Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/zBMcLd77LbRwu-15HrKqi2yyi1Q.roa
File: zBMcLd77LbRwu-15HrKqi2yyi1Q.roa (raw, json)
Hash identifier: iHUOLbWgSZf1fiwd7lTBMIB/vmb/88ZnKoALd8JP6QA=
Subject key identifier: CC:13:1C:2D:DE:FB:2D:B4:70:BB:ED:79:1E:B2:AA:8B:6C:B2:8B:54
Certificate issuer: /CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Certificate serial: 019F03E0DD977FD488084A3D38604B6C4273
Authority key identifier: B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/zBMcLd77LbRwu-15HrKqi2yyi1Q.roa
Signing time: Fri 26 Jun 2026 12:21:36 +0000
ROA not before: Fri 26 Jun 2026 12:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219378
IP address blocks: 2001:678:12b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:e0:dd:97:7f:d4:88:08:4a:3d:38:60:4b:6c:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Validity
Not Before: Jun 26 12:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc131c2ddefb2db470bbed791eb2aa8b6cb28b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:0a:15:f8:aa:ec:48:fc:7c:14:d9:71:a5:
e0:ad:58:95:3f:30:5a:5f:ca:dc:bb:05:03:64:de:
51:f3:d4:62:ea:da:c7:b1:6b:6d:fc:59:f8:23:fd:
0e:52:6d:b4:ac:1a:bc:39:e9:da:4e:dd:56:03:0d:
fa:cb:7f:a2:8c:0f:2b:b5:83:6c:68:27:41:3b:b6:
b5:d4:dd:4e:a7:78:47:32:ca:88:3e:7b:50:e8:ac:
d0:74:9d:4d:93:b6:0e:43:79:f2:59:63:91:77:a8:
c2:38:6f:4e:75:23:af:8c:b3:a6:31:16:f9:8c:95:
ef:aa:bb:98:6a:34:34:e2:d5:68:01:59:38:ab:fd:
71:a8:ee:a8:37:c5:ba:ba:fe:de:3b:66:4f:53:75:
22:ad:47:a2:fc:96:ab:61:6f:84:f8:6d:07:e4:44:
73:5c:60:74:48:c5:45:b4:60:02:c1:28:5e:69:f7:
fd:ef:07:c6:1f:c3:0e:54:a5:26:cf:ee:00:06:8d:
78:b1:84:4d:7f:02:66:9d:e5:a2:b0:78:e5:0f:0c:
c7:df:39:94:4e:58:2c:44:69:f2:10:94:b5:29:40:
e5:aa:96:ec:d6:b1:0c:ce:d7:c8:88:64:67:32:e5:
99:ab:d9:cb:d8:c5:73:1f:f3:c7:56:96:cd:6e:06:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:1C:2D:DE:FB:2D:B4:70:BB:ED:79:1E:B2:AA:8B:6C:B2:8B:54
X509v3 Authority Key Identifier:
keyid:B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/zBMcLd77LbRwu-15HrKqi2yyi1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12b8::/48
Signature Algorithm: sha256WithRSAEncryption
a9:f6:85:0d:ab:d7:42:c7:ef:d7:85:ec:7f:6d:b3:d5:db:03:
82:e3:a3:3a:57:0b:06:95:9f:e0:9a:60:f9:26:32:1a:c1:f7:
ed:f6:1c:b4:97:6f:14:20:30:2b:30:2d:22:77:0b:ea:12:cc:
c9:38:60:0b:10:12:80:d0:de:68:fe:95:d9:21:68:9a:2b:30:
f9:ae:9b:60:11:47:05:a1:37:6c:9d:78:79:d2:f6:1b:b9:59:
6a:a2:79:23:38:02:ce:ce:d2:bf:9b:cd:97:8f:6f:d4:e6:fe:
60:81:97:ba:6c:a6:6a:ab:ca:d0:c1:b8:b2:eb:77:78:30:18:
a6:13:a6:e8:9d:de:74:29:a3:12:54:ee:44:2b:03:ad:4b:9c:
9f:69:89:f5:8f:10:1b:40:f8:c2:98:67:8f:86:22:ba:07:16:
be:b6:bd:18:4e:91:62:a4:5a:ac:0b:10:ce:05:0d:6e:0e:72:
01:6e:ee:9f:7a:22:63:48:21:80:c3:99:cc:e7:09:15:1a:97:
d2:1f:b1:a5:9d:d1:64:35:1b:23:c1:3a:51:73:9f:17:53:fb:
a8:e9:00:9d:51:b5:3d:ac:b5:40:12:74:6a:49:6f:e2:3a:bb:
5b:89:60:3e:2a:3a:6f:c3:ff:d0:6c:cd:45:ff:8d:41:e1:fc:
c2:2c:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:09:06 2026 by rpki-client