Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZJDuKB4vIP8IdziRgq6NOoZG9-Q.roa
File: ZJDuKB4vIP8IdziRgq6NOoZG9-Q.roa (raw, json)
Hash identifier: IjftnAQXT5KC0MnD8SvnxYIfUS1nt5sgxyZOZh8lGHU=
Subject key identifier: 64:90:EE:28:1E:2F:20:FF:08:77:38:91:82:AE:8D:3A:86:46:F7:E4
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0E6F6943C84A2511045E272E4E186A243
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZJDuKB4vIP8IdziRgq6NOoZG9-Q.roa
Signing time: Mon 28 Sep 2026 07:41:54 +0000
ROA not before: Mon 28 Sep 2026 07:41:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41798
IP address blocks: 170.168.33.0/24 maxlen: 24
170.168.34.0/24 maxlen: 24
170.168.100.0/24 maxlen: 24
170.168.101.0/24 maxlen: 24
170.168.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:f6:94:3c:84:a2:51:10:45:e2:72:e4:e1:86:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 28 07:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6490ee281e2f20ff0877389182ae8d3a8646f7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:ec:b5:04:c2:2a:36:75:4c:d3:e2:13:0a:
58:5f:bf:5b:7b:b0:2e:e5:a0:10:77:a1:2f:ea:8c:
0e:67:a0:eb:13:38:b7:50:f5:6d:69:56:e9:26:a9:
9e:2e:56:52:7d:52:41:e3:79:36:7e:0f:0f:00:d1:
31:5e:2e:1a:37:8e:f0:4c:69:52:d3:79:af:f1:48:
5f:cf:cc:21:21:2f:51:49:e6:cb:35:a6:e9:30:93:
5b:00:39:6f:46:d3:18:a6:a3:aa:a9:00:15:66:ed:
ba:a0:ef:12:5b:7a:6d:18:f0:f8:82:0a:e0:92:61:
69:42:60:8d:95:6c:d1:1c:53:fb:ab:b2:d7:96:60:
7e:ba:62:5d:8f:3f:c4:55:16:f4:a7:a5:bc:0c:f8:
8c:c3:da:b3:6d:a2:f8:69:bc:83:ae:f2:79:09:06:
43:8a:8e:30:db:61:8e:56:f8:ce:d3:9a:b5:44:62:
8e:30:fd:64:46:44:88:db:3a:8d:fc:c8:33:75:b6:
74:c4:ed:57:e5:10:2f:2d:16:76:55:cf:f5:27:d0:
4a:f4:a5:ff:16:52:68:eb:1f:18:68:00:98:c3:a0:
b5:76:4d:80:ce:4b:a3:ed:4b:79:ae:18:c7:3f:b1:
0f:ff:90:f2:6c:c9:b6:75:b2:46:91:c2:91:5a:c2:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:EE:28:1E:2F:20:FF:08:77:38:91:82:AE:8D:3A:86:46:F7:E4
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZJDuKB4vIP8IdziRgq6NOoZG9-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.33.0-170.168.34.255
170.168.100.0/23
170.168.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:94:64:99:6c:50:77:9b:b2:c1:cc:5c:5d:8f:c3:a1:ad:05:
02:eb:6e:fd:1a:b5:de:5c:f4:18:5e:6e:13:47:41:cd:6e:05:
0f:0a:92:c9:d0:f1:86:bc:7f:49:7f:c0:f9:67:1f:9b:3e:96:
b9:2d:90:a0:9e:47:8a:fd:17:b1:13:1c:01:e0:f9:0d:a8:29:
02:f6:13:56:8c:a4:44:47:18:bd:e6:92:bd:74:93:5e:06:4d:
41:68:da:42:76:7f:2b:cd:c9:c0:2c:cb:0e:70:f3:77:5e:57:
9e:d8:5b:a6:62:6b:23:32:e3:6a:31:28:4c:48:b1:40:ba:64:
dd:70:37:1c:a4:e1:d8:37:66:23:b4:ab:c9:f9:b6:5d:9a:2f:
30:9b:56:fe:e6:c4:7c:12:a3:a3:a8:10:14:c9:62:63:6b:90:
5e:3d:3a:3b:48:ed:90:e5:1f:cb:7b:36:9c:49:a2:31:8f:25:
e4:69:20:bd:3d:19:8c:37:c5:f2:09:9a:2d:db:eb:20:0a:5a:
1d:02:bb:2f:b4:e3:16:7b:86:25:68:de:58:72:b9:0e:80:db:
bf:af:81:65:ca:cd:20:a2:bc:11:ab:32:81:de:30:60:ae:b0:
7f:27:64:5f:b7:47:57:5e:63:7d:f0:97:65:45:4c:ee:15:ab:
21:ff:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:05 2026 by rpki-client