Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/ZyVtjjGLocNJH2LwSAGt8gqoYgE.roa
File: ZyVtjjGLocNJH2LwSAGt8gqoYgE.roa (raw, json)
Hash identifier: cFakUTOmj1JV5hfxE5yE0hEvYoySNj+UV/6/MHSkYGc=
Subject key identifier: 67:25:6D:8E:31:8B:A1:C3:49:1F:62:F0:48:01:AD:F2:0A:A8:62:01
Certificate issuer: /CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Certificate serial: 019FC4A06BEED181E947FA633DD89B37FA59
Authority key identifier: DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/ZyVtjjGLocNJH2LwSAGt8gqoYgE.roa
Signing time: Sun 02 Aug 2026 22:37:55 +0000
ROA not before: Sun 02 Aug 2026 22:37:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49926
IP address blocks: 2001:678:fb8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c4:a0:6b:ee:d1:81:e9:47:fa:63:3d:d8:9b:37:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Validity
Not Before: Aug 2 22:37:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67256d8e318ba1c3491f62f04801adf20aa86201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:40:b9:b8:a3:24:cc:00:71:67:fc:a1:9f:
15:3e:17:bb:3b:15:91:24:23:fc:81:17:5e:55:58:
a9:bf:fb:75:98:ea:01:18:76:bb:d7:b4:5b:30:fd:
c5:98:34:82:de:ed:14:30:ff:6e:b2:b3:23:9d:29:
47:56:f1:cd:56:c6:d0:7d:b3:eb:fd:32:4b:c7:f2:
9d:b3:a1:8f:3a:f4:c7:85:f1:65:a9:ba:5b:e6:a1:
11:e5:ba:61:99:91:ca:11:c9:30:d4:0c:d4:0c:71:
c0:30:27:d2:03:fb:c9:04:56:2c:f5:99:cf:28:2e:
bb:ca:be:34:14:04:14:15:d0:a3:18:b3:cb:7b:f8:
c7:85:37:58:4b:0a:7b:73:e6:95:d1:54:6f:66:fd:
5d:9c:8a:5b:02:0f:c7:23:fe:40:76:0b:30:a2:e8:
be:a8:8b:57:df:03:50:16:dc:0b:50:c0:3b:1f:44:
b0:db:6f:28:b1:57:37:b7:61:39:70:1a:85:e8:3e:
5e:36:ba:47:38:eb:a9:16:dc:0b:ab:74:13:40:5e:
5f:97:d7:6e:f3:58:3f:6a:ba:bc:a2:49:4b:a8:86:
df:4e:1f:16:98:56:a9:38:12:cf:79:4a:fd:3c:7a:
40:0b:59:39:31:33:fd:79:f0:9c:92:41:df:5d:ef:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:25:6D:8E:31:8B:A1:C3:49:1F:62:F0:48:01:AD:F2:0A:A8:62:01
X509v3 Authority Key Identifier:
keyid:DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/ZyVtjjGLocNJH2LwSAGt8gqoYgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fb8::/48
Signature Algorithm: sha256WithRSAEncryption
7b:af:ee:86:9f:ed:d7:93:bd:07:1d:11:4d:a3:db:95:3d:f7:
35:fe:94:a2:58:39:dc:85:79:cf:b5:4c:5e:95:ea:20:7e:c4:
4c:71:25:3c:b4:71:e8:37:fc:0c:a2:fb:91:15:2c:2c:16:b2:
25:66:d1:dc:e8:61:34:bd:a8:5d:87:d7:77:8b:bc:96:f4:2b:
18:7d:7c:32:a0:ce:e4:99:dd:7f:f9:76:01:9d:62:ad:87:a7:
26:6e:12:86:68:82:6c:3f:46:26:26:c7:54:ef:d4:ea:46:d1:
93:76:94:df:42:35:e3:c6:70:3b:1a:63:f9:0a:b7:3e:56:08:
ce:de:e5:26:87:26:78:cf:bb:ba:18:d6:2c:81:09:0d:0f:d3:
cf:6a:3b:aa:06:05:ca:42:2c:47:8e:cf:0f:70:62:86:b0:7c:
04:fc:80:b8:9d:14:67:6d:a9:fb:06:41:21:88:80:24:18:7d:
93:9f:36:5a:6d:f1:2f:28:bc:8d:f7:96:a5:d4:35:e3:90:9a:
ea:89:39:e0:c1:db:e7:b3:01:fe:e6:b0:6b:9f:27:40:05:2a:
b1:b9:c0:23:57:51:64:b0:7e:a0:3c:56:bf:1a:ad:97:2b:65:
b9:83:8d:88:b0:10:d7:fc:32:19:e4:0a:96:d6:d5:d3:c5:9e:
a3:a0:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:57:23 2026 by rpki-client