Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/z0nXWSkz_JLKLHJCkKA9U67FdGc.roa
File: z0nXWSkz_JLKLHJCkKA9U67FdGc.roa (raw, json)
Hash identifier: xae8oodNdDVC2s/8+DAGGBsXdSpIKWBcfhO7zRcgtWY=
Subject key identifier: CF:49:D7:59:29:33:FC:92:CA:2C:72:42:90:A0:3D:53:AE:C5:74:67
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 01A01E9F3E58036A9F1F44F09A16D4566D46
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/z0nXWSkz_JLKLHJCkKA9U67FdGc.roa
Signing time: Thu 20 Aug 2026 10:02:27 +0000
ROA not before: Thu 20 Aug 2026 10:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59253
IP address blocks: 2a00:9d20:53::/48 maxlen: 48
2a00:9d20:5353::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:9f:3e:58:03:6a:9f:1f:44:f0:9a:16:d4:56:6d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Aug 20 10:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf49d7592933fc92ca2c724290a03d53aec57467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:6e:8d:ed:9d:f6:43:28:26:86:36:7a:8c:
66:cd:06:f6:50:f1:1c:b9:14:e4:02:1c:09:e2:7e:
69:63:e2:09:3d:5a:ab:14:ab:95:04:fc:7d:bb:8f:
f9:b0:0b:cb:20:ab:10:56:8d:f8:8d:28:a8:49:07:
3d:62:62:b2:76:88:f1:9e:66:ae:4d:02:4f:94:20:
fd:53:4f:d9:d0:cb:ab:93:5a:91:d9:91:da:0d:97:
60:d9:14:19:55:2e:0a:b6:ec:ef:5c:ce:66:22:eb:
be:d9:4f:2c:6b:6f:4f:00:8f:0b:a0:b3:df:03:fb:
eb:bd:b2:d6:50:a3:54:f8:b1:8b:62:10:89:c3:df:
c0:cb:8f:28:18:ce:78:f5:f1:ef:37:bf:57:41:c7:
6f:f2:87:e9:8c:58:61:05:45:1f:0d:30:be:08:12:
b3:b3:d0:ef:70:07:50:7f:81:1f:53:35:ab:f1:94:
53:76:e8:3e:ef:26:49:4b:29:5b:91:8c:fa:ef:1f:
d1:aa:c0:65:63:e8:79:ab:8a:bb:53:45:d4:7e:33:
fe:6d:11:09:b1:66:32:a3:27:02:9b:9c:bb:f3:9e:
87:45:6d:be:f6:b2:cb:cc:19:ff:bc:4e:22:dc:7e:
6f:cc:32:f4:2f:27:74:e2:83:c5:10:9c:24:19:70:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:D7:59:29:33:FC:92:CA:2C:72:42:90:A0:3D:53:AE:C5:74:67
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/z0nXWSkz_JLKLHJCkKA9U67FdGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:9d20:53::/48
2a00:9d20:5353::/48
Signature Algorithm: sha256WithRSAEncryption
c0:40:7f:ab:2d:fd:89:1b:36:ff:26:56:41:51:25:0b:30:51:
91:c5:fc:c3:cb:0f:8e:d9:06:a2:3c:93:5b:50:b9:22:40:01:
d3:12:5a:6b:a2:40:5d:7e:da:d1:62:5d:3f:7e:ef:bd:14:ed:
8c:cb:ff:4d:50:d5:f4:36:95:72:a6:f7:3f:ec:db:7a:c0:31:
56:25:df:02:21:b4:37:f9:a1:85:52:22:1d:24:fe:b9:0f:6e:
a1:41:70:a0:06:a1:77:61:41:da:67:c0:68:07:0c:7b:5b:99:
45:66:8b:8b:5d:68:ba:d7:44:e4:53:fc:31:5c:38:c5:0e:c1:
f6:59:78:64:d7:de:b9:ed:7b:3e:9e:d9:d3:67:fa:53:98:66:
2c:a2:e8:38:bd:fb:1b:89:f1:2e:9b:c1:54:12:45:66:c4:66:
d2:dc:6d:68:ee:1e:4f:c5:6b:74:54:93:e7:d2:84:04:ce:43:
7a:9e:2d:f0:8a:dd:a5:f6:f8:0d:3b:cd:15:a1:ae:52:83:cd:
58:e7:d6:7b:89:4b:45:cc:8b:70:d4:e6:ff:93:1f:36:3f:60:
0e:93:d4:c9:81:40:be:05:22:5e:de:1e:be:15:0a:90:bb:07:
e7:6b:38:b6:54:b7:3d:a0:ea:4a:be:5e:c7:80:04:74:2a:c8:
ce:bd:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:18 2026 by rpki-client