Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/ZHa1Ivl6Unf7JA8-6j5yy058hjY.roa
File: ZHa1Ivl6Unf7JA8-6j5yy058hjY.roa (raw, json)
Hash identifier: +C/wNqkD6vYIyRWQxyzeRU4w8fiaJB32Gl95vWyfuBA=
Subject key identifier: 64:76:B5:22:F9:7A:52:77:FB:24:0F:3E:EA:3E:72:CB:4E:7C:86:36
Certificate issuer: /CN=180e4e0a829350a779d37367750adbfc59528f56
Certificate serial: 01A15E3CC57E5CCFC20AF68DE6F38F0805E2
Authority key identifier: 18:0E:4E:0A:82:93:50:A7:79:D3:73:67:75:0A:DB:FC:59:52:8F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GA5OCoKTUKd503NndQrb_FlSj1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/ZHa1Ivl6Unf7JA8-6j5yy058hjY.roa
Signing time: Wed 21 Oct 2026 11:33:23 +0000
ROA not before: Wed 21 Oct 2026 11:33:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218334
IP address blocks: 2001:67c:5c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GA5OCoKTUKd503NndQrb_FlSj1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:3c:c5:7e:5c:cf:c2:0a:f6:8d:e6:f3:8f:08:05:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=180e4e0a829350a779d37367750adbfc59528f56
Validity
Not Before: Oct 21 11:33:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6476b522f97a5277fb240f3eea3e72cb4e7c8636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:f4:ad:26:f8:b9:7d:5d:a1:e0:cc:c9:c3:
ff:90:1b:ff:8c:36:4a:5c:30:a7:37:c8:b4:d6:48:
f6:05:95:a4:aa:01:1a:44:97:c8:97:4e:f5:24:13:
ef:e8:37:a7:32:0c:52:7e:52:3e:a1:0f:da:57:3a:
93:55:b1:f3:15:0f:48:7b:db:28:24:64:92:0a:23:
e4:a0:f8:13:40:81:a0:89:d5:db:5a:96:0a:43:9c:
3b:d1:4e:6b:a1:c0:3c:f5:34:8e:42:7b:76:2e:83:
3f:b3:71:bf:a2:24:a0:9c:04:b0:ff:af:70:79:47:
d9:ee:de:d6:85:83:58:8b:c9:49:a5:52:0f:a4:c7:
01:d6:fd:6c:b3:5f:1a:63:c2:93:47:64:0e:e0:f9:
17:e0:93:7d:7f:f1:8b:99:c7:1e:51:d0:97:16:0f:
45:f7:88:cd:9f:21:67:46:43:02:db:e2:9a:cf:2b:
91:9f:ad:d1:1e:c8:92:6b:47:0f:6f:13:23:36:ce:
27:80:50:84:a3:c9:f0:f3:f4:11:9b:80:ba:5b:1a:
fd:0f:d2:6c:a1:8d:72:e1:76:ba:40:d5:3d:69:21:
9d:02:9e:7f:a3:cf:49:19:64:a1:0d:7e:09:2e:63:
f2:53:ef:2c:ee:d0:b1:9a:56:d2:49:97:9e:65:18:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:B5:22:F9:7A:52:77:FB:24:0F:3E:EA:3E:72:CB:4E:7C:86:36
X509v3 Authority Key Identifier:
keyid:18:0E:4E:0A:82:93:50:A7:79:D3:73:67:75:0A:DB:FC:59:52:8F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GA5OCoKTUKd503NndQrb_FlSj1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/ZHa1Ivl6Unf7JA8-6j5yy058hjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8178e3-99ee-479f-855f-4843d9e961ec/1/GA5OCoKTUKd503NndQrb_FlSj1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:5c4::/48
Signature Algorithm: sha256WithRSAEncryption
54:f3:20:27:78:da:92:6a:c3:16:e4:a6:0f:ae:8a:04:70:30:
b8:0f:09:e0:6c:8a:db:a6:23:92:4f:e4:2d:ff:75:47:24:1e:
73:b3:36:98:a4:1e:af:cf:b6:45:b7:66:93:c1:8e:e6:58:8b:
c0:04:a8:b5:e5:28:3e:2d:1e:42:66:e6:42:b6:4e:3c:84:35:
b5:be:dd:67:f8:62:5d:e7:9c:60:57:e8:25:37:d7:fc:87:83:
22:07:f2:01:26:09:13:b8:f2:c5:a0:f3:db:d3:80:83:a2:44:
c1:ca:28:04:c1:4b:a0:c4:61:06:28:f5:47:74:c7:a5:b8:9d:
02:93:38:14:f7:10:70:6a:bd:bb:9f:9a:96:2f:26:f8:c3:a1:
10:ef:4d:6b:2f:09:f2:ac:79:af:e0:f8:44:c2:af:e3:01:98:
b9:11:d9:d8:91:7e:de:d9:8b:9d:30:fc:2c:76:bb:0c:00:f8:
b4:2d:02:fd:bb:9c:ae:93:42:61:9e:95:4f:03:f0:ec:15:e5:
2b:01:09:cb:c7:db:45:20:b7:74:c6:42:fd:bc:aa:f8:c4:63:
31:fa:9b:a9:5a:53:9c:4c:8e:0a:04:5a:62:ee:e7:6e:e3:49:
c7:33:ca:82:a4:59:ff:a7:aa:66:05:53:b5:a1:fd:41:e0:4c:
51:39:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:39 2026 by rpki-client