Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/dz0vm_90sWc-8UHgdpZFYKLHSj4.roa
File: dz0vm_90sWc-8UHgdpZFYKLHSj4.roa (raw, json)
Hash identifier: d+huGlJ3i2+T89DB/7T0JlJpyWXcAU1t15bZAT6WMNs=
Subject key identifier: 77:3D:2F:9B:FF:74:B1:67:3E:F1:41:E0:76:96:45:60:A2:C7:4A:3E
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A09457A83C05757B802343F8E165C3C5D5
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/dz0vm_90sWc-8UHgdpZFYKLHSj4.roa
Signing time: Sat 12 Sep 2026 06:39:27 +0000
ROA not before: Sat 12 Sep 2026 06:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139803
IP address blocks: 2a10:da40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:57:a8:3c:05:75:7b:80:23:43:f8:e1:65:c3:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 12 06:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=773d2f9bff74b1673ef141e076964560a2c74a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:51:d9:79:a2:e3:af:4a:e0:7b:3e:21:28:
c6:12:e5:1a:d4:dd:2f:f9:59:04:7d:81:a6:5f:38:
49:31:fb:ed:c8:00:78:04:76:ee:67:1c:a9:e4:5e:
92:ea:27:42:8c:f3:1e:aa:34:f3:59:a2:d0:7d:e6:
27:35:fd:33:e1:84:f7:81:bc:d4:2c:34:5f:fe:05:
30:ee:83:25:35:31:d7:f0:07:aa:60:02:2a:67:ac:
50:07:f3:54:7e:72:8c:71:44:67:8a:9c:2e:c9:6b:
ca:9d:cd:cc:1f:29:8b:a0:e9:37:c5:5f:f6:29:aa:
dc:96:9c:dd:29:dd:fa:6c:46:e7:fa:a4:3d:bf:1e:
7d:25:13:ae:71:04:68:f6:c2:68:3d:f6:64:cd:5b:
37:3c:5e:56:46:f1:cd:ff:e8:51:96:49:ec:1d:37:
a5:2e:03:ef:2f:58:0d:8c:35:00:87:cf:55:4e:48:
c5:b5:88:24:1d:88:fd:05:cb:37:10:cb:3b:9a:80:
f5:56:d9:0a:46:87:cb:3c:cc:ac:76:92:5a:d3:f0:
82:b5:15:02:7a:04:c4:6b:4e:31:52:15:8b:de:35:
c1:c6:6b:75:9d:20:b9:7a:fc:2d:46:6c:2b:c9:13:
ce:3f:ce:a4:62:45:a6:63:05:2b:42:04:c7:91:8e:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:2F:9B:FF:74:B1:67:3E:F1:41:E0:76:96:45:60:A2:C7:4A:3E
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/dz0vm_90sWc-8UHgdpZFYKLHSj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:da40::/29
Signature Algorithm: sha256WithRSAEncryption
10:d8:4d:36:58:83:ec:fe:23:73:00:f5:80:5e:80:74:11:63:
27:91:23:59:30:73:06:07:10:30:13:a7:45:f0:dc:28:14:df:
7f:02:7b:22:14:0e:27:4c:01:bf:d4:2a:e8:f0:15:23:91:60:
f0:1a:f0:84:8a:ce:f0:ad:3d:c9:f5:2e:94:78:32:fe:7b:72:
d9:82:6c:87:3b:cc:9b:50:0b:14:4e:c4:d2:31:58:e7:ee:a6:
64:ff:23:33:09:88:7a:85:21:40:47:ec:df:a5:f3:ce:4e:21:
e5:67:6b:8a:c6:ce:98:93:7d:25:5e:c5:c6:0b:e6:21:d7:c3:
11:d6:72:7b:75:07:8e:44:18:9a:5e:03:2b:9e:7a:fe:eb:36:
65:cf:15:d6:29:1f:05:65:b6:f7:f3:0b:e9:90:8a:3c:07:1a:
4b:41:10:b1:f2:1e:60:eb:c9:f3:68:2f:f3:3a:71:46:fb:3d:
c9:0b:e6:46:60:2c:61:e6:8f:dc:63:0b:9c:94:79:c9:c4:06:
a6:18:0d:40:a7:8b:8b:40:1f:b4:bf:b4:ba:ea:37:04:dc:2d:
67:38:c3:55:cb:1f:9d:77:c9:9b:a0:db:8b:ac:36:50:ec:9c:
d0:6f:21:65:d2:4f:c0:35:f6:17:e9:63:69:43:c1:ab:f7:8c:
2b:00:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:19 2026 by rpki-client