Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Zce-ukPr4V-MW4dYKne4OcvEQR8.roa
File: Zce-ukPr4V-MW4dYKne4OcvEQR8.roa (raw, json)
Hash identifier: WXEY0/rTDa5cJCWMv3+Ot9tQyoJh8uMwyH0T/7BuzvM=
Subject key identifier: 65:C7:BE:BA:43:EB:E1:5F:8C:5B:87:58:2A:77:B8:39:CB:C4:41:1F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019FB4B912AD887FF5CCA76F128F6B4BAD83
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Zce-ukPr4V-MW4dYKne4OcvEQR8.roa
Signing time: Thu 30 Jul 2026 20:30:55 +0000
ROA not before: Thu 30 Jul 2026 20:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213482
IP address blocks: 2a10:fa80:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:b9:12:ad:88:7f:f5:cc:a7:6f:12:8f:6b:4b:ad:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 30 20:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65c7beba43ebe15f8c5b87582a77b839cbc4411f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:3c:15:57:c9:f7:ae:1c:96:35:73:b6:8e:
05:d4:ce:7b:53:e0:0d:35:98:0c:3e:7f:e8:ee:a4:
14:dc:9f:7b:53:8a:ea:24:59:f6:84:7b:79:5c:81:
6f:17:64:ad:20:af:45:a6:fb:83:be:95:81:2a:13:
42:7f:37:19:dd:40:24:01:0b:e9:1d:11:3d:d4:b7:
92:42:0e:a3:ec:d2:90:1e:b0:8c:90:fc:b6:b3:a6:
13:62:b5:0f:72:e5:12:9b:0e:60:b2:3d:77:77:78:
2a:97:b8:42:3d:bf:29:f0:66:ba:88:1c:92:bb:cc:
cf:72:2a:4b:c3:d1:c5:c6:b2:80:ac:9d:a1:13:97:
7e:74:ff:ab:19:df:8c:da:c4:09:9f:16:c5:4c:1d:
cf:50:1c:30:1c:cc:4b:71:a4:9a:18:ae:91:24:64:
62:df:33:2e:c2:ad:50:7b:88:b9:2e:99:b7:c8:0d:
df:75:b3:ed:32:c3:08:98:70:19:65:b1:ea:31:89:
46:54:40:f4:cc:10:b0:a7:6e:1e:83:13:a1:db:22:
dd:de:04:be:70:84:35:a6:0b:f9:92:c6:42:8e:23:
82:5c:e0:b8:41:82:99:8d:c7:df:c5:da:b9:82:20:
fb:37:7c:19:a9:7a:5d:02:16:e3:ed:54:c4:9a:25:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:BE:BA:43:EB:E1:5F:8C:5B:87:58:2A:77:B8:39:CB:C4:41:1F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Zce-ukPr4V-MW4dYKne4OcvEQR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:6000::/36
Signature Algorithm: sha256WithRSAEncryption
18:43:fd:a8:7c:01:ee:b8:a3:d4:81:bd:ca:38:f9:56:a2:bc:
6e:68:2b:fc:ff:02:2a:78:30:a6:4f:e7:cf:01:47:31:cc:88:
fa:bc:8f:cb:63:de:b2:cd:cc:f2:cb:05:17:b9:88:be:7a:36:
7a:0c:5f:25:14:a4:b2:a8:ca:de:16:cc:1f:28:86:be:90:a5:
07:53:0d:15:c7:a7:87:95:7c:cd:4b:ec:bd:28:b0:4a:c4:31:
fd:20:92:41:73:7b:0e:81:d0:fa:00:dc:45:7b:8f:ac:c6:fc:
b0:91:99:e5:22:23:76:aa:63:1c:75:55:f5:97:77:ba:a0:bc:
77:a0:c7:3a:30:6d:42:23:52:e8:e3:10:ed:19:ac:94:82:ac:
1a:b0:7d:ce:4b:ad:52:e3:ea:7c:98:b8:6d:f9:1b:31:43:87:
a4:f0:5c:e2:e3:04:a1:4e:6f:f7:6a:ca:2d:57:1f:ca:44:b3:
ff:90:da:b9:41:8e:50:2b:fa:62:5b:91:d3:68:48:50:32:cd:
3e:1d:50:bf:f6:da:a4:97:9f:8d:ff:48:eb:d2:83:80:f4:ab:
a3:17:8e:4b:2a:cc:80:df:71:7a:b8:24:70:c8:7c:6d:af:e2:
4f:76:ba:a2:09:bb:68:b4:5f:3f:9c:7d:85:f2:d3:74:b0:ea:
4f:ef:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:06 2026 by rpki-client