Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/ZwN_WyION8uYqDjoA1xnQkchTaM.roa
File: ZwN_WyION8uYqDjoA1xnQkchTaM.roa (raw, json)
Hash identifier: 9ecMI7J0CNr0a+4Dpddr7hBWVjwMKVw4wUfu93dW1GA=
Subject key identifier: 67:03:7F:5B:22:0E:37:CB:98:A8:38:E8:03:5C:67:42:47:21:4D:A3
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 019C0946A55F35619CBE52BB045F6BE0DB1C
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/ZwN_WyION8uYqDjoA1xnQkchTaM.roa
Signing time: Thu 29 Jan 2026 10:22:30 +0000
ROA not before: Thu 29 Jan 2026 10:22:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5413
IP address blocks: 5.252.36.0/22 maxlen: 22
2a0f:cac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:09:46:a5:5f:35:61:9c:be:52:bb:04:5f:6b:e0:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Jan 29 10:22:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67037f5b220e37cb98a838e8035c674247214da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5b:92:2d:3a:02:04:fa:cb:2c:10:32:1a:78:
09:b9:fb:51:93:16:3e:25:96:06:b7:67:fd:20:57:
ce:77:20:15:3f:4f:57:f5:5c:a0:23:9a:ba:23:36:
c6:cc:bc:4f:10:51:84:ba:92:44:32:81:39:d2:4d:
3c:d8:71:e4:b5:21:69:a7:42:bc:2a:38:d7:d4:bc:
b7:68:9a:ae:11:af:0f:89:2b:96:f9:5c:86:f2:80:
f5:95:17:34:33:9f:72:9e:96:4e:c4:83:fc:5f:ff:
38:d2:4d:3d:79:2a:3e:ca:85:5e:fa:ef:62:b1:06:
9c:d9:a5:c0:fc:2b:b7:35:12:d7:7f:ef:bb:3f:8a:
2f:78:1a:e9:72:cb:6f:ac:fa:94:c0:0e:6f:b0:47:
1e:93:5b:14:c2:eb:2c:8d:fc:2c:ce:21:54:c9:34:
4c:60:4c:5e:33:ae:69:11:46:e2:cb:a7:95:e1:34:
f4:9c:2b:b8:d0:14:2d:b6:3a:76:aa:44:96:e2:8c:
47:3c:55:1a:34:d5:2a:bb:67:70:a8:7e:e5:58:67:
2a:45:3b:5e:3d:56:d6:3b:ed:f2:ae:61:78:81:66:
58:27:ea:15:93:d0:bb:1b:d0:3a:93:31:a7:41:2d:
f6:79:81:34:c1:e1:58:71:c9:6e:e9:22:27:f6:ac:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:7F:5B:22:0E:37:CB:98:A8:38:E8:03:5C:67:42:47:21:4D:A3
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/ZwN_WyION8uYqDjoA1xnQkchTaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.36.0/22
IPv6:
2a0f:cac0::/48
Signature Algorithm: sha256WithRSAEncryption
8a:ed:be:22:03:62:d7:f9:67:f1:32:d4:a1:a3:5e:7a:1f:95:
a5:d7:05:bf:3c:20:fe:28:a3:60:ac:1c:e1:7a:aa:14:49:f2:
cd:8c:33:17:69:ed:a2:5a:6f:0e:0d:a1:ec:00:3f:27:bc:ca:
78:59:4c:9e:5c:cb:63:0c:bb:b7:7a:b4:11:07:76:1c:1e:40:
9c:a7:6e:f2:85:bb:04:79:03:1a:92:f1:c5:da:53:e6:b4:c8:
c6:98:46:e5:11:eb:51:1e:68:8f:d3:cd:67:05:77:7f:4f:dc:
71:80:a9:8a:3d:5e:01:c3:2a:15:49:4f:a0:d3:d9:bf:55:90:
36:5d:85:13:4a:80:64:0d:42:7d:1a:ad:8c:6d:fb:61:ad:39:
9b:25:79:25:a8:c7:81:e4:2a:c4:f0:30:75:c6:e0:ea:a0:ae:
fd:4a:4b:53:8a:aa:0d:a2:d8:a2:55:eb:2b:6b:99:9b:01:c8:
4d:0b:76:90:e7:cb:0b:f6:73:db:0b:6c:5b:43:b1:cd:a0:e7:
ed:24:80:82:26:cd:1d:34:8b:d1:db:55:ae:84:b0:9c:95:eb:
3b:a5:76:22:6b:2a:a3:13:16:87:1d:b7:6a:19:43:fb:56:98:
60:81:0e:ad:9e:9c:56:3f:b6:70:a1:d7:38:0b:1b:fe:05:47:
28:cc:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:09 2026 by rpki-client