Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/pz0cBU5kNnxFQmG7d_jajJsuZhw.roa
File: pz0cBU5kNnxFQmG7d_jajJsuZhw.roa (raw, json)
Hash identifier: mHIryTn2nZYxJ3jb+100JljOGOyRK2Vo4Tu+sTeZoc0=
Subject key identifier: A7:3D:1C:05:4E:64:36:7C:45:42:61:BB:77:F8:DA:8C:9B:2E:66:1C
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A0581F9FC801A074429F3A2BB985CBB7C8
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/pz0cBU5kNnxFQmG7d_jajJsuZhw.roa
Signing time: Mon 31 Aug 2026 14:01:02 +0000
ROA not before: Mon 31 Aug 2026 14:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213615
IP address blocks: 2001:978:3c05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:1f:9f:c8:01:a0:74:42:9f:3a:2b:b9:85:cb:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Aug 31 14:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a73d1c054e64367c454261bb77f8da8c9b2e661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:97:cf:18:63:62:c9:2b:8e:d8:3a:78:5a:
78:7e:00:01:80:71:ee:4a:16:5f:a8:80:f0:3b:1a:
eb:a3:45:cd:a4:81:da:da:99:25:41:ea:e5:83:e6:
bb:40:f9:d0:52:31:07:b2:12:17:88:b4:72:51:f5:
cf:ae:c3:0a:8b:f5:e4:00:50:f8:40:c6:b9:d5:01:
83:da:20:dd:d9:24:8f:a5:f2:14:82:5f:47:20:9d:
b8:4b:f2:7d:92:d6:f9:78:a3:10:47:72:43:23:7d:
88:76:26:f8:18:37:93:12:e7:f9:6c:61:a1:6e:08:
77:57:b8:0a:6f:d8:47:e7:52:cd:b5:ea:ad:08:ad:
1d:bb:69:01:04:68:8f:a7:f1:44:d5:b2:42:ea:ba:
58:bf:1e:a7:ec:0a:00:41:1a:e4:5b:ee:8d:c0:48:
78:86:94:00:02:05:29:34:31:3c:11:18:2e:68:b1:
7a:cd:ac:65:84:7d:f2:21:91:23:f8:45:7f:b3:08:
34:e7:fb:49:31:60:f4:c9:3a:33:f7:41:61:cf:af:
c4:5a:b9:7f:33:fa:f2:10:ae:30:8f:71:23:81:b8:
6e:62:86:8e:ee:c0:8c:69:bf:5a:fb:f4:40:b8:72:
39:97:f3:b2:81:45:dc:92:84:51:1c:b8:f3:7b:d3:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:1C:05:4E:64:36:7C:45:42:61:BB:77:F8:DA:8C:9B:2E:66:1C
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/pz0cBU5kNnxFQmG7d_jajJsuZhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:978:3c05::/48
Signature Algorithm: sha256WithRSAEncryption
73:e7:4e:de:04:03:d3:27:04:fb:c2:a1:f6:e0:0c:3f:74:b5:
ef:39:e1:6c:4c:99:11:b8:41:63:15:f7:0b:a9:eb:9b:1e:69:
78:51:50:73:1a:0b:73:af:49:a9:ea:e5:13:f2:8f:d9:ac:dd:
08:1c:6a:54:23:c9:1c:70:e1:a8:5f:0a:ab:03:cf:e6:b4:9e:
ed:a3:01:40:ed:a9:39:1d:5b:f7:1d:d1:46:83:dc:f5:99:57:
14:f8:9d:96:44:52:0f:de:e4:4c:3f:8b:b1:b0:39:fd:fb:70:
c5:e2:83:a1:02:05:77:9e:19:34:04:68:91:c2:34:e4:6e:65:
ca:a4:07:3e:a2:5d:15:de:f3:a4:07:48:7e:66:28:15:86:e3:
df:36:b8:2d:f2:66:ef:d3:7a:7e:7e:38:15:ca:bf:73:29:de:
54:67:6e:db:f2:ed:db:27:9c:67:61:1f:43:8f:31:60:f8:7a:
4f:08:64:a8:41:90:af:e9:2d:a7:e9:2c:d6:a2:5f:25:bc:9d:
16:b4:3b:82:80:42:93:c2:53:34:c8:23:de:42:c4:e7:83:ea:
2f:41:61:3e:de:96:56:8d:96:c4:c4:6f:f7:fd:14:14:fb:27:
b2:67:ff:d3:9e:5f:62:18:75:71:a3:bf:8b:2d:c4:d6:0c:47:
e4:9c:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:37:05 2026 by rpki-client