Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/zhx_i8-hMUtVtHxFFqKV6pWlvfI.roa
File: zhx_i8-hMUtVtHxFFqKV6pWlvfI.roa (raw, json)
Hash identifier: jXE8lQ9PxcnmjRW7Jbdjl6pEn7gNBMRFi9VitvgBzcA=
Subject key identifier: CE:1C:7F:8B:CF:A1:31:4B:55:B4:7C:45:16:A2:95:EA:95:A5:BD:F2
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 01A08E8441D7E4F7C3EA4F9348F3E0715C5F
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/zhx_i8-hMUtVtHxFFqKV6pWlvfI.roa
Signing time: Fri 11 Sep 2026 03:30:27 +0000
ROA not before: Fri 11 Sep 2026 03:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218704
IP address blocks: 2a02:ddc3:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:84:41:d7:e4:f7:c3:ea:4f:93:48:f3:e0:71:5c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Sep 11 03:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce1c7f8bcfa1314b55b47c4516a295ea95a5bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:fc:4b:4e:77:42:94:6d:cc:1f:75:09:5d:
2f:8d:7b:ef:83:e4:62:d1:43:14:9d:79:27:4d:35:
51:10:c9:7a:88:1d:54:57:dc:5e:0d:f2:0e:28:a4:
ea:84:71:f9:c4:1f:61:08:9b:a7:dd:60:37:c4:69:
8b:6e:5b:ca:f4:aa:a7:64:af:ae:1c:ab:ee:4c:68:
4d:18:e7:fc:96:aa:b8:db:58:d4:75:53:ea:1c:66:
aa:b2:0d:77:9e:fc:ab:31:3c:ef:13:b6:6d:84:c6:
26:17:2a:04:c3:96:78:3d:01:49:66:81:7a:fa:5a:
aa:f6:b5:6c:5c:0b:18:8b:1a:e8:4e:e7:5c:99:1e:
eb:9c:3a:13:04:1b:d1:40:f4:bc:15:bb:e2:fd:77:
96:86:87:16:2a:0b:8a:7d:e6:8b:d7:96:bb:cc:71:
80:45:52:5c:ca:96:26:dc:52:ef:c8:da:9d:64:24:
d9:09:3c:6e:93:11:e9:c7:d7:c9:b4:00:5d:70:4f:
ca:8a:60:e2:06:e3:c0:df:18:15:c7:bb:ea:f3:59:
5f:b3:80:77:5f:b7:5e:a7:d3:31:c2:12:f5:47:f3:
d4:78:51:40:0c:ad:b4:a5:be:ec:b4:3b:dc:b9:42:
1a:89:e3:4b:20:a1:ef:54:01:c4:95:84:ec:0d:f5:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1C:7F:8B:CF:A1:31:4B:55:B4:7C:45:16:A2:95:EA:95:A5:BD:F2
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/zhx_i8-hMUtVtHxFFqKV6pWlvfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ddc3:2::/48
Signature Algorithm: sha256WithRSAEncryption
2f:64:22:17:a3:e9:b4:a1:d6:7a:2a:a9:f1:55:52:fa:4d:ec:
00:88:36:90:62:41:f0:87:40:8e:f0:1d:59:80:38:e3:79:2b:
b3:de:74:d3:47:dc:aa:8f:56:5b:21:39:a8:62:76:5c:76:e3:
67:86:f0:83:5d:e2:62:36:25:46:24:22:28:47:25:60:17:f5:
9c:ce:0e:92:f4:36:18:62:8c:a8:2b:01:20:7c:e8:53:7a:0e:
d5:a7:5a:c3:1f:c7:0b:d9:30:c1:7e:26:22:23:99:e2:2b:7f:
ad:af:aa:fb:5e:c6:cd:76:0f:2a:f5:db:12:2c:cd:47:cc:d4:
d6:63:4f:24:95:6e:03:54:ba:13:dc:37:f8:f8:7f:28:35:92:
ac:0a:36:16:ec:a9:96:89:e4:43:e8:6f:44:39:99:7f:76:86:
c4:b8:19:bf:d6:95:c3:45:2e:1f:13:77:bb:d5:0e:1a:72:e6:
98:2e:28:c7:d5:e7:17:05:78:6e:d1:7f:1a:ed:42:fc:03:2f:
62:f9:7c:91:a5:5e:45:5a:56:fb:97:15:1f:6f:8a:de:f8:c4:
bf:92:af:13:bd:04:9a:1a:a4:0c:08:a1:b4:ce:d6:9b:bc:ef:
3d:93:0b:6c:bd:80:4a:f1:fc:a6:ab:c0:05:1a:fd:73:79:4e:
3f:86:49:01
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCOhEHX5PfD6k+TSPPgcVxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjYwOTExMDMzMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTFjN2Y4YmNmYTEzMTRiNTViNDdjNDUxNmEyOTVlYTk1YTViZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorP8S053QpRtzB91CV0vjXvvg+Ri
0UMUnXknTTVREMl6iB1UV9xeDfIOKKTqhHH5xB9hCJun3WA3xGmLblvK9KqnZK+u
HKvuTGhNGOf8lqq421jUdVPqHGaqsg13nvyrMTzvE7ZthMYmFyoEw5Z4PQFJZoF6
+lqq9rVsXAsYixroTudcmR7rnDoTBBvRQPS8Fbvi/XeWhocWKguKfeaL15a7zHGA
RVJcypYm3FLvyNqdZCTZCTxukxHpx9fJtABdcE/KimDiBuPA3xgVx7vq81lfs4B3
X7dep9MxwhL1R/PUeFFADK20pb7stDvcuUIaieNLIKHvVAHElYTsDfUQJQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM4cf4vPoTFLVbR8RRaileqVpb3yMB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvemh4X2k4LWhNVXRWdEh4RkZxS1Y2cFdsdmZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLdwwAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAvZCIXo+m0odZ6KqnxVVL6TewAiDaQYkHwh0CO
8B1ZgDjjeSuz3nTTR9yqj1ZbITmoYnZcduNnhvCDXeJiNiVGJCIoRyVgF/Wczg6S
9DYYYoyoKwEgfOhTeg7Vp1rDH8cL2TDBfiYiI5niK3+tr6r7XsbNdg8q9dsSLM1H
zNTWY08klW4DVLoT3Df4+H8oNZKsCjYW7KmWieRD6G9EOZl/dobEuBm/1pXDRS4f
E3e71Q4acuaYLijH1ecXBXhu0X8a7UL8Ay9i+XyRpV5FWlb7lxUfb4re+MS/kq8T
vQSaGqQMCKG0ztabvO89kwtsvYBK8fymq8AFGv1zeU4/hkkB
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:25 2026 by rpki-client