Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/zxIIHKC_V7QekKn3nKhWfkbBtVE.roa
File: zxIIHKC_V7QekKn3nKhWfkbBtVE.roa (raw, json)
Hash identifier: W8igIMnslDQCAmud2GC/MjAZ9PURieJe5OwKvKFbuRU=
Subject key identifier: CF:12:08:1C:A0:BF:57:B4:1E:90:A9:F7:9C:A8:56:7E:46:C1:B5:51
Certificate issuer: /CN=ac1fc1fd31bbd93b771f06bb38a54e8ec24d077a
Certificate serial: 01A15FA2BE771CDB6FCC39CCD91420D32159
Authority key identifier: AC:1F:C1:FD:31:BB:D9:3B:77:1F:06:BB:38:A5:4E:8E:C2:4D:07:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/zxIIHKC_V7QekKn3nKhWfkbBtVE.roa
Signing time: Wed 21 Oct 2026 18:04:23 +0000
ROA not before: Wed 21 Oct 2026 18:04:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42032
IP address blocks: 2a11:f400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:a2:be:77:1c:db:6f:cc:39:cc:d9:14:20:d3:21:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1fc1fd31bbd93b771f06bb38a54e8ec24d077a
Validity
Not Before: Oct 21 18:04:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf12081ca0bf57b41e90a9f79ca8567e46c1b551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:f8:5b:1d:d8:fc:0f:59:97:7f:01:d1:3f:
34:27:db:03:4d:df:d5:fc:8e:50:b6:90:ed:76:19:
82:60:26:87:c2:b4:75:bb:fe:20:0d:2d:61:1b:f5:
fe:97:6f:f4:ff:30:6e:75:93:16:4d:cd:ee:56:75:
a9:4e:ef:a3:4a:df:6f:f7:9b:f6:8b:ac:4e:26:84:
89:5a:55:95:e8:5a:64:61:23:46:1b:fd:af:45:b4:
a4:2e:51:f8:6a:bf:31:94:b8:22:3b:57:a9:6f:3d:
93:6c:a1:8f:27:28:d5:39:61:94:c5:fc:51:b8:49:
9c:e3:1e:c6:69:1d:ba:b5:7f:5c:f7:b7:98:a5:e4:
eb:2f:40:41:af:5b:ac:49:f9:30:bf:9f:6b:24:d0:
98:20:77:b4:14:d1:a7:a0:50:30:52:b7:14:c7:2f:
3f:d8:bf:56:e5:f8:38:f6:53:69:4f:5d:64:c8:0f:
c0:38:ea:3a:ec:f6:80:dd:93:f2:85:45:83:49:e6:
c8:a2:ec:11:56:be:6b:8b:5c:37:2a:a9:19:c9:50:
71:fa:d1:04:1a:55:82:72:12:28:b8:45:e7:fc:0a:
bb:ef:b2:15:36:de:fb:54:37:e5:2c:0e:9b:34:54:
cd:cb:f7:92:18:2e:85:89:b1:31:29:4b:0a:13:71:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:12:08:1C:A0:BF:57:B4:1E:90:A9:F7:9C:A8:56:7E:46:C1:B5:51
X509v3 Authority Key Identifier:
keyid:AC:1F:C1:FD:31:BB:D9:3B:77:1F:06:BB:38:A5:4E:8E:C2:4D:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/zxIIHKC_V7QekKn3nKhWfkbBtVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/795c08-0091-4cfc-87e9-340f35b053c3/1/rB_B_TG72Tt3Hwa7OKVOjsJNB3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f400::/29
Signature Algorithm: sha256WithRSAEncryption
4c:79:16:c1:78:b4:f2:93:68:5b:e4:47:d1:a5:f4:0c:ae:e3:
8e:5e:1d:5f:b3:1c:d4:c5:b9:4e:4c:c2:00:a7:97:1f:a2:4c:
74:2a:13:c5:35:5c:29:06:aa:e0:21:12:52:75:4a:b6:b7:eb:
c9:e1:cd:71:49:57:ac:80:7f:25:ee:ba:2c:db:24:99:fc:10:
f2:f5:5d:09:0f:83:14:8d:c7:f9:7f:2f:6f:aa:79:27:ce:a3:
ec:a7:d7:a8:2f:7a:21:cb:c9:ae:97:f9:f7:19:03:ed:4f:6d:
12:f5:53:36:53:f3:8b:6d:9c:b6:52:39:82:ae:4a:d7:65:9f:
76:6d:c0:e6:41:10:b7:57:cb:b2:9e:cd:21:74:6a:27:8f:ff:
3d:99:ff:60:21:24:5a:42:21:9b:1c:d7:08:8f:ef:be:02:95:
55:06:95:cf:66:49:5f:eb:f1:4b:56:e3:69:3d:c6:a0:56:43:
bb:94:eb:05:ce:96:55:a2:e0:d1:68:ab:66:67:b4:f2:a5:d8:
d6:5a:b9:26:7f:a7:c5:4d:ee:ad:6a:20:f5:f0:a8:22:be:1a:
83:86:45:2e:3c:4d:3b:d4:1b:16:bd:05:f4:2f:4d:40:c7:4b:
4f:c6:0d:2e:85:78:9f:19:c7:03:a5:0c:81:23:59:fd:93:2c:
bc:d1:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:07 2026 by rpki-client