Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/IZ_WSGNHt447DpptKx9G-AV_F1Y.roa
File: IZ_WSGNHt447DpptKx9G-AV_F1Y.roa (raw, json)
Hash identifier: ZFdKMPFLiGDLU/+2cKo97GG3Gers0kri+s7sddO9chs=
Subject key identifier: 21:9F:D6:48:63:47:B7:8E:3B:0E:9A:6D:2B:1F:46:F8:05:7F:17:56
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 01A11A95152C280ABEA6CCE834261724DF21
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/IZ_WSGNHt447DpptKx9G-AV_F1Y.roa
Signing time: Thu 08 Oct 2026 08:15:40 +0000
ROA not before: Thu 08 Oct 2026 08:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213586
IP address blocks: 2001:67c:2670::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:95:15:2c:28:0a:be:a6:cc:e8:34:26:17:24:df:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Oct 8 08:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=219fd6486347b78e3b0e9a6d2b1f46f8057f1756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:bd:69:99:f8:a8:b0:77:f8:70:d8:e9:4e:
09:d2:d1:ee:ef:92:5d:1c:9c:42:69:48:79:cf:cb:
54:ca:76:fe:b4:b9:c1:f6:04:ba:54:c7:23:1e:0f:
2c:10:99:03:27:b2:f9:24:26:d6:00:d1:82:a0:2a:
d3:55:4d:1c:1f:f1:da:30:53:7d:85:70:2a:10:f9:
ab:4f:70:66:d3:7c:6b:91:e7:29:27:86:25:e8:08:
94:9a:fb:8a:69:a9:31:be:a0:f9:94:3f:00:f5:52:
52:a4:a3:c7:9d:35:92:39:0f:45:65:01:85:d8:52:
d6:b1:77:e6:15:26:f8:14:a6:21:1f:28:11:3d:c2:
8e:a0:2b:d6:67:40:e6:c3:9b:5e:ed:d0:b9:aa:ca:
24:ea:f6:77:3a:2c:d8:3b:75:58:3b:cf:91:4e:59:
ce:6c:7e:d0:28:91:08:c2:03:ce:3f:65:52:90:28:
a9:d2:ae:2c:6a:f9:3c:53:2b:76:ca:6f:c5:01:93:
ba:41:2a:78:36:bf:98:72:ef:db:03:34:d6:4f:1b:
7e:33:e4:50:e7:32:7d:f0:1c:e9:c1:74:77:d9:94:
ae:5e:05:73:f9:72:68:0a:f2:72:27:f4:bd:81:79:
18:ae:fc:17:50:fc:f8:15:8c:0a:3a:8b:ce:6d:1c:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:D6:48:63:47:B7:8E:3B:0E:9A:6D:2B:1F:46:F8:05:7F:17:56
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/IZ_WSGNHt447DpptKx9G-AV_F1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2670::/48
Signature Algorithm: sha256WithRSAEncryption
71:14:9a:7b:c5:00:50:f8:a7:d9:0e:b1:79:1c:ee:82:9a:22:
63:81:dc:2d:04:41:22:fc:3a:6b:83:8d:2c:13:ea:1d:32:be:
e3:1c:b0:2a:fa:84:84:ab:c2:b6:21:13:29:93:4c:12:ce:fe:
44:6e:ef:aa:76:99:f8:34:86:b9:2d:28:f2:09:41:91:ce:4c:
d0:ba:69:2d:7c:5c:7b:91:d0:55:3f:f1:e6:a0:29:a5:b1:90:
70:80:ae:d7:ac:bb:1d:c2:4b:b7:1b:b0:c9:e3:d1:f4:94:82:
9f:1c:8f:50:27:d9:81:e2:bd:c7:62:9d:58:8c:d0:7b:bf:20:
5d:2f:6b:a4:0f:9a:7d:eb:09:99:be:28:d2:d9:96:0e:f6:31:
c6:ad:af:0c:e8:e5:44:43:77:fb:99:ef:72:ee:dc:1d:ae:95:
f0:cb:03:63:d4:f0:30:0f:27:f7:14:6e:19:e3:27:43:66:76:
32:13:44:0d:51:c5:89:85:40:0c:cc:a2:da:c7:78:1e:7f:b0:
c2:7b:d7:50:ed:70:1b:12:87:a8:ac:ec:ef:dc:7f:72:49:7c:
2b:48:8e:cc:33:4f:d5:0e:bc:01:39:d7:ec:12:3d:f2:1d:8a:
a7:9c:07:6d:cb:d1:35:35:f3:52:ca:e5:d1:a2:a2:bb:77:c4:
bb:bd:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:21 2026 by rpki-client