Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/zUCCWgD-_DuXbrpU_ih8k1Sd9Lc.roa
File: zUCCWgD-_DuXbrpU_ih8k1Sd9Lc.roa (raw, json)
Hash identifier: I0kSLd0WCfzP2NieO6UNTncpcGAQMb7Q1Pi8hAMYfW8=
Subject key identifier: CD:40:82:5A:00:FE:FC:3B:97:6E:BA:54:FE:28:7C:93:54:9D:F4:B7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019ED18D9402C3F151A08256963EA16B631A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/zUCCWgD-_DuXbrpU_ih8k1Sd9Lc.roa
Signing time: Tue 16 Jun 2026 17:49:36 +0000
ROA not before: Tue 16 Jun 2026 17:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204968
IP address blocks: 2a0d:ad40::/32 maxlen: 32
2a0d:ad47::/32 maxlen: 32
2a0d:b843::/32 maxlen: 32
2a0d:b845::/32 maxlen: 32
2a11:e2c0::/32 maxlen: 32
2a12:8780::/32 maxlen: 32
2a12:a503::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:8d:94:02:c3:f1:51:a0:82:56:96:3e:a1:6b:63:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 16 17:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd40825a00fefc3b976eba54fe287c93549df4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:33:2b:d2:5d:44:1f:58:3f:58:29:9a:3e:47:
08:d7:86:26:88:ed:91:fc:fa:86:07:19:65:de:2b:
84:b7:bc:7b:07:7c:a8:da:a5:38:f9:7a:a4:2e:6a:
3f:ac:e7:71:ef:00:70:59:0c:0d:62:7b:c5:a8:e6:
a1:46:57:b2:a6:d7:74:e2:41:81:d8:d1:d2:0a:09:
bd:36:02:93:ad:30:7e:98:26:f5:ef:f0:2a:74:cb:
6a:9b:1c:a1:01:02:bf:cd:3e:9b:ed:95:a9:f9:ae:
3d:cb:a2:5a:ff:83:6b:64:1b:c8:5d:32:3d:b4:7c:
40:c6:25:11:55:54:ce:91:d4:a6:2c:99:b4:1a:c7:
37:3d:1b:86:45:73:51:49:83:25:8d:47:1d:29:bc:
24:a0:c7:fd:3f:62:1c:c5:ac:a9:bb:b6:54:06:fd:
8b:cd:1a:73:e1:87:7c:32:a4:71:54:52:24:4e:66:
d8:09:7a:68:cd:a7:1e:15:c1:03:73:e5:2a:9b:66:
83:1c:ea:94:29:ac:ac:e8:4e:6d:23:81:22:0e:ac:
b9:99:be:90:c2:92:61:06:ed:46:b2:56:62:1a:ef:
5b:02:2b:a9:1a:2b:88:1a:25:6d:7f:00:80:17:e8:
bf:54:4b:0c:79:53:69:1f:d7:c0:7b:af:4e:5e:43:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:82:5A:00:FE:FC:3B:97:6E:BA:54:FE:28:7C:93:54:9D:F4:B7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/zUCCWgD-_DuXbrpU_ih8k1Sd9Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad40::/32
2a0d:ad47::/32
2a0d:b843::/32
2a0d:b845::/32
2a11:e2c0::/32
2a12:8780::/32
2a12:a503::/32
Signature Algorithm: sha256WithRSAEncryption
1a:38:7b:e8:f7:0b:b9:9c:07:92:ca:f8:cb:f7:fd:54:bf:4c:
a4:a5:84:07:44:0f:85:97:7b:1e:ad:4d:27:e6:38:c8:da:96:
d1:f1:ef:88:78:6b:55:5c:37:a5:cc:ee:01:7a:d1:0e:b6:e1:
1d:6b:df:41:19:e0:6a:c0:70:a4:32:78:51:3e:bb:20:d8:ba:
6a:1b:90:c4:aa:39:e0:c2:a0:cf:34:d0:5b:77:84:38:a7:ad:
4b:a6:d9:6d:74:a0:b6:ae:bd:8f:35:c5:80:f1:fc:46:64:9b:
5b:ed:6f:84:ff:ce:cd:2d:d0:a1:8d:5e:36:67:e4:cf:a3:1a:
20:36:ac:df:c1:1f:13:66:f6:3c:e1:23:45:70:26:3e:1b:fd:
b8:f7:bb:71:19:2b:15:25:14:90:ab:89:d0:22:d2:22:38:6e:
3b:a0:a5:45:e1:f2:5c:ac:c4:e4:1a:05:80:89:d5:6b:5e:c4:
77:95:78:53:5e:be:f2:cf:71:ce:26:7e:a3:19:31:e0:91:d0:
91:d1:a3:e5:a9:18:2a:f5:db:03:60:99:dc:99:9e:c1:01:40:
7e:6a:29:b2:b6:f2:ce:bd:b1:86:81:8a:57:a9:e7:99:75:fd:
a4:a8:b5:aa:fd:0a:ba:16:14:b5:d1:ad:a6:de:f0:f3:74:86:
ce:2a:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:24 2026 by rpki-client