Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PZYlmbZhs566UCtFH086bl_C7Z4.roa
File: PZYlmbZhs566UCtFH086bl_C7Z4.roa (raw, json)
Hash identifier: BgUjHHuhpmgYOZTs/sfqHQqeRd/7c/kTXlv5S5vIY+Y=
Subject key identifier: 3D:96:25:99:B6:61:B3:9E:BA:50:2B:45:1F:4F:3A:6E:5F:C2:ED:9E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A03AFF0AA1664BAA61DC20DFCD91CCAAD6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PZYlmbZhs566UCtFH086bl_C7Z4.roa
Signing time: Tue 25 Aug 2026 22:16:27 +0000
ROA not before: Tue 25 Aug 2026 22:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218866
IP address blocks: 2a0f:b240:a0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:ff:0a:a1:66:4b:aa:61:dc:20:df:cd:91:cc:aa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 25 22:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d962599b661b39eba502b451f4f3a6e5fc2ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:f7:67:f9:63:95:82:b5:99:99:e5:03:56:
9c:b0:29:91:99:82:4c:9c:6d:0f:84:1a:2e:4d:93:
b6:0a:02:2d:ad:f6:0d:61:2d:96:1f:a1:e2:96:3b:
61:40:eb:5e:4b:a6:f8:f3:a7:9a:03:9d:f5:be:d7:
1b:ee:64:cb:43:c8:ec:31:2e:5b:b8:21:8b:88:dd:
2b:0e:cc:1d:be:65:1a:8e:c3:18:70:66:5e:32:c7:
6e:70:09:0b:c7:21:4c:9f:ef:b7:e6:e4:6c:cb:44:
7b:ba:74:b3:f9:8e:03:bf:0f:5a:e3:5f:51:af:8e:
42:03:eb:d9:f9:19:2a:b0:80:36:63:1c:a2:fd:74:
03:16:e0:0f:30:6b:25:d6:ff:b8:51:df:43:fb:a0:
db:9a:a3:c9:25:9a:6a:29:1d:81:bf:57:00:dd:08:
8b:03:95:d1:35:67:76:6f:3d:cb:35:0c:63:20:11:
2d:5c:a3:db:72:22:79:49:40:c5:3b:d5:1b:11:1e:
60:1f:8f:cf:76:ab:39:84:22:c1:20:2b:df:53:47:
28:77:44:d5:12:80:4e:9d:72:b6:5d:37:71:ef:39:
20:f6:ea:75:be:e3:bd:03:b3:1c:43:90:0a:1a:5b:
8d:24:35:d9:c6:26:8e:d7:33:a5:ee:18:2d:25:b5:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:96:25:99:B6:61:B3:9E:BA:50:2B:45:1F:4F:3A:6E:5F:C2:ED:9E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PZYlmbZhs566UCtFH086bl_C7Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:a0::/46
Signature Algorithm: sha256WithRSAEncryption
67:b8:7c:af:25:93:87:20:13:91:2d:9b:aa:f5:5c:a6:55:e8:
6c:ff:d5:66:b3:71:88:83:58:8b:78:c9:09:cd:15:52:61:3d:
96:1b:59:d8:57:d9:93:73:c9:14:8c:f0:b1:3d:e3:df:f3:59:
d9:64:8b:b2:ca:92:75:a1:8d:5f:4e:f8:bd:c3:b3:90:a9:ec:
38:05:91:27:c0:67:6b:09:63:fe:e0:87:58:77:29:b9:ea:23:
f3:43:b3:ce:91:27:60:11:e0:15:d2:5f:48:29:61:1b:db:c5:
5b:88:a0:6f:f7:5f:fb:60:c0:51:ee:e4:2f:fd:0b:25:69:50:
fa:94:07:c1:aa:f8:cc:1a:50:8b:e4:a8:1f:91:a9:1c:64:b6:
ad:3d:8d:a5:b5:c9:e0:ce:47:ee:c1:e1:a5:3f:7b:95:fd:4e:
ff:48:1d:ff:3b:de:76:b9:3a:17:86:c2:c3:82:2a:f0:ae:f7:
3a:96:d6:5a:3c:a1:47:5e:71:1b:d6:1d:ac:82:fd:e9:c3:bd:
9f:2b:3e:19:18:66:9b:71:87:45:fe:e2:cf:85:28:6c:05:4d:
da:71:f6:b6:4c:06:1a:0a:19:6f:9b:6b:64:6f:f1:c8:00:bb:
ef:9b:e7:fe:dd:b8:29:37:62:3a:fe:1d:ca:e7:90:a6:a7:7d:
92:19:f4:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaA6/wqhZkuqYdwg382RzKrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYwODI1MjIxNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDk2MjU5OWI2NjFiMzllYmE1MDJiNDUxZjRmM2E2ZTVmYzJlZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTL3Z/ljlYK1mZnlA1acsCmRmYJM
nG0PhBouTZO2CgItrfYNYS2WH6HiljthQOteS6b486eaA531vtcb7mTLQ8jsMS5b
uCGLiN0rDswdvmUajsMYcGZeMsducAkLxyFMn++35uRsy0R7unSz+Y4Dvw9a419R
r45CA+vZ+RkqsIA2Yxyi/XQDFuAPMGsl1v+4Ud9D+6DbmqPJJZpqKR2Bv1cA3QiL
A5XRNWd2bz3LNQxjIBEtXKPbciJ5SUDFO9UbER5gH4/Pdqs5hCLBICvfU0cod0TV
EoBOnXK2XTdx7zkg9up1vuO9A7McQ5AKGluNJDXZxiaO1zOl7hgtJbX2dwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD2WJZm2YbOeulArRR9POm5fwu2eMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvUFpZbG1iWmhzNTY2VUN0RkgwODZibF9DN1o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg+yQACg
MA0GCSqGSIb3DQEBCwUAA4IBAQBnuHyvJZOHIBORLZuq9VymVehs/9Vms3GIg1iL
eMkJzRVSYT2WG1nYV9mTc8kUjPCxPePf81nZZIuyypJ1oY1fTvi9w7OQqew4BZEn
wGdrCWP+4IdYdym56iPzQ7POkSdgEeAV0l9IKWEb28VbiKBv91/7YMBR7uQv/Qsl
aVD6lAfBqvjMGlCL5KgfkakcZLatPY2ltcngzkfuweGlP3uV/U7/SB3/O952uToX
hsLDgirwrvc6ltZaPKFHXnEb1h2sgv3pw72fKz4ZGGabcYdF/uLPhShsBU3acfa2
TAYaChlvm2tkb/HIALvvm+f+3bgpN2I6/h3K55Cmp32SGfQz
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:01 2026 by rpki-client