Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ZpBP5H10HQO0PYIuW4_2y6-fR2E.roa
File: ZpBP5H10HQO0PYIuW4_2y6-fR2E.roa (raw, json)
Hash identifier: AcOnFwMAY3ewCb7a6d05r1w7tSiRPtAoI7x77v7qoHs=
Subject key identifier: 66:90:4F:E4:7D:74:1D:03:B4:3D:82:2E:5B:8F:F6:CB:AF:9F:47:61
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A02F28A4C9A186503BE3EBD3D60DE24F6F
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ZpBP5H10HQO0PYIuW4_2y6-fR2E.roa
Signing time: Sun 23 Aug 2026 15:06:27 +0000
ROA not before: Sun 23 Aug 2026 15:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a10:fa86::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:28:a4:c9:a1:86:50:3b:e3:eb:d3:d6:0d:e2:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 23 15:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66904fe47d741d03b43d822e5b8ff6cbaf9f4761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:18:94:c8:1c:c6:c7:69:57:a4:72:a1:59:
94:21:20:7d:97:9d:e1:6c:1b:59:bc:04:c2:ef:24:
76:1f:a0:ce:ae:11:0a:5f:0f:4f:65:bc:d3:e9:89:
71:61:41:1c:fb:3e:c0:cf:9b:29:01:fd:0c:24:26:
9c:b1:63:e5:28:98:b9:f0:13:19:db:6f:ad:25:f1:
8a:2f:8e:21:2c:2d:0d:7f:83:17:63:e9:62:45:47:
a3:0f:29:33:ae:74:6b:19:a0:94:98:3e:14:82:3c:
50:c1:a8:24:d2:71:11:79:4c:70:31:d8:c8:a8:b9:
d6:98:79:0e:3c:e4:f6:05:0a:3d:48:b7:6e:0f:2f:
1e:45:02:0f:23:5a:a1:a7:d1:ae:bb:24:fb:21:60:
7a:d7:46:64:e1:b1:63:04:0f:71:9c:ad:10:d1:a6:
e0:9d:8a:ce:58:e6:35:63:34:f9:7d:99:11:c5:7f:
ef:8c:da:a7:b8:0a:33:78:53:c2:b5:17:53:03:8d:
23:f7:b3:b8:b9:df:e8:d3:a4:94:3b:32:88:76:79:
69:f8:aa:38:a0:68:1d:35:e0:a7:58:1c:34:37:eb:
2a:99:d6:80:a6:cd:b0:11:7f:60:de:8b:94:64:e1:
e7:f8:a9:31:69:6a:32:ed:00:58:92:28:97:c4:a3:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:4F:E4:7D:74:1D:03:B4:3D:82:2E:5B:8F:F6:CB:AF:9F:47:61
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ZpBP5H10HQO0PYIuW4_2y6-fR2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa86::/32
Signature Algorithm: sha256WithRSAEncryption
2c:c1:a5:3a:35:b8:a2:6d:48:f3:1f:0d:26:80:f4:52:52:4c:
96:10:a8:fe:7b:03:00:e6:0e:7f:d9:32:11:d4:3e:88:e5:82:
7e:e0:22:25:9e:f6:ae:40:61:4a:eb:f1:ab:8e:79:5e:04:5a:
8e:c3:c8:50:0f:1e:42:82:4a:da:34:19:e7:f2:df:7d:e8:8b:
08:2c:95:75:91:0c:00:c8:ad:a0:44:13:72:98:29:b6:b4:1d:
75:5e:f5:3d:03:35:95:ba:a1:13:61:32:f9:e1:41:73:70:8d:
35:e0:2a:0f:1f:80:35:d9:e6:e9:d6:13:1a:9d:63:24:6e:0a:
2b:8b:29:9a:aa:5e:34:51:73:43:f6:b3:60:e7:46:1e:dc:35:
32:b5:41:1d:61:25:fb:b6:42:6e:6d:e3:55:19:44:77:a6:dd:
4d:bc:7c:97:d3:13:25:c1:ad:8d:42:60:c5:32:15:ec:dc:e0:
c4:ba:fe:30:67:39:1d:e3:4a:28:96:dd:5f:a8:7f:40:78:85:
46:41:f6:4c:2d:30:e6:dc:e5:fa:19:99:e0:2d:9a:0b:24:1a:
49:2f:5f:c7:1a:0f:2a:20:00:56:c5:7a:64:97:ab:69:73:1e:
8a:9f:48:00:9d:6b:d5:c0:67:67:f3:63:a3:d5:97:ba:01:52:
48:56:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:23 2026 by rpki-client