Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zbx--phRY8wyhJGDOQ-QwmgMO78.roa
File: zbx--phRY8wyhJGDOQ-QwmgMO78.roa (raw, json)
Hash identifier: 2LbB5/MVtfNeDCIYnZd9eDyUmLUpgWVWfbPYueIDoTE=
Subject key identifier: CD:BC:7E:FA:98:51:63:CC:32:84:91:83:39:0F:90:C2:68:0C:3B:BF
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EDC4FA877364A51CF3639468C3BA32C2E
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zbx--phRY8wyhJGDOQ-QwmgMO78.roa
Signing time: Thu 18 Jun 2026 19:57:48 +0000
ROA not before: Thu 18 Jun 2026 19:57:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206540
IP address blocks: 2a14:c380:13::/48 maxlen: 48
2a14:c380:c10::/44 maxlen: 48
2a14:c380:c10::/48 maxlen: 48
2a14:c380:c11::/48 maxlen: 48
2a14:c380:c15::/48 maxlen: 48
2a14:c380:c1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:4f:a8:77:36:4a:51:cf:36:39:46:8c:3b:a3:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 18 19:57:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdbc7efa985163cc32849183390f90c2680c3bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:c6:1f:89:34:a4:b8:5f:c2:0b:08:05:f5:
71:2f:ee:ae:dd:3c:de:0f:c0:10:ac:51:e4:05:4d:
22:d9:0d:fd:bc:39:4d:4e:0d:57:3e:e9:61:8b:b2:
cb:dc:20:5a:91:ad:54:ca:e2:17:ca:8c:c2:ff:fb:
47:63:ae:bd:77:66:a3:c9:25:f2:40:8d:f0:1d:57:
95:e1:cd:90:a4:f3:66:61:79:3b:9f:e9:36:f0:8a:
94:3f:76:4b:5c:05:4d:51:55:8f:9d:02:e0:e7:fb:
07:c9:1d:67:74:66:bb:8e:1b:df:57:54:e9:59:5d:
34:00:5a:23:d0:78:78:7b:54:eb:b4:ab:97:1c:3d:
50:72:55:07:d5:b5:b1:64:0b:13:cf:dc:0e:43:51:
8d:46:92:bb:d1:3e:d3:11:be:d9:2e:b0:6e:fb:26:
14:62:ff:72:63:b2:53:f6:99:c3:24:07:b8:0c:c4:
4a:07:f7:05:e0:20:8b:9f:b1:ee:e5:d4:5b:2a:38:
ee:15:f8:c5:8d:3f:3e:31:c8:44:8a:2d:94:9b:7a:
c4:10:b7:3a:48:c3:d0:96:ea:21:f7:96:62:b7:84:
8f:a4:01:9c:0b:39:5a:fb:b0:17:aa:f4:c7:ea:8c:
c1:c3:f0:2b:d0:74:55:21:01:10:34:ab:29:a5:2c:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:7E:FA:98:51:63:CC:32:84:91:83:39:0F:90:C2:68:0C:3B:BF
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zbx--phRY8wyhJGDOQ-QwmgMO78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:13::/48
2a14:c380:c10::/44
Signature Algorithm: sha256WithRSAEncryption
59:a9:fa:53:45:74:b9:87:9c:81:2a:ab:41:ac:87:26:71:5d:
ad:aa:56:5d:d6:2a:2a:91:0c:63:d7:f6:99:c9:38:ac:92:ea:
3b:1f:9b:5d:7c:41:68:bc:aa:3d:1b:b0:c7:6d:41:f6:47:75:
57:0a:ea:10:94:83:eb:08:55:26:9a:20:47:b4:28:2c:7e:68:
4a:c3:6e:e1:b7:91:72:1e:bf:e3:95:62:5c:75:8f:32:24:0d:
8f:55:8a:0d:2c:fe:94:97:7c:0f:bb:43:bf:f5:c8:8a:1f:2c:
7d:f3:14:71:98:1d:78:0c:4e:69:a0:d1:6b:cb:79:0d:57:a6:
4f:65:b9:7f:fd:9d:63:fa:91:f2:f6:d2:fc:11:b4:49:d9:26:
ab:01:fa:b3:cc:ef:66:48:3b:5d:be:43:6f:d6:0d:c6:e5:31:
59:b4:c0:04:ee:68:57:f5:f8:ba:74:d1:7a:82:13:17:35:2b:
e3:dc:25:b2:1e:39:d9:c7:79:79:88:3b:7c:ff:8d:1e:46:a9:
84:59:66:3a:c5:28:bc:26:16:b2:0f:4e:6f:d4:ae:2b:47:f8:
69:13:13:62:8c:ef:35:4a:b5:9c:63:82:87:62:be:c0:87:5c:
33:65:31:f9:4f:f9:43:09:e3:11:61:95:26:c6:f2:59:74:14:
e2:d8:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 06:27:16 2026 by rpki-client