Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/zdaO5pCjso7r8z8pVgSdFnBWBo8.roa
File: zdaO5pCjso7r8z8pVgSdFnBWBo8.roa (raw, json)
Hash identifier: g2bAlZpTBSFrnbDmE9GZ/X1CRpYTu/NW/NRQm0UK8VQ=
Subject key identifier: CD:D6:8E:E6:90:A3:B2:8E:EB:F3:3F:29:56:04:9D:16:70:56:06:8F
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A06C49F23FCD1C610B17D1DED645918BFD
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/zdaO5pCjso7r8z8pVgSdFnBWBo8.roa
Signing time: Fri 04 Sep 2026 11:59:40 +0000
ROA not before: Fri 04 Sep 2026 11:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 82.206.2.0/24 maxlen: 24
82.206.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:49:f2:3f:cd:1c:61:0b:17:d1:de:d6:45:91:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 4 11:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdd68ee690a3b28eebf33f2956049d167056068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:c6:22:42:87:2c:1f:9f:6e:6a:61:3b:7e:
ed:79:7d:ca:64:9a:2b:ee:52:79:06:b9:25:49:c9:
b3:0e:e1:ab:5c:c8:d9:8d:63:c2:26:91:42:36:11:
b1:a7:79:59:9d:77:87:da:a2:ce:ce:89:1c:7e:2f:
74:3d:54:30:5f:8e:b9:ff:4a:82:0a:a3:f5:4f:31:
f8:38:cf:85:78:20:99:dc:01:97:6e:b7:07:93:f5:
90:aa:73:0a:10:40:9d:f7:f2:98:0b:52:d8:d2:f0:
ce:ac:16:93:2e:5d:6f:51:d0:05:e4:b8:da:ae:15:
f8:f0:45:27:fa:83:73:38:e0:2c:20:2c:84:3e:e7:
40:2a:2a:bd:68:6a:f2:2f:1d:74:93:27:eb:60:99:
d8:3b:86:71:e3:27:25:1b:0c:06:fc:b3:cd:49:4a:
7e:22:93:51:05:bd:b3:dd:1d:fa:bf:bf:32:9f:51:
8e:ba:47:13:1a:5a:28:3e:19:bf:f6:59:b9:17:97:
4a:6a:f0:18:24:d9:ef:3f:44:ab:2a:a6:66:e7:8c:
be:a2:5b:93:22:ae:b8:42:45:3e:2d:5e:cb:fd:64:
03:e7:83:79:68:b3:54:c8:80:45:31:df:5d:9a:22:
c8:9e:db:d2:2e:1a:15:cb:7a:64:15:51:93:fb:7e:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:8E:E6:90:A3:B2:8E:EB:F3:3F:29:56:04:9D:16:70:56:06:8F
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/zdaO5pCjso7r8z8pVgSdFnBWBo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0/23
Signature Algorithm: sha256WithRSAEncryption
82:06:29:f5:ac:db:48:b7:0b:ed:cd:77:e4:b6:dc:2e:e8:3d:
d0:bd:4e:27:03:37:5c:3e:1a:b8:4b:9c:ad:15:9f:e2:35:fc:
02:fa:4a:6a:41:34:b5:3a:b5:8f:12:85:2b:1f:56:ae:0a:b6:
66:82:77:09:56:e9:f5:5f:14:9f:c7:0d:91:64:97:8e:c0:5a:
da:47:05:60:e7:ea:f1:1e:8e:c2:09:16:fc:66:e1:62:dd:78:
90:b9:9c:3c:c9:17:4f:57:68:26:69:dd:52:6f:7f:af:a8:a7:
c6:15:9b:c2:8d:77:91:23:92:8a:e4:70:6c:9b:ad:06:36:7c:
81:95:56:b2:34:6f:1b:cf:77:cf:4a:da:34:e9:b5:e1:a1:c6:
9a:9a:82:87:ed:d0:ae:a0:7c:11:0c:91:b6:bf:14:18:ed:1e:
86:1e:20:9f:9f:76:b3:48:6a:e8:22:d3:8b:e0:1a:a1:e9:0a:
87:3e:c9:8a:da:7f:23:b8:56:58:ae:90:50:67:5a:f9:00:96:
f3:de:ea:f6:f9:67:49:94:33:e3:ee:72:35:e2:11:f0:67:de:
13:5d:1e:9b:0b:5c:3f:ff:b9:cc:f6:5b:ee:ca:f3:77:21:e7:
08:35:9e:d0:ed:38:dd:60:3a:3d:bf:b5:c3:e8:1f:cb:fb:f0:
c7:ca:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:08 2026 by rpki-client