e:8f:54:11:18:b4:05:6f:8c:34:72:da:a1:e2:4c:82:7b:
5a:a2:f9:a8:aa:c1:c1:94:b7:6e:2b:f7:29:a6:26:c1:61:43:
b0:34:f8:d0:02:3d:b7:ff:63:9a:fc:2b:1d:84:ff:ed:02:72:
68:2b:0c:b0:c2:7e:e6:d4:d7:a2:40:87:55:81:70:5a:fb:93:
98:45:38:c9:c2:28:c7:f9:bf:c8:fa:3a:78:3f:2a:d1:0e:fe:
c0:dc:98:64:98:6e:73:ae:eb:64:13:d8:04:c6:ab:aa:43:64:
c6:64:31:72:47:e3:72:2b:68:c3:c8:a7:33:f6:c2:d2:e9:da:
bd:76:84:45:57:af:90:c4:bf:bf:8d:17:26:f1:61:4a:2b:58:
f6:f8:6c:07:b5:52:fa:64:42:42:29:f8:ed:06:b0:fe:97:ad:
79:9e:89:92:e1:17:dd:0f:ae:b9:6a:cd:d2:fa:d7:9d:68:25:
49:3b:bb:39:49:a2:74:a2:bf:56:e4:57:fa:74:21:3a:55:96:
e4:d4:82:84:02:93:f3:60:77:68:1a:31:0f:0b:81:c7:0c:90:
f1:f5:25:7d:77:3a:2e:58:fe:3f:ef:4b:62:d7:74:ae:26:41:
41:a0:e3:d5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaAPX2/eSfHnb9ROc3OSMmziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi
M2M0ZmQwHhcNMjYwODE3MTA1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjM0OGVlMmIyZTRhMmE0NDI2MjI1MzAwOTQ1NDlmODk3ZDcwY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqLVnhma/6OqzTB/t8AaQ8jyWdqr
BeC5Caxy52cAXBkJ6DPv1UT3yK7mCS/zKk0hHyMNe2+1fVzJJJTJSVIQ5QonlgZs
lD1gdufJtx6PuATFITPgmExCp/31fhGi0plcI5bTtzs74XWoHU2471wdqctinU17
3dpG+4MkCZ1PeIwuCw7Ht9vPpmaN64HCKJnRz2CksibXPMi7SGPERqD1k6zusfhj
+sA3H25QF26IGBB1XLp/o3BNMNjQLRbCakicFq6oscHROAgBXG1kICTci/kNCgzD
ZfkQcMk+UtR73S/zxoUW76feYSelra45IxFU/jxK00RdznzPkve03oAb9wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAs0juKy5KKkQmIlMAlFSfiX1wzlMB8GA1UdIwQY
MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt
MDU2NWYzMzdkY2JlLzEvQ3pTTzRyTGtvcVJDWWlVd0NVVkotSmZYRE9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl
LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgwuADAN
BgkqhkiG9w0BAQsFAAOCAQEArJIUEfiAwkeePIK2gFW2p/SzRH6PVBEYtAVvjDRy
2qHiTIJ7WqL5qKrBwZS3biv3KaYmwWFDsDT40AI9t/9jmvwrHYT/7QJyaCsMsMJ+
5tTXokCHVYFwWvuTmEU4ycIox/m/yPo6eD8q0Q7+wNyYZJhuc67rZBPYBMarqkNk
xmQxckfjcitow8inM/bC0unavXaERVevkMS/v40XJvFhSitY9vhsB7VS+mRCQin4
7Qaw/peteZ6JkuEX3Q+uuWrN0vrXnWglSTu7OUmidKK/VuRX+nQhOlWW5NSChAKT
82B3aBoxDwuBxwyQ8fUlfXc6Llj+P+9LYtd0riZBQaDj1Q==
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:50:36 2026 by rpki-client