Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZyNRmD88Nvq7BJuggIWKGke30ng.roa
File: ZyNRmD88Nvq7BJuggIWKGke30ng.roa (raw, json)
Hash identifier: DM6W+5bERZP4hMVTIGmSMujiDmFBq+p6+S13VzA8OAo=
Subject key identifier: 67:23:51:98:3F:3C:36:FA:BB:04:9B:A0:80:85:8A:1A:47:B7:D2:78
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019D96D5177321D6417DDAF2CD7358FFDA27
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZyNRmD88Nvq7BJuggIWKGke30ng.roa
Signing time: Thu 16 Apr 2026 15:07:20 +0000
ROA not before: Thu 16 Apr 2026 15:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 2a0d:d940:3d::/48 maxlen: 48
2a0d:d940:90a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:d5:17:73:21:d6:41:7d:da:f2:cd:73:58:ff:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Apr 16 15:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=672351983f3c36fabb049ba080858a1a47b7d278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:92:23:f7:35:d6:38:73:ac:b5:e0:fc:07:
8c:2c:dd:6f:a6:cd:6c:f1:cb:6d:f3:63:ad:3b:62:
c1:83:0e:0f:92:3c:4e:9e:04:ae:ee:22:d9:58:ea:
c6:22:f5:cf:b8:4c:3e:6a:93:fd:9f:a4:57:7b:46:
fa:4d:6a:67:29:0f:2c:75:1e:39:2e:67:37:e2:ce:
53:a6:03:8a:23:6d:53:65:13:c5:4a:a4:30:2b:6b:
7c:bb:fa:b3:c6:b3:6b:36:99:19:c4:b2:dc:01:c1:
54:a8:78:f2:f7:8d:66:72:e5:aa:fe:4c:7f:d5:84:
5a:92:37:2e:f4:f0:a2:7f:f7:f5:c8:f6:52:cd:c4:
50:fe:d7:55:9f:50:42:bd:06:ab:55:43:f9:6c:bc:
05:cf:d0:d1:e2:02:53:55:3d:08:a7:6b:72:14:3a:
16:76:f1:c5:cc:11:48:03:84:b2:78:9e:be:d8:cf:
04:c5:28:b9:ff:fc:1b:68:79:87:48:bd:9e:65:c4:
4a:de:e5:bc:bb:3b:9a:da:3d:ce:c2:c5:bd:bc:b3:
8c:59:d9:5c:53:20:96:85:6b:46:25:d2:f3:20:6f:
f7:a6:24:20:49:15:68:2f:0b:b2:f9:7d:0d:37:7f:
ad:56:ef:fb:ba:e4:64:f7:61:f0:68:16:1c:82:4a:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:51:98:3F:3C:36:FA:BB:04:9B:A0:80:85:8A:1A:47:B7:D2:78
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZyNRmD88Nvq7BJuggIWKGke30ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:3d::/48
2a0d:d940:90a0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:70:17:e6:57:25:df:53:db:e8:fd:57:43:a4:c8:7d:10:c1:
10:c1:60:64:6f:6c:5f:8c:9f:65:dd:e8:e9:34:f0:84:43:6c:
ee:c8:74:6f:6a:8e:69:42:33:2d:73:4a:da:67:31:1c:f9:88:
4e:00:2a:3d:c4:88:3f:83:f1:d9:63:64:86:ae:90:20:ee:82:
66:59:68:7d:f8:74:a9:4e:a6:b7:c2:81:05:9b:37:90:27:c6:
1f:93:0b:e5:76:3c:31:3f:03:b7:64:e7:98:08:6f:20:cb:fa:
29:c1:e5:f6:d0:1f:94:fa:39:7f:60:05:c5:44:de:28:b2:03:
29:ad:86:6f:f1:6b:d1:52:49:d9:b1:63:9f:61:b2:5e:ea:26:
fe:d6:13:9a:75:05:15:a4:b6:86:8b:d5:c8:26:18:ac:bb:f1:
23:1f:56:bd:11:71:50:5f:5d:e0:5d:f8:a1:b7:e3:84:39:b7:
66:18:c7:29:22:56:bc:3c:1f:61:0a:3d:ba:81:a3:3a:ee:94:
bf:5e:d5:74:99:7f:b5:dc:50:c6:4f:3e:60:f9:12:a6:57:22:
15:cc:37:06:4f:0a:7f:79:b8:00:98:d9:2b:48:51:ab:31:89:
27:f2:24:13:11:89:1c:08:c4:fd:8f:fd:03:7c:d9:8f:90:a6:
9b:69:b6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:43 2026 by rpki-client