Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/tZD_F1-p522CY9TijejStZ2PRpM.roa
File: tZD_F1-p522CY9TijejStZ2PRpM.roa (raw, json)
Hash identifier: r18D1jjbDYKACcGJSmptgORNsLKzRuwujhn82PU7nPY=
Subject key identifier: B5:90:FF:17:5F:A9:E7:6D:82:63:D4:E2:8D:E8:D2:B5:9D:8F:46:93
Certificate issuer: /CN=c1fa0325bb6fcef2dd846c19baf0954db4374c93
Certificate serial: 019F23689044185555810C8673DB65F5B8A9
Authority key identifier: C1:FA:03:25:BB:6F:CE:F2:DD:84:6C:19:BA:F0:95:4D:B4:37:4C:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/tZD_F1-p522CY9TijejStZ2PRpM.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201647
IP address blocks: 2a14:5700::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:44:18:55:55:81:0c:86:73:db:65:f5:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fa0325bb6fcef2dd846c19baf0954db4374c93
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b590ff175fa9e76d8263d4e28de8d2b59d8f4693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:dc:9a:07:8f:53:4e:3f:59:86:42:b2:4d:
60:f1:f1:20:00:32:b7:e7:d2:10:0d:81:7a:bb:c3:
4d:d0:0a:f8:1a:99:e3:e1:bb:88:e4:f4:56:9a:7a:
ed:a0:38:91:32:94:69:54:2f:63:31:77:c9:07:c1:
97:74:f0:f2:df:23:49:11:78:d6:6e:80:26:8c:10:
02:30:63:24:cd:77:4a:6f:6a:b1:9d:b0:b8:57:8a:
bf:47:80:1f:51:3f:95:37:2f:c3:9f:82:72:73:60:
40:94:37:6f:26:89:0d:2f:e3:db:4d:d9:e1:28:45:
e1:37:66:34:31:70:bd:5a:7a:1c:e0:f1:49:d2:bf:
c0:89:44:74:d8:99:47:6a:fb:51:28:05:d0:61:5a:
47:ae:98:bc:5e:9d:f5:e3:c1:a0:7b:b6:4f:f0:9f:
a0:03:34:3c:da:35:47:bd:59:6a:ba:01:23:a4:18:
19:56:3b:2f:3c:37:25:1d:cd:4d:11:a4:5b:90:1d:
89:28:44:a3:4f:7f:9e:9c:5e:ee:02:81:04:79:21:
df:2d:ad:0b:41:cb:ff:b6:01:ad:57:e9:d1:85:dc:
e2:e3:95:ee:05:c4:1e:f1:d6:d5:8b:1b:82:14:b2:
9d:11:3f:e8:25:7f:05:3f:08:9a:f7:1f:ce:cd:11:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:FF:17:5F:A9:E7:6D:82:63:D4:E2:8D:E8:D2:B5:9D:8F:46:93
X509v3 Authority Key Identifier:
keyid:C1:FA:03:25:BB:6F:CE:F2:DD:84:6C:19:BA:F0:95:4D:B4:37:4C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/tZD_F1-p522CY9TijejStZ2PRpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/wfoDJbtvzvLdhGwZuvCVTbQ3TJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5700::/29
Signature Algorithm: sha256WithRSAEncryption
63:ba:e6:86:d3:01:7a:bb:2a:9a:8c:93:c3:1c:11:e6:6d:2b:
41:4f:02:f7:68:30:e9:28:49:34:84:c7:0d:fb:13:2f:65:5e:
85:f7:e5:ea:60:bc:40:2a:d9:32:fa:ff:3e:9f:60:1c:c0:31:
b7:85:3e:0b:ff:68:7f:22:87:58:b9:e9:79:9b:a4:3b:23:84:
96:65:7e:0c:46:1d:ca:09:83:42:e3:5e:8f:47:61:38:af:dd:
27:df:8e:d8:e2:ce:87:68:86:76:51:c1:39:f3:07:89:c4:cc:
45:d7:61:ef:b2:fd:3f:a2:40:29:3c:89:af:aa:22:5d:9a:40:
a9:c6:49:96:8d:f0:66:54:67:23:6d:2c:97:6a:46:c6:90:f4:
45:45:7f:0b:40:d9:b2:9d:da:64:2a:80:e0:58:7b:e5:4d:53:
88:c6:3f:8d:c1:d6:d8:5f:d4:f5:0a:5c:bd:a8:89:95:7d:36:
5c:ff:f2:63:40:8d:56:36:1e:fa:34:26:54:ee:05:89:ec:d6:
0f:cf:eb:0b:04:ad:e1:0d:71:9d:81:d1:01:66:f7:a2:da:8f:
7e:3a:82:56:be:cb:6e:c7:0a:ef:94:3e:f8:3b:d6:c7:b2:3d:
2e:cb:19:6b:38:8a:a4:d4:13:e6:35:f6:b7:13:10:86:f2:46:
d7:11:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:13 2026 by rpki-client