Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ZTD8fuKRYiaNX4nVpyJD6qP1jDE.roa
File: ZTD8fuKRYiaNX4nVpyJD6qP1jDE.roa (raw, json)
Hash identifier: dRqWb02TjyID30U42GkJOuo0MEtt70RLk3I7RGNdjgE=
Subject key identifier: 65:30:FC:7E:E2:91:62:26:8D:5F:89:D5:A7:22:43:EA:A3:F5:8C:31
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 01A1787388F5369A65D964B26F61E63BB61A
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ZTD8fuKRYiaNX4nVpyJD6qP1jDE.roa
Signing time: Mon 26 Oct 2026 13:43:19 +0000
ROA not before: Mon 26 Oct 2026 13:43:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 2.57.3.0/24 maxlen: 24
2a11:900::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:73:88:f5:36:9a:65:d9:64:b2:6f:61:e6:3b:b6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Oct 26 13:43:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6530fc7ee29162268d5f89d5a72243eaa3f58c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:e3:e5:a3:de:8b:6a:2f:db:3e:1b:7c:98:
b6:a0:cc:0a:d9:ab:e8:33:fa:26:0d:77:e8:99:29:
5c:02:c3:64:60:64:97:be:a5:d9:b4:cf:6f:17:af:
10:21:f2:b5:1e:44:8c:2c:20:f4:67:5e:ef:b4:4e:
8e:82:ab:80:be:0e:bc:37:83:20:5c:0a:00:82:3b:
91:71:1b:c4:56:90:af:b1:e3:70:67:e4:4f:f8:c5:
5b:fc:bd:30:a9:a4:19:5e:37:86:c1:61:d6:00:ff:
17:94:a1:5f:23:09:39:95:47:73:84:e4:55:3c:7e:
60:14:98:c7:76:53:6e:68:5a:b9:27:8a:a4:9a:3a:
72:d1:c4:dc:36:62:d5:0c:96:28:c5:bb:81:41:9e:
c4:7b:d3:5f:f2:07:c9:c0:5c:1e:27:71:0f:c9:00:
0d:2e:f2:69:29:bf:23:c5:16:f0:12:b7:fd:a4:69:
bd:02:e0:e5:17:3d:86:56:78:cb:21:82:66:0e:0a:
d1:07:15:23:13:0f:11:51:05:2b:eb:2e:45:32:a5:
af:95:27:87:c0:b9:8e:8f:a6:a9:2f:c2:42:c2:f1:
e8:0d:db:e7:95:e7:26:2f:b0:09:ef:c7:9f:4c:6c:
47:97:54:72:00:9a:81:10:e2:c2:0a:74:5b:88:4b:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:30:FC:7E:E2:91:62:26:8D:5F:89:D5:A7:22:43:EA:A3:F5:8C:31
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ZTD8fuKRYiaNX4nVpyJD6qP1jDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.3.0/24
IPv6:
2a11:900::/29
Signature Algorithm: sha256WithRSAEncryption
0a:7a:70:1a:a0:7d:1c:08:e7:58:1e:ab:ea:d9:df:94:75:f4:
22:a7:58:e9:4b:a3:ca:b9:92:4f:79:76:34:ab:f9:c9:f6:c6:
8d:89:0b:58:7c:e6:c7:45:bb:ae:4f:51:80:cc:7e:9f:cf:db:
96:d4:a5:77:80:54:0d:3d:5b:58:9c:69:a9:b8:2c:de:d8:5b:
b6:5e:54:0b:0b:19:c5:43:c0:90:91:32:84:5a:f3:f6:9b:e6:
9a:7f:62:e2:72:e5:4d:7a:a5:5f:f6:02:61:19:92:90:be:2b:
2b:26:1b:46:1f:66:dd:65:a4:c6:9a:31:59:29:62:eb:cf:43:
a0:16:06:23:fc:45:13:a6:35:24:0a:5b:65:e2:b7:4b:7d:9b:
6e:85:b5:c4:84:9a:e8:cb:c8:77:28:1d:1a:70:63:29:ef:bc:
ce:81:36:5f:2e:2a:04:59:fd:5f:a7:63:72:f0:88:64:3d:5a:
78:da:e2:51:f6:ff:f6:d1:a0:aa:30:ee:3e:e8:d5:f5:f9:4d:
e1:f8:c3:00:c4:af:de:44:a7:7f:25:75:d9:89:b1:51:57:0f:
fb:35:84:22:4a:ce:f1:a4:01:1a:a8:6a:c0:82:19:5b:a1:da:
11:61:9a:dd:df:b6:17:63:8f:8d:88:28:93:20:e2:de:83:59:
ac:3b:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:02 2026 by rpki-client