Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zujPP728I96zdWEDaPoDG61TNTg.roa
File: zujPP728I96zdWEDaPoDG61TNTg.roa (raw, json)
Hash identifier: RAVtqrKQ4V0+tqnjs0z+RW0Q09UxSZeYjxqm3GdKuUU=
Subject key identifier: CE:E8:CF:3F:BD:BC:23:DE:B3:75:61:03:68:FA:03:1B:AD:53:35:38
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E440C18573AFB0DA9C6272AFFB4B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zujPP728I96zdWEDaPoDG61TNTg.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a06:6ec0::/29 maxlen: 29
2a0e:c740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e4:40:c1:85:73:af:b0:da:9c:62:72:af:fb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cee8cf3fbdbc23deb375610368fa031bad533538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:a9:e5:c6:50:a8:9b:eb:bb:c1:a0:04:6a:
4f:55:f4:a6:45:55:f8:ff:bd:f1:60:17:4d:2d:18:
43:1f:bf:e6:f4:17:f8:82:d0:a4:6e:2c:1d:54:e9:
c2:7f:50:5f:2a:d5:a3:eb:3a:b7:0b:4c:ec:fb:eb:
ae:b9:14:6e:07:62:11:2c:e8:d8:28:29:3c:45:c3:
e2:e7:1c:75:5b:6f:7f:80:a6:fd:d4:79:c3:ef:da:
78:e2:90:59:14:c9:ca:a3:2d:8d:d5:51:4e:e4:69:
7a:d7:e7:e3:b1:bd:f0:b0:93:a1:35:99:1c:85:aa:
4c:9b:fa:e7:d6:1c:c5:4d:43:5b:17:21:8a:df:f4:
e7:95:b1:06:72:ef:0a:8e:3d:e3:79:c0:21:21:13:
4a:22:62:ac:67:66:ae:43:fd:43:82:86:55:87:97:
d0:a3:72:22:86:c1:9b:c0:fd:c6:de:75:29:7f:0b:
c9:d0:81:8f:e5:2a:74:d2:f5:32:7c:89:90:27:42:
e5:27:25:78:0c:83:25:35:41:3f:15:3a:ff:88:a4:
83:b4:ec:5c:0a:8c:b8:96:07:51:00:0b:2d:06:2b:
cb:cd:71:b3:74:9b:46:ad:d4:02:30:90:9b:c5:6c:
aa:12:59:f4:29:b7:c1:12:78:44:df:8d:54:2c:0b:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:CF:3F:BD:BC:23:DE:B3:75:61:03:68:FA:03:1B:AD:53:35:38
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zujPP728I96zdWEDaPoDG61TNTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6ec0::/29
2a0e:c740::/29
Signature Algorithm: sha256WithRSAEncryption
7d:95:e2:8d:e9:dc:58:51:89:f8:74:57:33:bb:ab:7c:a9:71:
fc:98:47:fe:ce:29:81:b7:a0:e1:8b:3f:1a:1f:e3:fd:3f:1a:
97:2d:6a:ba:2a:d5:e4:3c:6a:a5:f2:f7:f0:2b:3b:98:68:19:
2d:2c:ee:22:1c:c9:70:61:dd:c9:b5:c3:4c:c5:12:95:07:f8:
fd:6c:05:9a:04:a2:91:1d:be:b0:95:40:34:87:1f:07:d5:99:
7d:2e:78:d8:67:20:6f:92:78:59:2f:43:da:a6:f8:0c:30:7b:
f2:04:1d:46:b0:35:bb:59:45:25:bf:36:02:c7:8c:3f:b3:1a:
79:c2:15:ab:ff:27:6f:18:99:30:63:da:de:d1:34:89:b3:ef:
92:97:92:b6:7d:1e:80:3a:e5:ac:30:54:49:e2:cf:87:cd:1b:
f5:52:f7:cb:1d:20:00:c8:39:d0:5a:a9:da:a1:cb:33:98:ec:
35:16:d4:c3:c9:38:cc:31:69:e2:e7:e3:00:26:00:b1:f1:81:
5c:48:ab:34:f9:c2:be:56:bc:b5:39:cf:cc:63:af:ad:92:20:
82:76:b4:78:45:1b:3a:72:6b:41:b6:8e:78:e6:e3:13:a0:aa:
c7:bb:1c:fe:18:ae:d1:29:b6:ed:e0:96:de:ac:a2:0a:1c:e5:
c5:9b:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client