Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/zXbldvcMA8dN_ba2zMyuoEGBz54.roa
File: zXbldvcMA8dN_ba2zMyuoEGBz54.roa (raw, json)
Hash identifier: NXKCqlTZSC9M+ZHIabHezkycT+ugW1bhgAKQFOCfYkY=
Subject key identifier: CD:76:E5:76:F7:0C:03:C7:4D:FD:B6:B6:CC:CC:AE:A0:41:81:CF:9E
Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial: 01A07C38410BB2F5FF8C13739484A034A561
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/zXbldvcMA8dN_ba2zMyuoEGBz54.roa
Signing time: Mon 07 Sep 2026 14:14:16 +0000
ROA not before: Mon 07 Sep 2026 14:14:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204183
IP address blocks: 80.173.200.0/24 maxlen: 24
2a0f:c000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:38:41:0b:b2:f5:ff:8c:13:73:94:84:a0:34:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Validity
Not Before: Sep 7 14:14:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd76e576f70c03c74dfdb6b6ccccaea04181cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:bb:75:aa:6f:8f:46:9d:6d:4d:79:5e:fb:
4c:5f:aa:6e:4e:75:fb:76:79:1b:51:bf:d3:77:76:
b3:23:41:15:74:11:6f:6b:05:32:d8:1d:3a:13:96:
61:fb:12:70:bf:90:6e:95:f6:de:d9:7d:08:bc:d8:
b8:35:41:08:37:4e:24:ea:e1:38:8d:35:ae:aa:eb:
a3:a9:df:f7:6e:85:dd:0e:7e:4c:f8:a5:cd:51:5b:
6b:34:77:96:14:8f:bd:88:be:4f:6e:c2:03:57:a2:
42:a2:e2:d8:78:84:43:ea:4b:ab:4e:01:b8:f9:64:
8d:a6:3c:c5:6a:2d:cc:f5:b2:7d:52:92:27:13:af:
9a:3f:0f:dc:83:ff:6d:ac:5a:61:57:5c:61:07:85:
72:2c:d8:fd:ff:df:65:d7:ff:08:38:18:f1:a8:97:
e5:41:2c:5b:59:fe:cb:0c:8d:86:2b:e5:0c:67:43:
8d:63:8c:6e:d7:1f:e1:87:81:0f:d9:05:31:51:bc:
6f:ec:c4:f0:85:f1:46:2b:68:8a:90:0a:28:1c:17:
bd:50:1e:90:4e:72:51:6d:29:b5:c3:5e:12:64:e4:
1a:9d:4b:f3:f9:e5:fd:5b:df:40:4b:cc:d4:42:aa:
54:f1:24:ae:ec:cb:b9:ec:3b:67:fa:b0:64:3c:78:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:E5:76:F7:0C:03:C7:4D:FD:B6:B6:CC:CC:AE:A0:41:81:CF:9E
X509v3 Authority Key Identifier:
keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/zXbldvcMA8dN_ba2zMyuoEGBz54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.200.0/24
IPv6:
2a0f:c000::/29
Signature Algorithm: sha256WithRSAEncryption
43:9f:fd:e4:36:58:55:6e:80:26:64:88:d4:c5:dd:c8:c7:58:
aa:6a:44:e3:b1:43:a4:da:0d:59:a4:cd:2b:6e:3c:88:0d:5f:
71:47:94:92:fa:ec:55:28:03:06:b3:c1:1b:1e:02:14:20:2f:
d0:91:19:e7:e0:63:91:51:54:4f:aa:0b:a1:1b:0a:0f:f9:8b:
f9:44:2d:be:0f:25:56:31:30:13:e5:4d:26:65:ca:21:bd:05:
2f:a1:51:54:9f:1f:30:e1:26:3a:ae:c6:f7:7c:97:52:e5:07:
80:ff:c7:9c:03:f6:10:ae:52:d3:08:42:4c:70:7b:1a:02:58:
13:7a:0c:47:8d:d3:16:c6:03:f8:6d:6e:49:ca:6a:35:1f:66:
44:2c:a3:8c:5e:a3:68:36:f1:ab:d9:90:28:36:e0:b7:d0:43:
53:81:ec:82:e1:b4:2f:cf:f0:15:3f:11:29:06:4e:e5:8a:1a:
9e:e5:b7:3b:7e:5e:71:ae:e1:56:48:4f:7c:1a:3a:20:56:e2:
05:ef:b1:5e:75:df:ae:2b:da:39:b1:ac:f1:f2:1c:8d:03:0c:
8e:c2:5c:4d:b2:f0:59:d2:47:65:68:3a:7b:d0:84:91:6a:ab:
be:ee:b9:2b:95:83:8f:95:2d:b2:8c:f6:c7:be:bd:a1:f1:17:
05:2e:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:51 2026 by rpki-client