Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/zWU-Qy4G8iGTz8MTeqz8dHClz-s.roa
File: zWU-Qy4G8iGTz8MTeqz8dHClz-s.roa (raw, json)
Hash identifier: 8KOZgKpI/1oW0YXilP2w8pzWvf8E4JdNQvX0Tq7OYNE=
Subject key identifier: CD:65:3E:43:2E:06:F2:21:93:CF:C3:13:7A:AC:FC:74:70:A5:CF:EB
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019FB30D844B8A700E0CE884888F84E389CF
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/zWU-Qy4G8iGTz8MTeqz8dHClz-s.roa
Signing time: Thu 30 Jul 2026 12:43:55 +0000
ROA not before: Thu 30 Jul 2026 12:43:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:0d:84:4b:8a:70:0e:0c:e8:84:88:8f:84:e3:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jul 30 12:43:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd653e432e06f22193cfc3137aacfc7470a5cfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:96:96:47:cf:ac:3e:34:39:25:73:47:f0:
db:87:92:0f:f5:3e:62:14:8e:5d:ea:f5:1f:17:1b:
90:1f:88:cb:5b:30:6d:4f:ee:00:30:16:4f:d6:a2:
c4:fb:92:ce:1a:f8:20:47:75:5f:c4:4a:a2:4e:e4:
db:8a:90:e3:b1:69:24:3e:87:22:c0:43:ef:8d:43:
4d:30:6d:4f:16:76:b7:95:33:81:b2:c7:b0:63:b6:
48:da:4f:60:33:58:fe:15:79:22:fb:46:b7:df:1d:
f6:3e:1a:f0:84:b2:69:7c:39:10:94:77:07:08:72:
3a:5b:62:d5:5f:6b:55:69:a6:35:26:58:d8:74:e6:
0d:05:3f:ac:d4:71:bc:70:f9:68:ac:e5:66:4e:be:
11:3f:3c:d9:08:f5:5e:eb:a2:2c:3d:c1:14:44:e5:
ca:2d:ea:68:55:7b:15:87:26:e4:10:5e:d9:e8:95:
46:f1:1f:6e:1f:b6:23:21:b6:13:27:03:7b:26:d1:
5b:0c:46:1e:60:db:4d:d8:02:0f:66:46:0b:fc:c0:
b4:1a:d0:11:76:ac:35:2b:ce:70:b5:27:60:67:dc:
d0:6e:92:48:b9:d6:30:47:72:55:83:0a:99:ef:52:
d4:25:d7:5c:fc:38:32:9f:fa:db:05:0d:38:70:db:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:3E:43:2E:06:F2:21:93:CF:C3:13:7A:AC:FC:74:70:A5:CF:EB
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/zWU-Qy4G8iGTz8MTeqz8dHClz-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
33:45:13:48:a6:52:e7:e5:32:32:c9:80:24:e3:1c:6b:05:3a:
af:a7:06:9c:69:21:fe:ec:f9:14:76:73:d2:3b:bb:98:3b:ee:
73:c5:2e:89:2c:bf:d0:9d:67:b8:4f:c4:21:5c:4f:5c:53:82:
98:13:cb:e1:40:e8:38:c3:fe:f2:b7:be:07:32:7e:30:50:b6:
0e:52:f7:40:1d:93:1b:71:08:2b:cb:47:1e:68:50:43:89:ac:
20:f1:49:7d:63:1a:b8:96:cd:19:a6:7f:bb:58:04:1f:b9:5d:
ed:07:e0:ce:eb:96:2b:66:90:d6:f9:9e:b3:1c:b6:12:df:e2:
9e:c9:57:97:23:fe:0d:06:12:d5:72:b8:c1:d7:d5:d5:f0:60:
10:0c:b4:12:89:fc:c3:45:a0:6d:c2:7f:72:1e:e2:30:ee:34:
8f:f0:b0:90:2d:82:ce:ca:25:41:d6:7e:55:74:16:c7:52:3d:
72:98:a0:ca:eb:2d:00:97:f0:23:91:93:5c:cd:a9:41:d0:63:
31:c4:49:61:b8:e4:9a:58:82:28:48:52:a0:3c:2d:aa:cc:f1:
0c:b1:b4:ad:0d:7d:9c:6a:5b:3c:5b:21:b9:5c:ee:e7:fa:06:
63:11:d6:d1:5d:e4:18:2e:e4:a8:59:7d:e6:ab:31:04:7e:a1:
d5:d0:17:0a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+zDYRLinAODOiEiI+E44nPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjYwNzMwMTI0MzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDY1M2U0MzJlMDZmMjIxOTNjZmMzMTM3YWFjZmM3NDcwYTVjZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP6WlkfPrD40OSVzR/Dbh5IP9T5i
FI5d6vUfFxuQH4jLWzBtT+4AMBZP1qLE+5LOGvggR3VfxEqiTuTbipDjsWkkPoci
wEPvjUNNMG1PFna3lTOBssewY7ZI2k9gM1j+FXki+0a33x32PhrwhLJpfDkQlHcH
CHI6W2LVX2tVaaY1JljYdOYNBT+s1HG8cPlorOVmTr4RPzzZCPVe66IsPcEUROXK
LepoVXsVhybkEF7Z6JVG8R9uH7YjIbYTJwN7JtFbDEYeYNtN2AIPZkYL/MC0GtAR
dqw1K85wtSdgZ9zQbpJIudYwR3JVgwqZ71LUJddc/Dgyn/rbBQ04cNukbQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM1lPkMuBvIhk8/DE3qs/HRwpc/rMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEveldVLVF5NEc4aUdUejhNVGVxejhkSENsei1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHzwDAN
BgkqhkiG9w0BAQsFAAOCAQEAM0UTSKZS5+UyMsmAJOMcawU6r6cGnGkh/uz5FHZz
0ju7mDvuc8UuiSy/0J1nuE/EIVxPXFOCmBPL4UDoOMP+8re+BzJ+MFC2DlL3QB2T
G3EIK8tHHmhQQ4msIPFJfWMauJbNGaZ/u1gEH7ld7QfgzuuWK2aQ1vmesxy2Et/i
nslXlyP+DQYS1XK4wdfV1fBgEAy0Eon8w0WgbcJ/ch7iMO40j/CwkC2CzsolQdZ+
VXQWx1I9cpigyustAJfwI5GTXM2pQdBjMcRJYbjkmliCKEhSoDwtqszxDLG0rQ19
nGpbPFshuVzu5/oGYxHW0V3kGC7kqFl95qsxBH6h1dAXCg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:25:21 2026 by rpki-client