Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/zx_1x9mGv8xP_YxwGgGmt4dLeGg.roa
File: zx_1x9mGv8xP_YxwGgGmt4dLeGg.roa (raw, json)
Hash identifier: z4+wwot045yIW+YJOmfAe7mT5yg/xtDOr/ofAmCDvDc=
Subject key identifier: CF:1F:F5:C7:D9:86:BF:CC:4F:FD:8C:70:1A:01:A6:B7:87:4B:78:68
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 01A13BB9C7C00BE5EFD77DB1E45EB7DD6B7A
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/zx_1x9mGv8xP_YxwGgGmt4dLeGg.roa
Signing time: Wed 14 Oct 2026 18:43:13 +0000
ROA not before: Wed 14 Oct 2026 18:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:1bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:b9:c7:c0:0b:e5:ef:d7:7d:b1:e4:5e:b7:dd:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Oct 14 18:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf1ff5c7d986bfcc4ffd8c701a01a6b7874b7868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:b6:14:12:e2:26:f3:d1:6c:a0:27:3e:20:
b1:9f:84:3e:d4:da:e0:a9:ec:fd:4a:a8:7e:e5:fd:
cb:4a:e1:7b:d3:dd:90:58:62:1c:8e:cc:d0:b3:33:
d1:5d:48:9e:f3:c8:da:0b:c5:60:b5:41:82:23:20:
0a:8d:41:28:8d:88:9d:ef:73:6d:b1:c9:9a:3d:07:
5c:12:06:7d:32:28:cb:e6:be:cd:ea:60:0c:ac:27:
98:0e:50:54:64:a7:ab:94:37:ba:b7:43:f2:15:6d:
88:48:f1:96:2c:d6:90:b6:db:15:f7:2c:fc:df:a0:
37:33:86:fb:2c:4d:61:e6:f0:d2:89:b7:a5:42:c5:
2b:ca:fb:55:2a:73:2b:da:dc:f1:93:62:ea:f3:5f:
c9:6d:2a:3f:d3:06:c6:c3:fc:b3:5c:40:8c:ca:0e:
0f:89:cc:c5:41:4d:94:a8:0b:f4:3f:f5:ad:ff:40:
55:da:75:57:1f:51:ba:4b:bc:0a:62:fa:30:9a:ea:
97:bb:72:ff:b2:59:37:8b:fe:e5:fb:f9:8d:25:31:
63:14:87:63:c9:59:fd:52:e9:86:a5:2d:e6:97:db:
2f:33:18:a2:cb:9b:35:0e:bc:d2:89:0a:64:e1:2e:
f9:0f:3f:14:f7:93:3e:66:ce:e8:c8:51:f7:98:7a:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:F5:C7:D9:86:BF:CC:4F:FD:8C:70:1A:01:A6:B7:87:4B:78:68
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/zx_1x9mGv8xP_YxwGgGmt4dLeGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
09:69:b9:57:a5:d6:8a:8b:27:e7:63:d9:d1:81:e4:f4:5d:f6:
c8:d1:6f:4e:56:c0:80:c7:6d:0a:bd:e4:10:2e:d1:ff:62:d0:
81:ce:59:57:f3:f3:35:7c:48:11:e3:03:eb:75:37:29:ca:38:
7c:e1:ae:1a:ae:56:e1:54:75:e1:3e:21:8b:11:bb:46:ab:c9:
86:55:49:0b:ad:5d:9b:88:a9:35:7a:2e:b8:49:78:2f:ed:45:
2f:65:2b:bd:7e:40:1b:0f:a6:d6:32:3a:6a:5a:5c:d6:5c:2c:
a6:2a:d0:ce:76:d6:ff:c2:42:81:83:3b:15:f5:84:00:ec:6a:
81:82:65:bf:33:63:fb:ef:ba:0e:76:f7:ef:ab:d6:a2:3f:56:
2d:4b:17:77:b4:53:b6:00:7c:7e:2b:d8:23:6c:31:6a:fb:51:
26:c7:db:9b:be:3d:c6:0c:aa:79:be:f4:c4:86:15:e7:41:5c:
75:61:99:05:22:0a:20:13:82:7a:c0:86:b8:dc:f7:70:01:98:
68:ee:8d:cc:b4:aa:b4:7a:4e:5b:a5:cc:83:6d:8d:5d:09:35:
5e:4e:3c:54:af:88:33:27:dd:82:e7:19:32:93:4c:6e:cc:0f:
7b:09:c4:a7:e2:54:ce:15:84:f1:5d:5f:91:ec:2f:73:91:6f:
20:ca:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:39 2026 by rpki-client