Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/ZTjij_xarY3uSsETPrHbCQMjDbc.roa
File: ZTjij_xarY3uSsETPrHbCQMjDbc.roa (raw, json)
Hash identifier: xPTovrvehpwr+F/o3Md/DIUCvNOGAiWZfmbE0SFBPKU=
Subject key identifier: 65:38:E2:8F:FC:5A:AD:8D:EE:4A:C1:13:3E:B1:DB:09:03:23:0D:B7
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 019CB3FD495FDAE890D789C6B6432BBE1566
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/ZTjij_xarY3uSsETPrHbCQMjDbc.roa
Signing time: Tue 03 Mar 2026 13:57:26 +0000
ROA not before: Tue 03 Mar 2026 13:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24679
IP address blocks: 2a01:6780:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:fd:49:5f:da:e8:90:d7:89:c6:b6:43:2b:be:15:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Mar 3 13:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6538e28ffc5aad8dee4ac1133eb1db0903230db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:40:99:21:d6:37:95:47:b6:63:bb:f1:87:
85:76:43:60:a7:66:e5:50:c8:01:97:a4:0a:fc:0a:
14:2e:e5:17:07:be:36:8c:5f:ab:ae:5b:63:5e:14:
05:d9:a8:43:49:c3:55:ef:aa:9f:53:14:20:4c:79:
21:68:4d:0e:d1:eb:d8:0e:67:40:08:27:04:d9:d2:
f7:96:63:1f:3d:15:32:89:2e:8c:27:ce:21:3a:ce:
0c:ef:e0:00:ae:3a:22:66:15:04:d1:58:3e:da:38:
9b:57:09:04:0d:4f:2a:6f:dd:84:c7:4a:8d:3e:be:
2a:5c:bc:1e:3b:0a:08:96:1c:25:c6:0d:d0:8a:6b:
d9:15:96:bb:2c:22:67:cc:3e:5f:84:7d:77:f3:56:
9d:e9:1e:7d:68:b0:87:67:ca:eb:53:de:59:c8:42:
df:46:94:70:42:74:92:cd:de:a3:02:ba:9b:3b:46:
2a:94:e7:ce:19:09:cb:63:b5:ac:ab:db:4e:67:f3:
21:c3:c8:c4:bd:0d:97:92:88:57:3f:95:6d:d2:1b:
04:db:b9:98:c2:ed:38:a7:38:53:5e:e0:ec:92:6e:
f0:38:09:e9:84:6a:da:86:2b:ee:82:4a:d6:34:00:
da:53:2d:cc:51:af:4d:83:4f:9e:c7:ca:96:91:30:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:38:E2:8F:FC:5A:AD:8D:EE:4A:C1:13:3E:B1:DB:09:03:23:0D:B7
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/ZTjij_xarY3uSsETPrHbCQMjDbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6780:2::/48
Signature Algorithm: sha256WithRSAEncryption
52:eb:31:20:2b:eb:46:43:2f:44:3a:2d:57:ee:3a:f3:e9:b3:
94:f2:b4:c7:9c:97:d7:19:8f:38:3d:1a:34:1b:31:0c:7e:82:
e2:ce:cd:bb:4e:a5:69:5d:ba:0d:7f:5c:f4:e2:75:22:3c:da:
f0:dd:83:a5:8f:85:f2:f7:b0:bc:0d:5b:a0:02:71:da:96:e6:
2d:20:0a:0c:11:5a:95:f6:17:9a:91:12:34:b4:5a:cf:cd:03:
3c:8d:84:4a:01:11:b6:04:ce:0e:76:bc:15:2d:36:1d:a5:20:
3f:ab:d1:e0:53:4a:76:fb:3e:94:d5:35:a3:82:27:a6:df:2e:
89:09:17:84:69:f0:8e:0e:43:1a:26:0f:13:15:e0:84:56:68:
60:86:cb:cb:c1:95:68:3b:7b:06:1f:62:54:99:df:dc:52:a6:
e8:80:4a:93:73:1e:9b:a6:e3:7e:a4:7b:7b:bb:16:89:0f:c3:
8f:0e:af:96:5e:85:86:c3:7f:9b:dd:b9:6f:9d:f9:18:d5:28:
99:b3:94:49:a5:ff:e7:94:14:16:b2:d8:11:a1:02:ed:e5:51:
57:bc:e5:78:a6:3f:fa:5f:9a:67:62:3b:7e:cb:b4:50:4b:69:
3f:51:6d:3c:89:d8:63:a6:24:9a:d6:55:07:eb:eb:46:a0:fa:
35:96:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 04:06:28 2026 by rpki-client