Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZM_Db70zaMAAsMqTcRja0tNbmiI.roa
File: ZM_Db70zaMAAsMqTcRja0tNbmiI.roa (raw, json)
Hash identifier: 6BgZtKevp10uUlEQ9l3EIZp+h5IVHGhESBdJPwuEZIs=
Subject key identifier: 64:CF:C3:6F:BD:33:68:C0:00:B0:CA:93:71:18:DA:D2:D3:5B:9A:22
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019DA6F7F2F9ECE3A4A5AE2BF731F348AD3C
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZM_Db70zaMAAsMqTcRja0tNbmiI.roa
Signing time: Sun 19 Apr 2026 18:19:20 +0000
ROA not before: Sun 19 Apr 2026 18:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a0e:d300::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 18:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:f7:f2:f9:ec:e3:a4:a5:ae:2b:f7:31:f3:48:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 19 18:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64cfc36fbd3368c000b0ca937118dad2d35b9a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:84:55:05:27:8f:c8:ec:aa:9c:97:b8:3f:
e5:65:05:24:0e:00:f2:b7:86:a7:25:9f:2c:28:53:
16:1c:3e:46:d6:25:f9:08:ac:3e:14:5b:7e:be:dc:
29:47:32:6b:a0:48:e6:a3:71:29:9f:10:7b:32:c9:
a4:9a:9b:37:1c:4f:da:64:63:7d:75:78:74:85:7c:
4f:5a:0b:c7:7a:7d:39:81:84:de:10:4a:da:40:8a:
b3:ee:b9:53:4e:f4:75:72:b3:69:b1:ab:8c:41:16:
43:1a:26:ef:4f:42:fc:9a:a5:56:67:c8:fe:71:c5:
e6:b9:26:88:34:04:f2:67:37:5b:68:00:d5:2b:aa:
05:d3:78:0a:41:17:47:08:be:d4:32:c3:65:c4:e0:
7f:c3:53:77:36:8a:e6:05:a1:b1:8e:25:8a:26:e7:
ff:e6:85:7a:34:1b:10:47:7e:f2:60:f5:ca:28:2c:
1b:1d:06:31:d1:b9:18:89:3a:21:7b:4b:e0:8c:5f:
96:81:9f:c0:58:6b:c3:ef:9f:ce:92:bd:2f:16:89:
79:3f:62:f6:80:55:62:0a:74:cc:7b:d3:f4:7b:d7:
19:a6:f5:60:64:15:66:f1:47:86:99:26:f6:79:e0:
56:10:2f:1e:ff:3a:89:87:1f:59:b2:67:2d:b1:b9:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:C3:6F:BD:33:68:C0:00:B0:CA:93:71:18:DA:D2:D3:5B:9A:22
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZM_Db70zaMAAsMqTcRja0tNbmiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d300::/29
2a13:d1c0::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:f0:00:fe:e4:57:3d:fa:3a:38:6f:d7:2d:e6:35:ac:3c:a0:
f9:01:8c:22:ed:67:6c:f5:1f:8b:49:d2:7f:0c:33:95:0f:41:
cf:a7:9e:85:c8:9c:a7:36:ce:20:9e:ec:12:f6:ac:5b:1f:7b:
76:2f:d1:73:f4:a2:8b:50:b9:e6:e4:64:a2:72:0e:21:b8:c1:
f6:78:70:65:54:05:40:40:3c:19:73:37:3e:2c:da:b0:a8:1b:
f5:3e:cb:83:84:15:1a:3d:c8:7e:d1:1f:d4:43:be:60:77:44:
5e:b0:44:df:98:1c:8f:b7:4e:5a:e3:72:54:1b:08:e5:f8:36:
e5:86:82:7f:90:c1:34:17:d5:a2:14:71:0e:69:d0:59:e8:a0:
e9:f0:96:7c:28:c4:51:5a:9b:68:fa:81:8c:77:af:1f:8e:1d:
3c:0e:9c:3e:8c:87:bf:b2:f1:da:9f:ec:21:30:4e:5a:e9:3e:
b7:85:a7:fa:c1:9a:b6:b1:f4:c9:a3:32:9d:fb:6b:9b:39:06:
be:31:65:15:5d:6a:88:dd:d2:b3:fa:89:2a:38:dc:d1:b5:f4:
9a:9d:a8:80:b3:da:5d:0b:e8:45:24:7e:2f:bf:60:3d:f7:a9:
66:a4:93:94:a1:eb:5f:8d:b8:2d:43:3c:c8:75:4b:a4:e2:f8:
d6:8b:51:67
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ2m9/L57OOkpa4r9zHzSK08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwNDE5MTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGNmYzM2ZmJkMzM2OGMwMDBiMGNhOTM3MTE4ZGFkMmQzNWI5YTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2EVQUnj8jsqpyXuD/lZQUkDgDy
t4anJZ8sKFMWHD5G1iX5CKw+FFt+vtwpRzJroEjmo3EpnxB7Msmkmps3HE/aZGN9
dXh0hXxPWgvHen05gYTeEEraQIqz7rlTTvR1crNpsauMQRZDGibvT0L8mqVWZ8j+
ccXmuSaINATyZzdbaADVK6oF03gKQRdHCL7UMsNlxOB/w1N3NormBaGxjiWKJuf/
5oV6NBsQR37yYPXKKCwbHQYx0bkYiTohe0vgjF+WgZ/AWGvD75/Okr0vFol5P2L2
gFViCnTMe9P0e9cZpvVgZBVm8UeGmSb2eeBWEC8e/zqJhx9ZsmctsblGRQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGTPw2+9M2jAALDKk3EY2tLTW5oiMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvWk1fRGI3MHphTUFBc01xVGNSamEwdE5ibWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg7TAAMF
AyoT0cADBQMqE9/AMA0GCSqGSIb3DQEBCwUAA4IBAQC38AD+5Fc9+jo4b9ct5jWs
PKD5AYwi7Wds9R+LSdJ/DDOVD0HPp56FyJynNs4gnuwS9qxbH3t2L9Fz9KKLULnm
5GSicg4huMH2eHBlVAVAQDwZczc+LNqwqBv1PsuDhBUaPch+0R/UQ75gd0ResETf
mByPt05a43JUGwjl+DblhoJ/kME0F9WiFHEOadBZ6KDp8JZ8KMRRWpto+oGMd68f
jh08Dpw+jIe/svHan+whME5a6T63haf6wZq2sfTJozKd+2ubOQa+MWUVXWqI3dKz
+okqONzRtfSanaiAs9pdC+hFJH4vv2A996lmpJOUoetfjbgtQzzIdUuk4vjWi1Fn
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:21:14 2026 by rpki-client