Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/zc5W_3LLdW77fCu_aUyFYrsHu7w.roa
File: zc5W_3LLdW77fCu_aUyFYrsHu7w.roa (raw, json)
Hash identifier: /32KDbhbFXOP0+tfjMGMh+ol47C3IeIs/4FdeziZ05w=
Subject key identifier: CD:CE:56:FF:72:CB:75:6E:FB:7C:2B:BF:69:4C:85:62:BB:07:BB:BC
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A17C6D5285C922EEB0B35243CFF7459597
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/zc5W_3LLdW77fCu_aUyFYrsHu7w.roa
Signing time: Tue 27 Oct 2026 08:15:01 +0000
ROA not before: Tue 27 Oct 2026 08:15:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 213.247.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:6d:52:85:c9:22:ee:b0:b3:52:43:cf:f7:45:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 27 08:15:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdce56ff72cb756efb7c2bbf694c8562bb07bbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:07:a0:b6:41:2d:ed:f1:f5:68:09:4d:48:
90:00:a2:bb:6a:b4:1d:0c:2a:f3:b1:08:38:6c:37:
b1:16:30:d9:5f:0f:2c:f9:0b:b8:ce:6c:e4:f8:f1:
53:15:4b:bb:d7:8e:fb:d7:21:d3:23:72:d9:4b:95:
75:15:2b:45:ae:50:e1:30:f9:ad:0b:e8:5a:86:b8:
37:db:96:5b:a6:23:33:7a:97:af:73:43:93:69:e8:
c7:17:41:5f:39:60:08:10:f0:4e:9c:c5:e8:2f:43:
6f:14:41:20:a6:2a:e8:87:90:93:46:9c:a6:f7:e6:
c9:9d:24:79:55:f7:31:87:67:b9:67:d2:62:7b:83:
fb:56:63:6b:da:cd:dc:d7:d4:c4:58:66:1c:a0:f8:
ab:2b:c6:55:36:ab:3e:29:86:76:68:32:b0:c5:ae:
46:68:d1:25:19:fa:a4:26:71:74:d5:c7:ec:75:3e:
3c:ee:f7:43:a8:14:ed:c1:9e:ca:a9:32:8a:2e:54:
4b:5e:95:49:06:16:0f:34:35:cf:34:0f:e3:22:a5:
a5:2b:00:79:4e:6f:75:e8:95:dd:5d:e2:7f:d1:4f:
03:4f:f1:e0:88:be:cb:ec:50:6e:6a:b1:64:71:aa:
72:a3:71:e1:69:bb:e4:c7:02:f4:f8:13:4d:1a:06:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:56:FF:72:CB:75:6E:FB:7C:2B:BF:69:4C:85:62:BB:07:BB:BC
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/zc5W_3LLdW77fCu_aUyFYrsHu7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.247.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e5:34:06:b1:2b:33:8d:aa:a8:7e:03:11:dc:92:e2:5e:7a:
a6:e8:cb:7e:78:b8:89:7d:94:18:0b:df:26:79:cf:62:77:cb:
72:95:77:90:a0:90:04:b7:d8:d1:36:cc:10:f9:14:cd:2c:d3:
f7:2c:ea:f8:5d:39:c7:da:24:8a:bb:ce:71:40:21:3f:a2:1f:
c8:4e:39:cf:ed:cd:fc:3d:06:3f:f6:51:42:16:90:04:8c:b7:
6a:9c:48:02:07:61:33:95:56:75:cd:90:97:02:03:2a:49:16:
c5:de:62:cf:7f:cc:84:ed:5e:9b:7f:17:4a:05:2c:ef:55:ed:
25:21:7d:f9:83:f6:31:21:0c:46:58:55:10:0a:95:f7:ba:72:
60:1e:f6:d4:38:a5:ee:e4:ad:27:a4:00:65:7c:1f:0a:e1:76:
b7:83:18:d9:51:27:a4:c7:3d:39:3a:cd:19:77:3c:ef:d2:53:
45:9b:d7:55:8a:e0:f2:66:29:e2:8e:fc:c3:6f:f8:b3:67:6b:
05:0b:1e:db:03:4e:eb:5e:bc:39:06:0a:5e:a8:5a:bc:f8:da:
48:df:5b:ec:cd:6b:8f:49:4b:b5:ff:31:bf:23:db:28:81:a7:
53:5e:7a:d8:3b:40:29:b3:54:9f:f2:12:86:93:da:0f:ea:68:
4a:2d:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:40 2026 by rpki-client