Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/zbSmOdUlXWqGGMqhANIis6d_wOE.roa
File: zbSmOdUlXWqGGMqhANIis6d_wOE.roa (raw, json)
Hash identifier: w5vtLzzuZtJBW2cAGToEQeLfanqgHPMRHOTiGp/gUYs=
Subject key identifier: CD:B4:A6:39:D5:25:5D:6A:86:18:CA:A1:00:D2:22:B3:A7:7F:C0:E1
Certificate issuer: /CN=5f9ba299bd3d13bc779aefac3e73047f1f0c3a6a
Certificate serial: 019FAB0970BC4F99897C8BE51D168DC97169
Authority key identifier: 5F:9B:A2:99:BD:3D:13:BC:77:9A:EF:AC:3E:73:04:7F:1F:0C:3A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/zbSmOdUlXWqGGMqhANIis6d_wOE.roa
Signing time: Tue 28 Jul 2026 23:22:30 +0000
ROA not before: Tue 28 Jul 2026 23:22:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22298
IP address blocks: 2a05:a200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:09:70:bc:4f:99:89:7c:8b:e5:1d:16:8d:c9:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f9ba299bd3d13bc779aefac3e73047f1f0c3a6a
Validity
Not Before: Jul 28 23:22:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdb4a639d5255d6a8618caa100d222b3a77fc0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:78:31:43:ff:88:9c:ad:53:74:d6:e8:c2:
be:03:41:eb:81:e8:56:01:8e:a3:28:09:8d:4b:4d:
c4:e2:c0:78:15:c5:f7:11:b4:9b:a9:2a:ad:2f:53:
c3:c5:33:b3:0b:60:8f:6b:98:c5:70:0d:11:2c:dc:
d8:d7:c8:04:eb:ae:b6:df:08:11:5e:ca:43:5f:9a:
ca:89:4f:e0:f5:1e:54:d1:23:d5:47:12:79:58:ac:
84:bc:bc:33:36:ef:9c:76:a1:64:18:17:24:44:ee:
27:23:b6:af:26:88:c2:19:82:08:53:34:a3:66:58:
b3:dd:2d:d1:40:22:2b:9c:f4:dd:21:60:ed:13:c4:
ff:2c:85:08:8b:a6:0e:e5:50:71:8f:33:9c:b9:cc:
27:d4:c3:07:b1:1e:88:00:bf:75:22:c1:8e:ae:1a:
22:61:7a:a4:55:46:8b:d7:4a:cf:ed:e9:5c:0d:65:
84:57:cf:c5:8e:39:f7:bc:08:a6:5d:a2:65:72:4c:
84:34:f7:15:5b:73:4a:41:91:af:48:2c:ee:e6:90:
b8:7b:53:1f:c6:42:5e:c7:20:34:91:30:fc:05:4c:
57:88:34:54:a2:bb:16:80:9a:ff:af:76:15:72:7c:
d2:44:ae:39:86:ab:d9:5b:40:6b:92:6f:01:a7:98:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:A6:39:D5:25:5D:6A:86:18:CA:A1:00:D2:22:B3:A7:7F:C0:E1
X509v3 Authority Key Identifier:
keyid:5F:9B:A2:99:BD:3D:13:BC:77:9A:EF:AC:3E:73:04:7F:1F:0C:3A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/zbSmOdUlXWqGGMqhANIis6d_wOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:a200::/48
Signature Algorithm: sha256WithRSAEncryption
20:96:18:2d:d6:fc:6a:21:ba:7c:6a:a9:51:13:7e:ed:31:4f:
28:71:ac:4a:6e:a7:d3:ec:2e:d9:05:8c:57:ea:91:68:c0:ef:
ae:5e:07:43:86:33:6f:7e:c2:56:b4:8b:9a:9b:fb:51:c2:e6:
18:81:25:a5:b9:cc:6a:f7:1b:9a:87:43:43:c4:76:50:e3:ac:
c7:e6:ef:d3:d8:f9:9c:24:32:bf:04:b2:74:6d:f0:e7:fb:fc:
56:10:75:89:18:bb:d0:73:3a:b4:45:f2:dd:6e:6b:43:47:b0:
85:9c:d2:0d:8c:8f:be:1e:b4:d1:05:62:eb:44:e7:48:12:2d:
64:83:bd:52:d8:52:99:27:fc:d2:22:86:e5:ef:52:bf:3f:f8:
ad:64:d3:67:b0:21:c8:ec:fa:67:67:a4:b8:e8:fa:eb:ad:15:
43:0e:87:26:10:7d:39:9c:2c:5f:89:1b:b9:c4:ca:58:9a:fb:
5c:4c:01:a7:07:48:2b:99:0e:63:cc:8b:8b:f1:32:43:d3:ea:
3e:0e:c9:68:f3:52:c2:7e:fd:2e:b1:e5:e7:3f:72:f8:1b:30:
b6:50:ae:de:15:4e:a2:eb:34:70:90:44:5f:21:72:7f:85:e3:
0f:4c:7f:6d:36:aa:55:22:2c:1e:b8:e6:40:bd:7a:b3:e3:28:
3f:3e:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:39 2026 by rpki-client