Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/z72WIHR7SLwLV2ZSRlXXT9gLMs4.roa
File: z72WIHR7SLwLV2ZSRlXXT9gLMs4.roa (raw, json)
Hash identifier: whvRH345bUn/JKT0N6wVnZvM88uU9/EvdQEmQRqS4Kk=
Subject key identifier: CF:BD:96:20:74:7B:48:BC:0B:57:66:52:46:55:D7:4F:D8:0B:32:CE
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 01A018F07954D3163A24E04112791952A9E7
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/z72WIHR7SLwLV2ZSRlXXT9gLMs4.roa
Signing time: Wed 19 Aug 2026 07:33:27 +0000
ROA not before: Wed 19 Aug 2026 07:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 2a06:a880:1::/48 maxlen: 48
2a06:a880:2::/48 maxlen: 48
2a06:a880:3::/48 maxlen: 48
2a06:a880:4::/48 maxlen: 48
2a06:a880:5::/48 maxlen: 48
2a06:a880:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:f0:79:54:d3:16:3a:24:e0:41:12:79:19:52:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Aug 19 07:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfbd9620747b48bc0b5766524655d74fd80b32ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:06:03:20:84:e2:14:e1:2d:04:46:1f:9b:
13:06:0a:1e:de:68:0d:d8:3d:f6:ed:53:a3:1f:1f:
3c:02:f1:ab:37:f8:29:6d:fd:dd:f7:19:35:50:1e:
4c:df:06:20:74:1e:21:8b:ad:84:e5:b7:9e:96:a9:
a6:6f:85:1f:06:21:08:78:7d:02:1c:b6:9f:5d:c1:
80:56:93:98:09:5c:78:64:fa:03:d7:d0:54:a0:66:
67:87:59:6c:86:66:1d:d9:7c:93:a8:c3:5a:96:8f:
50:93:02:5b:63:33:3d:bc:47:de:ef:ae:25:df:da:
09:5b:9d:bf:4d:6e:c4:a1:54:b7:b2:bf:59:fe:77:
41:52:9e:f6:16:0a:13:da:40:af:2b:aa:4a:6a:d4:
2b:2c:08:7f:63:a2:72:45:36:14:d3:71:a2:67:e9:
aa:a9:25:6c:f9:7a:c2:56:20:7d:ce:b1:f3:71:10:
8d:c1:68:4b:08:3b:c5:ff:73:e2:fa:ce:9b:8e:6d:
d8:56:d5:5a:9d:cf:3f:84:fd:95:7f:62:62:ad:b1:
4c:c1:83:ca:83:ca:5f:fd:b2:36:35:b4:f9:f9:3c:
58:ff:f5:63:9c:e8:eb:93:87:34:7d:fb:6e:c8:3c:
1a:5c:3a:8d:6e:ff:b1:8a:e4:e5:c5:0e:6b:ae:43:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:96:20:74:7B:48:BC:0B:57:66:52:46:55:D7:4F:D8:0B:32:CE
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/z72WIHR7SLwLV2ZSRlXXT9gLMs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a880:1::-2a06:a880:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:bf:e7:a3:44:67:42:77:9f:f2:31:d9:4a:b7:dc:29:69:61:
3c:62:3b:91:e1:d7:dd:37:ec:d4:ce:80:41:04:c0:3a:0e:a9:
14:e2:d1:20:4f:76:16:67:81:2b:b3:b1:97:fc:04:ee:54:aa:
a0:9c:20:f2:7d:f9:0e:ca:8b:c3:3b:11:16:cd:f7:05:19:63:
4b:94:b5:f5:38:9e:69:df:c1:7c:6e:a3:bb:ae:85:f9:67:e3:
f6:f0:ed:a9:0e:26:9a:07:f6:c0:80:27:bb:27:e4:2f:65:68:
76:d2:c9:f9:7f:48:f9:91:e7:1c:b1:fd:d1:64:14:52:84:fd:
fd:47:b9:d0:e2:2a:7d:66:5b:82:b8:61:35:9f:b0:a4:52:85:
5f:5c:60:eb:e2:79:86:41:52:b7:2e:f5:b7:22:bf:9f:76:ee:
0d:02:44:22:1b:1c:5a:85:98:9f:5f:d7:7d:c4:90:24:85:cd:
08:82:7e:55:7f:c8:ce:0e:b9:ef:49:b8:aa:54:10:9b:e8:47:
cd:b3:ad:61:77:d4:96:31:80:13:c6:ba:4e:57:96:44:e7:81:
50:c5:7f:69:d1:a7:8a:39:c1:23:d9:94:dd:27:af:3f:d4:85:
ea:9e:8b:e3:53:d0:a1:fd:85:78:aa:9f:e9:10:e4:56:2b:fa:
eb:21:94:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 22 08:03:05 2026 by rpki-client