Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zqZm2jiQi_8igRodKzXG4R7JWMs.roa
File: zqZm2jiQi_8igRodKzXG4R7JWMs.roa (raw, json)
Hash identifier: ekwn8Q+Xslj2i1xldaYhCfJT255B8vGx/6aptTPmx9I=
Subject key identifier: CE:A6:66:DA:38:90:8B:FF:22:81:1A:1D:2B:35:C6:E1:1E:C9:58:CB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A144C74ED3707CE4F4F89851A1275F2384
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zqZm2jiQi_8igRodKzXG4R7JWMs.roa
Signing time: Fri 16 Oct 2026 12:54:34 +0000
ROA not before: Fri 16 Oct 2026 12:54:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 2a12:bec4:152c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:c7:4e:d3:70:7c:e4:f4:f8:98:51:a1:27:5f:23:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 16 12:54:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cea666da38908bff22811a1d2b35c6e11ec958cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:ea:35:35:5c:b2:b4:c1:93:a5:4f:ad:7e:
40:2a:09:8f:36:86:1d:54:bd:46:9f:03:53:55:95:
78:69:b5:08:a6:c2:e4:77:09:26:ec:38:f7:e2:90:
4f:98:31:3c:41:f5:7e:01:f7:eb:4c:43:06:3f:32:
66:95:4b:55:7b:9e:9f:c0:51:20:fe:66:cf:b8:5b:
4c:0e:b9:35:d3:79:38:fa:5d:f6:a9:a6:f8:3b:74:
c4:b9:86:cf:99:47:34:20:22:b8:bd:d2:a9:ec:30:
82:2a:28:92:77:3c:18:43:d7:82:33:6b:18:26:b1:
ff:f1:35:f4:cf:78:5c:b0:21:6d:1f:fc:d7:34:d1:
a1:54:d5:f0:43:b7:94:e1:3b:5e:b0:b1:25:cb:09:
aa:a8:66:11:43:66:54:68:d2:36:4b:9e:f3:ed:f5:
f8:a4:20:f4:f4:6f:90:9d:75:b4:9a:1a:7a:1f:54:
fc:41:ae:c4:1b:78:1d:f6:35:bd:d4:42:f3:79:42:
16:dc:ec:3c:85:3c:09:63:1c:f5:81:6b:cf:53:44:
c8:c8:06:fb:16:96:5f:1b:6b:cf:83:03:bc:c9:1f:
33:6d:ff:a2:a0:72:fd:78:29:36:d1:95:d0:55:68:
d1:08:ea:95:31:53:35:d2:b3:8f:55:9e:e1:a2:50:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A6:66:DA:38:90:8B:FF:22:81:1A:1D:2B:35:C6:E1:1E:C9:58:CB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zqZm2jiQi_8igRodKzXG4R7JWMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:152c::/48
Signature Algorithm: sha256WithRSAEncryption
56:53:6e:7b:f6:db:ad:1a:32:10:1e:ca:1d:44:87:fc:93:08:
23:3c:c6:9d:42:79:27:87:2f:19:76:7b:5e:87:e5:da:4a:6d:
99:ca:d0:ee:f5:5f:a5:e8:79:9c:0b:11:b6:ee:20:03:fc:09:
b9:90:e8:7a:5c:60:12:90:e6:65:0d:e6:09:78:bf:00:1d:fd:
73:a0:7a:17:2e:0e:3f:13:49:62:47:e6:30:e2:8a:4a:71:be:
ac:03:c3:48:31:55:ad:19:06:f5:d8:b3:83:18:35:f2:88:ed:
14:c3:78:a4:a4:0d:f8:32:2c:7a:07:71:41:93:fa:4a:83:6e:
43:7a:2f:9c:07:9b:25:87:cc:6e:a2:43:4f:c1:03:55:64:a9:
32:3a:da:34:09:55:47:5f:15:be:69:3a:9d:c2:ff:71:81:2c:
fe:cc:71:b1:3d:85:ce:9c:2a:b8:4e:70:59:d2:bb:b1:95:96:
88:ba:ef:8d:e6:3e:32:f6:49:0b:21:81:64:56:61:7c:ce:76:
b2:ab:9f:62:16:04:20:9b:d4:73:68:76:ef:c3:74:94:b3:33:
74:4e:ff:82:84:9e:17:a4:9b:c4:f5:c6:78:f3:8c:f1:1d:48:
f5:5d:18:fa:b9:aa:01:71:6d:00:09:de:cc:00:69:fc:c8:52:
51:e9:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:33 2026 by rpki-client