Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa
File: ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa (raw, json)
Hash identifier: 4anR5lz+iPBfqZgtXZg/nhMp2EG3l7fsaSGpS3G04V8=
Subject key identifier: 66:9A:AA:12:3F:8E:B5:3A:87:31:E7:9C:EC:EB:81:B5:3D:2B:97:F1
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019FA423287FD3FFCAE342C935E8F60F6934
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa
Signing time: Mon 27 Jul 2026 15:13:15 +0000
ROA not before: Mon 27 Jul 2026 15:13:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402511
IP address blocks: 2a11:4300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:28:7f:d3:ff:ca:e3:42:c9:35:e8:f6:0f:69:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 27 15:13:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=669aaa123f8eb53a8731e79ceceb81b53d2b97f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:51:cb:db:27:b9:3b:d2:ee:a7:7c:ce:37:
b6:f9:86:32:03:a9:5d:70:70:40:00:3b:00:9f:f4:
65:67:db:54:cc:51:33:84:c9:52:a9:0b:7e:5e:57:
1c:b0:91:cf:76:e6:4e:14:ad:49:00:55:0d:e3:ec:
6a:55:12:e4:30:75:ec:01:ad:11:e0:a7:87:22:1e:
30:b8:f2:c2:e0:0f:f3:33:8e:f2:24:77:e3:e2:d6:
b3:3e:c2:a0:34:37:12:0b:6f:e1:bb:f8:ca:c4:b8:
20:6f:94:da:5f:65:ee:a9:d1:a7:0b:62:af:41:97:
27:30:a4:0b:e2:00:51:12:78:28:54:8e:05:de:59:
08:04:ee:53:0e:34:e9:09:4d:66:09:f3:63:6b:65:
be:13:8d:d9:16:09:22:6d:c4:30:14:93:ec:0f:7f:
05:50:54:72:70:d3:ab:a1:13:a2:26:c2:45:86:0c:
17:55:13:fc:9f:f2:79:47:94:c4:6c:d9:d1:40:36:
63:c5:11:4a:6c:3e:a9:04:de:68:89:a1:8b:aa:2c:
75:97:4c:40:a8:25:7d:eb:7e:d4:87:2a:2a:c9:27:
4a:4a:50:db:63:29:90:aa:5e:f3:32:fe:d5:e0:bb:
a2:5e:cf:0a:67:24:a0:29:e9:67:f5:b2:64:0a:36:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:AA:12:3F:8E:B5:3A:87:31:E7:9C:EC:EB:81:B5:3D:2B:97:F1
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4300::/29
Signature Algorithm: sha256WithRSAEncryption
91:12:ce:45:68:a2:4d:52:ac:d2:4c:99:d4:8e:60:ed:0e:37:
97:7e:14:d6:ef:95:bb:e8:09:9e:01:11:ea:59:52:f7:b6:44:
d2:e7:ca:71:a3:b7:87:b6:1f:fc:48:e3:4b:2d:b1:a1:3f:2d:
2e:2c:57:88:2c:76:95:c1:46:58:6b:f8:a2:35:cd:76:ef:59:
2b:69:1f:4d:57:56:95:34:2e:35:a8:00:04:76:b3:2f:23:29:
5f:ef:c7:14:f4:33:d0:bc:46:8f:3b:f7:12:c1:5f:e2:28:2d:
df:aa:6a:87:fe:65:82:5f:93:af:40:72:c0:7c:57:0e:18:78:
c8:cd:e2:d0:02:c2:2f:14:de:1c:b6:b2:a7:b5:16:3e:46:58:
01:45:31:29:1b:ba:6d:f5:10:64:d4:0b:53:40:c5:7d:05:20:
a5:16:d8:c0:f5:59:c8:85:9a:8f:9b:be:3e:73:bd:31:c5:2d:
52:d3:b7:fd:d6:8d:6a:e6:7a:ba:dd:3a:23:e8:c2:39:d6:10:
42:2d:64:1f:c3:69:d2:dd:bb:11:7e:59:df:4c:9e:cd:bd:9d:
c7:0d:6a:56:07:1e:a5:a2:19:41:33:c4:87:06:87:36:2b:fa:
4b:37:cc:04:79:22:01:36:7b:3b:a9:7a:68:19:5f:6d:e5:8c:
e4:a0:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:06:37 2026 by rpki-client