Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/ZiDPogPrQOpuh0FPglTkQ8pXUz8.roa
File: ZiDPogPrQOpuh0FPglTkQ8pXUz8.roa (raw, json)
Hash identifier: YCXIv4lJCwsQYTuVQhQQmTXD83p/Au5A6G0CssWCKHE=
Subject key identifier: 66:20:CF:A2:03:EB:40:EA:6E:87:41:4F:82:54:E4:43:CA:57:53:3F
Certificate issuer: /CN=b75691e7a6c94415ec83a3e6aeb46f0920ba0afa
Certificate serial: 019F2368628265806D0276CF560139CDB934
Authority key identifier: B7:56:91:E7:A6:C9:44:15:EC:83:A3:E6:AE:B4:6F:09:20:BA:0A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/ZiDPogPrQOpuh0FPglTkQ8pXUz8.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214347
IP address blocks: 2001:678:7b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:62:82:65:80:6d:02:76:cf:56:01:39:cd:b9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75691e7a6c94415ec83a3e6aeb46f0920ba0afa
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6620cfa203eb40ea6e87414f8254e443ca57533f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:24:d2:5d:df:d2:f9:cf:6f:66:80:1f:63:
fd:b5:3d:ca:30:f7:23:65:68:5a:10:b1:fa:48:91:
84:24:01:ed:f5:2c:b7:44:f6:42:08:6f:f0:c1:08:
dc:eb:b6:a4:ae:72:2d:7a:fb:62:8f:2e:77:66:8b:
9a:bf:ca:b0:bf:0e:ff:12:a9:c0:2b:20:66:33:c3:
d5:bb:0f:e7:fc:64:ef:8f:99:6a:c3:9e:57:d7:3b:
8d:bf:c3:06:25:83:d4:37:0f:98:29:bf:b4:b3:e2:
bb:95:7d:73:44:61:f7:75:98:80:d3:82:d7:11:44:
27:fa:0d:fe:50:97:83:dc:16:cc:1d:51:1a:81:5d:
39:b6:cc:53:d1:b4:e5:36:ed:7c:0e:aa:28:17:f5:
9b:fa:a5:43:66:60:67:69:e4:7d:d4:b4:69:41:d1:
2a:15:fd:88:ae:ce:ed:19:3f:b3:32:39:c0:7c:e9:
f4:b6:4f:af:f8:28:2b:a8:83:06:d3:31:d9:c2:88:
5c:ef:95:e7:65:68:4c:3c:45:aa:18:f3:c9:62:65:
ad:bb:47:db:45:2f:d8:c1:fa:89:91:39:a6:bf:43:
67:14:77:dd:85:4b:6d:69:60:63:be:8c:41:35:f0:
f5:08:77:8c:0d:98:c2:c0:0a:3a:81:75:56:bc:60:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:20:CF:A2:03:EB:40:EA:6E:87:41:4F:82:54:E4:43:CA:57:53:3F
X509v3 Authority Key Identifier:
keyid:B7:56:91:E7:A6:C9:44:15:EC:83:A3:E6:AE:B4:6F:09:20:BA:0A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/ZiDPogPrQOpuh0FPglTkQ8pXUz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7b4::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e4:fe:94:04:af:1a:f1:ee:1a:6f:fe:f0:84:41:0f:99:b2:
7c:d2:b1:63:7b:07:89:a0:ac:91:c5:1c:4d:5f:28:e1:2c:24:
53:d3:cb:8c:b8:3c:f4:c9:ee:a0:8f:38:7a:3e:33:c3:53:f9:
a2:50:37:e8:78:bd:4b:49:d2:35:ad:48:e9:7a:04:24:d9:ff:
ef:a3:96:03:9a:23:ed:bc:13:a4:9e:77:67:17:e1:28:35:eb:
b1:00:41:fa:7a:c6:d5:ad:08:80:4d:cc:a2:c4:44:6c:4a:58:
d8:c4:80:bf:22:ca:ac:ca:40:2c:f0:4e:7e:13:53:5b:7d:7c:
b5:78:24:4d:ea:21:f5:14:7b:63:cf:85:a4:41:6f:0f:db:b0:
39:8a:7d:68:c7:2d:0a:63:00:71:13:24:b9:77:41:d9:70:f3:
c1:84:5e:d1:e8:bf:6b:32:52:8b:fb:9e:68:b6:b6:dd:1b:9d:
d0:28:c5:25:ac:e9:4f:52:19:8f:02:01:e2:17:15:c3:24:4d:
2d:cc:ca:ba:6c:69:59:2e:7f:e0:af:c1:6f:de:36:a3:f7:99:
93:35:48:c7:65:5b:54:57:dc:11:5f:71:f2:f7:e6:4a:f9:32:
11:5c:23:a2:ce:25:56:5d:3f:a4:d6:c2:1b:af:4c:6b:7d:92:
21:ad:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:37 2026 by rpki-client