Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZPCp-DgU_E51cTrQnkffMCCUk2U.roa
File: ZPCp-DgU_E51cTrQnkffMCCUk2U.roa (raw, json)
Hash identifier: KaqgnNXnfRnzofTgZjiUmnLB0TH2GpGBJZveT3ezi9I=
Subject key identifier: 64:F0:A9:F8:38:14:FC:4E:75:71:3A:D0:9E:47:DF:30:20:94:93:65
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0F937843D2C2611FA0FCCA6DA9584668D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZPCp-DgU_E51cTrQnkffMCCUk2U.roa
Signing time: Thu 01 Oct 2026 20:46:00 +0000
ROA not before: Thu 01 Oct 2026 20:46:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400402
IP address blocks: 2.26.167.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:37:84:3d:2c:26:11:fa:0f:cc:a6:da:95:84:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 1 20:46:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64f0a9f83814fc4e75713ad09e47df3020949365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:a0:fd:50:32:85:29:51:8e:0b:99:88:b9:
c3:3c:ec:9d:36:3c:fd:b4:99:9a:c7:b7:4f:d4:17:
dd:af:23:52:24:17:33:01:69:08:e3:6d:87:52:e7:
4c:a1:03:95:93:7d:25:90:ee:f1:5e:f0:ad:03:10:
d9:3a:0d:3f:ce:4a:9c:b7:63:2e:d3:cc:2b:2c:b3:
29:b3:96:96:eb:d0:3f:64:f7:16:9e:e8:2e:12:8e:
b1:76:9c:e0:f9:16:db:40:4e:dc:57:89:10:06:56:
35:06:0d:0b:b8:6e:8b:dc:6e:a3:b1:65:e4:86:0c:
8d:00:38:c1:91:f1:1d:87:3a:c9:86:87:2d:7f:b9:
f4:b6:7a:ca:f8:8f:71:44:65:fd:4f:c2:ba:ca:9b:
14:bb:91:8d:7c:b6:31:2b:50:2a:7e:ec:c0:ac:1b:
c1:00:c6:1b:5e:3a:29:db:f6:ec:77:91:10:72:86:
2d:f3:c4:d4:9f:75:27:da:04:ea:c2:eb:bc:ca:45:
0d:88:69:f8:59:7f:51:b3:d4:5e:6b:48:98:72:5d:
e2:06:6c:43:aa:39:2d:64:6c:b4:c9:62:0d:35:49:
6c:ab:2b:76:d0:4b:9b:99:8d:04:06:02:e3:d7:b0:
cf:52:9d:8e:1b:aa:b9:e9:91:79:76:16:0e:06:3b:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:A9:F8:38:14:FC:4E:75:71:3A:D0:9E:47:DF:30:20:94:93:65
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZPCp-DgU_E51cTrQnkffMCCUk2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.167.0/24
2.27.140.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:3d:f8:49:c9:51:6d:0f:2c:68:08:f7:1d:f2:af:0c:2c:bc:
b3:2a:17:c6:b4:f5:37:16:c6:fe:d0:09:f0:55:4b:f5:d3:63:
ca:fc:a0:09:6a:c3:29:69:91:71:25:48:fd:15:76:30:9e:1a:
e4:8b:5d:59:56:2b:63:79:fa:bf:a9:b4:74:ef:64:7c:0e:49:
8a:9c:0c:20:25:15:a4:30:6a:c2:81:5c:b9:52:ba:18:0d:c3:
af:84:94:9e:60:18:74:4f:39:38:c3:6f:14:13:ab:b1:c1:1b:
f8:3d:7f:5f:be:1c:26:16:7e:e0:f1:a5:ca:3d:0d:5b:4c:14:
2a:72:5f:51:12:1a:6f:2d:2c:c8:35:33:a2:8e:1c:8c:f1:57:
f9:4f:ec:63:a5:5f:4d:1a:1a:83:3e:47:05:36:7c:ee:98:63:
4d:96:20:6c:cb:3a:8c:14:aa:f5:ce:d3:2b:e5:59:7f:0d:17:
27:6c:7c:26:1c:f6:e1:d6:7d:20:83:dc:10:e3:40:a2:c5:d2:
e3:a4:93:29:8a:d0:48:6c:9f:52:d8:8f:a5:da:b5:ba:ae:58:
42:dd:08:e6:2b:22:f0:d7:92:98:4c:9e:b2:70:62:81:07:30:
76:e5:94:c1:f3:69:b1:7e:21:76:87:b5:8b:82:e7:e4:72:27:
43:fb:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:16:12 2026 by rpki-client