Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/ZujPeFLEKXZUzVLUC2T-QFZI6OM.roa
File: ZujPeFLEKXZUzVLUC2T-QFZI6OM.roa (raw, json)
Hash identifier: EtbDCHEn2THDzHpj6J6jSqVTS+eJbiX7R8y0kc6QTNA=
Subject key identifier: 66:E8:CF:78:52:C4:29:76:54:CD:52:D4:0B:64:FE:40:56:48:E8:E3
Certificate issuer: /CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Certificate serial: 01A0269B9E47E738C34B4C9B631907D3E244
Authority key identifier: 3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/ZujPeFLEKXZUzVLUC2T-QFZI6OM.roa
Signing time: Fri 21 Aug 2026 23:15:27 +0000
ROA not before: Fri 21 Aug 2026 23:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 2a0b:ba40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:9b:9e:47:e7:38:c3:4b:4c:9b:63:19:07:d3:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Validity
Not Before: Aug 21 23:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66e8cf7852c4297654cd52d40b64fe405648e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:92:2a:56:74:df:c6:25:0f:b0:77:a9:ba:
d9:1f:90:b9:57:f2:a2:4e:16:53:d8:c2:e6:d0:20:
8c:7c:dd:fe:8a:e8:a2:aa:1c:b3:a7:90:32:4b:bb:
78:5b:d3:d9:8d:c2:65:68:63:eb:fb:12:11:3e:25:
79:78:f1:87:10:3b:70:59:40:fb:04:1d:39:b6:b7:
f1:59:a4:fb:ab:d7:bc:bd:79:c7:37:bc:60:64:f1:
0d:d7:1d:69:b5:34:d0:29:3b:b1:22:53:77:6b:fc:
de:e8:32:28:2d:36:17:d5:e4:66:ab:f9:b2:67:40:
3d:2d:b3:2f:57:83:2a:08:e9:09:00:78:ee:15:05:
48:59:ee:da:b7:36:0c:f4:01:2d:5c:4d:ab:73:40:
82:56:70:0e:2a:cb:fe:ab:8b:10:44:f5:50:81:e4:
a8:9d:1b:fa:b2:02:ed:89:0d:10:1e:b8:03:5d:11:
e3:51:87:b4:5d:8c:c4:0d:52:1e:8c:0f:ab:0a:f0:
95:49:fb:b4:d5:50:48:e1:a8:74:14:21:a0:f3:06:
57:87:36:53:75:28:1a:15:cb:bd:2c:a9:1b:16:c8:
4c:12:47:6f:87:b5:96:01:c1:f1:86:fa:20:a6:42:
7a:8f:96:ea:96:b2:82:d9:ba:c0:4b:b3:dc:1d:5c:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E8:CF:78:52:C4:29:76:54:CD:52:D4:0B:64:FE:40:56:48:E8:E3
X509v3 Authority Key Identifier:
keyid:3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/ZujPeFLEKXZUzVLUC2T-QFZI6OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ba40::/29
Signature Algorithm: sha256WithRSAEncryption
19:1c:7b:47:51:2c:d9:fa:a8:9f:2e:e7:1b:e4:13:36:a2:09:
69:36:7b:b8:04:6e:26:12:8e:70:4a:ca:ad:48:06:b6:24:05:
15:96:93:bb:b1:71:42:d0:b2:9a:17:0f:10:4d:5c:7b:fa:21:
01:df:76:c3:d8:84:86:95:d3:54:80:ba:dc:d7:b8:b7:d9:2c:
33:1a:f8:90:d7:c0:98:fc:64:2e:59:f6:0a:2f:38:2b:00:fb:
b4:92:ab:a7:7f:73:cc:66:cc:64:fe:8f:47:aa:b8:3b:a1:e1:
75:0e:fc:a7:60:e4:b6:88:00:26:e6:aa:ab:dd:3c:fc:86:b2:
00:48:2c:bd:78:f6:99:5d:f3:98:f8:62:3d:1e:74:ba:de:52:
bf:d3:7e:49:92:e4:9c:96:0a:6b:ad:9c:6f:13:48:af:f9:3e:
8d:55:6d:41:b8:1c:5c:e7:82:18:2d:c6:f9:b7:4f:59:f6:e3:
f4:9e:e2:0b:59:c4:39:7f:a5:3c:2f:49:55:e7:9f:55:15:cd:
49:1c:ab:7b:a4:7c:da:a2:cb:fc:1f:8d:f3:b9:fe:11:e5:d7:
a7:b0:f9:84:a3:f6:d4:c2:04:14:2b:b1:b2:e1:3d:50:27:6a:
c3:a1:98:5d:b4:a6:b3:c4:76:0c:94:04:80:82:4d:a0:f2:ca:
ae:9a:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:06 2026 by rpki-client