Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zvhXjiKY3AJiG82N32DUhIRWn5U.roa
File: zvhXjiKY3AJiG82N32DUhIRWn5U.roa (raw, json)
Hash identifier: cuOvp+zVwUtg46EXed4ZWx9Qt/fq+O+7mJsar39h88c=
Subject key identifier: CE:F8:57:8E:22:98:DC:02:62:1B:CD:8D:DF:60:D4:84:84:56:9F:95
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A0A9F519E57346921FA99BC36CFEDA9DA5
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zvhXjiKY3AJiG82N32DUhIRWn5U.roa
Signing time: Wed 16 Sep 2026 11:23:27 +0000
ROA not before: Wed 16 Sep 2026 11:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218654
IP address blocks: 2a03:5840:166::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:f5:19:e5:73:46:92:1f:a9:9b:c3:6c:fe:da:9d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 16 11:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cef8578e2298dc02621bcd8ddf60d48484569f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:e7:d9:e5:4c:e9:71:51:ce:30:82:0b:44:
f5:c2:24:0d:33:82:a0:f8:44:a9:a5:9b:d4:f6:12:
86:28:b9:2f:b8:f2:13:8e:26:88:14:06:ab:ad:1a:
b6:fb:18:c9:8c:b1:3c:59:f4:01:00:0c:b0:b1:9a:
74:76:5f:e7:e0:f2:72:a8:77:3b:dd:97:e6:a3:90:
9b:70:d1:4c:66:f5:94:5a:59:8c:9b:cd:4d:23:8f:
d0:0d:81:2d:46:90:07:1c:49:6f:14:36:25:71:f5:
cb:79:98:c4:fd:cf:9b:3f:46:dc:66:d1:65:19:a5:
a9:a6:ff:db:30:86:b7:11:cb:f3:30:71:4d:54:1c:
28:37:34:ae:a7:25:bf:5f:2d:50:5b:dd:d3:c2:06:
23:38:33:ca:da:2e:08:9e:cc:5f:6c:cc:5b:48:1b:
25:e1:99:c7:1e:b2:3f:64:30:76:a3:46:cb:80:aa:
3e:8c:b2:fb:ac:2f:82:83:1c:e6:f5:e2:3d:60:f2:
de:7b:ce:19:6f:d6:8e:04:71:dc:17:1f:4d:4f:3b:
9d:31:1b:b8:8f:b5:3b:d2:51:22:86:9d:17:bb:f5:
5d:47:c8:3d:db:7f:ea:34:c6:d7:15:fc:c0:5f:2f:
42:83:b9:83:ce:f7:a6:3e:e8:59:94:82:41:21:48:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:57:8E:22:98:DC:02:62:1B:CD:8D:DF:60:D4:84:84:56:9F:95
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zvhXjiKY3AJiG82N32DUhIRWn5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:166::/48
Signature Algorithm: sha256WithRSAEncryption
21:15:30:96:9f:de:b2:71:7f:11:96:70:ea:e7:bd:0d:2b:fa:
02:83:3f:96:33:8a:f6:bb:b1:b9:ad:3d:2f:c1:e9:f1:9a:ad:
68:7f:84:c9:52:39:45:07:8a:8d:db:9e:1d:d7:b5:f3:8b:52:
95:7b:e2:7c:91:b4:be:04:7b:2c:2c:64:9f:30:4d:18:76:ce:
d6:fc:e9:97:a4:81:b7:70:b2:b8:09:cb:10:0a:46:d9:9d:d8:
c6:1a:9e:8b:e0:84:ea:34:29:93:51:43:96:d1:ab:6f:0c:5f:
22:ce:64:92:0b:57:15:22:42:b6:57:20:6c:53:53:e6:7c:a8:
29:7e:43:fa:80:99:31:52:b1:74:4a:06:d7:33:d2:48:9e:0d:
8c:90:4e:92:bc:26:a7:c3:18:45:10:28:59:94:2b:db:2f:69:
f2:6f:3c:64:64:f5:09:c1:93:22:4d:1c:2e:58:57:d5:16:6b:
a5:11:cb:b5:ad:19:78:1b:eb:3e:2c:c5:f3:0f:91:b5:f1:01:
41:1f:d4:b1:58:06:84:d9:24:ba:93:3e:da:19:16:63:70:6e:
a3:e4:70:22:1d:40:73:52:38:e4:51:41:21:a0:06:d2:71:bb:
ce:7b:c2:d2:10:02:e5:5f:8e:4f:be:54:af:65:48:58:02:7a:
cc:1c:48:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCp9Rnlc0aSH6mbw2z+2p2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwOTE2MTEyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWY4NTc4ZTIyOThkYzAyNjIxYmNkOGRkZjYwZDQ4NDg0NTY5Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPHn2eVM6XFRzjCCC0T1wiQNM4Kg
+ESppZvU9hKGKLkvuPITjiaIFAarrRq2+xjJjLE8WfQBAAywsZp0dl/n4PJyqHc7
3Zfmo5CbcNFMZvWUWlmMm81NI4/QDYEtRpAHHElvFDYlcfXLeZjE/c+bP0bcZtFl
GaWppv/bMIa3EcvzMHFNVBwoNzSupyW/Xy1QW93TwgYjODPK2i4InsxfbMxbSBsl
4ZnHHrI/ZDB2o0bLgKo+jLL7rC+Cgxzm9eI9YPLee84Zb9aOBHHcFx9NTzudMRu4
j7U70lEihp0Xu/VdR8g923/qNMbXFfzAXy9Cg7mDzvemPuhZlIJBIUi/PQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM74V44imNwCYhvNjd9g1ISEVp+VMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvenZoWGppS1kzQUppRzgyTjMyRFVoSVJXbjVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAFm
MA0GCSqGSIb3DQEBCwUAA4IBAQAhFTCWn96ycX8RlnDq570NK/oCgz+WM4r2u7G5
rT0vwenxmq1of4TJUjlFB4qN254d17Xzi1KVe+J8kbS+BHssLGSfME0Yds7W/OmX
pIG3cLK4CcsQCkbZndjGGp6L4ITqNCmTUUOW0atvDF8izmSSC1cVIkK2VyBsU1Pm
fKgpfkP6gJkxUrF0SgbXM9JIng2MkE6SvCanwxhFEChZlCvbL2nybzxkZPUJwZMi
TRwuWFfVFmulEcu1rRl4G+s+LMXzD5G18QFBH9SxWAaE2SS6kz7aGRZjcG6j5HAi
HUBzUjjkUUEhoAbScbvOe8LSEALlX45PvlSvZUhYAnrMHEge
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:45:33 2026 by rpki-client