Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZWFX0HoXru5a7BLSatMAE2l2Z7g.roa
File: ZWFX0HoXru5a7BLSatMAE2l2Z7g.roa (raw, json)
Hash identifier: c4fwxEOJPZDWwg/NMF46ZxHIEdNPLAmVMasaoyT7o44=
Subject key identifier: 65:61:57:D0:7A:17:AE:EE:5A:EC:12:D2:6A:D3:00:13:69:76:67:B8
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019C9EE582824435A85CF55F3CB1533A1858
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZWFX0HoXru5a7BLSatMAE2l2Z7g.roa
Signing time: Fri 27 Feb 2026 11:39:27 +0000
ROA not before: Fri 27 Feb 2026 11:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58136
IP address blocks: 170.168.9.0/24 maxlen: 24
170.168.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:e5:82:82:44:35:a8:5c:f5:5f:3c:b1:53:3a:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Feb 27 11:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=656157d07a17aeee5aec12d26ad30013697667b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:39:2e:d9:10:e0:c0:0c:75:97:94:46:02:
39:9e:aa:ab:fe:be:34:fb:3d:91:e7:ed:85:d3:6a:
00:2f:f4:90:21:da:12:90:22:db:0d:a5:62:f7:24:
11:40:8b:32:b5:7d:54:c8:89:c3:42:02:52:33:f4:
82:02:eb:4c:50:f0:5e:c0:59:ef:01:3f:4f:c3:2d:
fc:46:62:00:da:56:cd:63:0e:a9:92:9c:39:94:6b:
80:20:89:ae:d2:32:71:15:25:24:84:6f:ac:6c:fb:
68:97:b3:b3:d7:12:7e:55:49:39:cd:8e:33:7b:5f:
4f:51:b2:55:46:48:5f:64:51:99:a1:2c:5b:39:9c:
c3:4d:74:92:83:be:20:46:8b:c0:9f:01:87:b5:57:
37:61:40:b8:a6:ed:e1:80:6f:fa:ab:91:e8:d0:4e:
5f:be:1f:d0:45:4d:23:0e:ef:3b:d1:99:39:a2:a5:
1c:d4:83:24:d6:1c:f9:fb:7d:f2:f2:d3:bb:70:c7:
46:1b:40:b9:11:a7:6c:2b:ed:43:56:77:97:d1:e7:
e9:88:7f:44:78:4c:52:25:68:85:39:df:1c:c7:09:
c5:9b:a0:56:58:e0:64:05:cb:07:e3:38:10:6c:ed:
82:f2:9b:1b:74:f5:87:c1:17:b9:38:b2:1c:28:32:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:57:D0:7A:17:AE:EE:5A:EC:12:D2:6A:D3:00:13:69:76:67:B8
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ZWFX0HoXru5a7BLSatMAE2l2Z7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.9.0-170.168.10.255
Signature Algorithm: sha256WithRSAEncryption
75:92:7a:a7:cb:3c:71:43:f2:ac:6f:97:64:7f:a5:4d:da:93:
30:e3:0a:c2:f0:ad:c2:d0:0b:ca:cb:a0:54:03:29:eb:f5:6a:
13:bd:a8:9e:06:08:04:db:80:8a:2c:0b:ad:57:32:a9:b6:f1:
5c:c1:55:e2:07:93:69:ee:6f:95:7b:ab:0b:e3:50:74:93:0d:
29:0d:97:65:ee:b8:5c:7e:13:1e:1e:d0:3d:4b:4b:b1:04:65:
aa:cb:9b:e3:1c:ba:b3:ad:cb:fa:fc:f4:40:c1:68:40:74:07:
1f:ff:03:6e:02:f6:d8:8d:9c:a4:89:0c:17:e6:8d:89:d2:0d:
2e:78:83:34:09:b5:d2:5c:62:e5:ba:af:6d:26:1c:ce:46:6d:
ab:6c:70:96:76:f5:dd:81:71:c5:47:79:c7:4c:06:44:d9:d9:
80:70:09:57:0e:86:5f:28:a5:c4:c8:31:9c:2d:83:7b:7b:00:
ce:37:81:c0:ee:7c:36:2b:72:b1:e0:e1:cc:c4:27:03:21:d6:
41:5b:1e:e0:0f:e6:1d:8f:ba:91:e2:7a:cb:d7:e6:9e:c2:41:
97:e8:b3:e1:ed:aa:a8:b8:83:06:b6:dd:63:2b:99:8d:0f:d8:
ba:e1:77:2e:02:b2:12:86:d3:08:f8:0a:fc:e4:2b:83:bf:9a:
41:a0:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:15 2026 by rpki-client