Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/zFKSffrPsjxLp1Rn4HVvoFmQLKc.roa
File: zFKSffrPsjxLp1Rn4HVvoFmQLKc.roa (raw, json)
Hash identifier: XkXnvMZ9f35IfpEaF5/d3kcQ6c6OZwO+xjVlqj6fwEo=
Subject key identifier: CC:52:92:7D:FA:CF:B2:3C:4B:A7:54:67:E0:75:6F:A0:59:90:2C:A7
Certificate issuer: /CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Certificate serial: 01A05918CBE20755C3A5E8C8034ECD79A6E6
Authority key identifier: 87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/zFKSffrPsjxLp1Rn4HVvoFmQLKc.roa
Signing time: Mon 31 Aug 2026 18:33:12 +0000
ROA not before: Mon 31 Aug 2026 18:33:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41017
IP address blocks: 2a0b:b185:1441::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:18:cb:e2:07:55:c3:a5:e8:c8:03:4e:cd:79:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Validity
Not Before: Aug 31 18:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc52927dfacfb23c4ba75467e0756fa059902ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:72:0e:ae:6b:99:00:98:b5:b8:de:14:b9:
c9:66:a8:7a:43:50:f4:11:74:47:24:10:a4:2d:14:
ed:0d:0e:69:16:77:c2:72:32:07:f7:1a:f6:5b:00:
59:a4:a0:0d:0b:de:7a:19:f0:c6:25:52:eb:35:3d:
82:a8:3d:04:7e:d6:87:85:b0:09:11:84:c3:59:65:
7b:95:c0:38:4b:75:90:15:73:d9:ef:13:0a:2e:07:
0a:29:a4:f9:7d:7b:c1:10:6b:0b:3b:3f:e4:d1:6e:
90:2a:a2:fa:5d:83:5a:5c:d8:74:3b:b1:21:18:5d:
c2:d2:ce:89:31:fa:8b:dd:2d:8d:99:b1:10:8a:c8:
58:2b:5e:59:da:75:24:15:1d:ed:07:e4:fe:7d:67:
71:68:25:66:2b:83:71:64:33:e1:d2:85:af:88:cb:
ab:69:f4:26:7d:24:69:44:f3:6e:54:24:43:17:da:
31:1f:cc:7d:0f:07:15:5c:e5:33:07:62:0c:50:e0:
f4:38:68:82:05:d4:ba:29:c3:26:05:25:53:22:c1:
89:25:3a:0f:c2:46:eb:5d:73:0f:f7:2c:be:02:48:
ab:60:ce:18:fd:b5:45:bf:e3:b3:ea:f1:52:86:c1:
97:15:7c:d6:0f:e9:1c:b3:49:a0:7c:78:bc:9e:b1:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:52:92:7D:FA:CF:B2:3C:4B:A7:54:67:E0:75:6F:A0:59:90:2C:A7
X509v3 Authority Key Identifier:
keyid:87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/zFKSffrPsjxLp1Rn4HVvoFmQLKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b185:1441::/48
Signature Algorithm: sha256WithRSAEncryption
0f:4a:37:35:f4:95:81:e4:d3:fd:db:1d:8a:de:ce:c8:a2:ac:
46:6a:83:25:92:ed:01:2f:b7:f3:84:87:aa:1e:05:13:08:9a:
b5:52:13:2c:e9:db:ac:35:24:02:77:4e:0d:83:1b:61:96:e1:
0f:44:ce:96:e1:ea:25:8c:dc:3b:ed:c1:88:52:71:f6:b0:13:
b5:2b:1f:f8:f0:0f:43:41:05:3a:be:4d:47:b5:c1:77:bd:26:
82:c0:c1:30:43:7a:32:35:12:64:b6:46:57:ce:57:0a:86:9f:
05:6a:90:86:34:fb:1c:6b:44:52:f7:bf:2d:75:c4:83:b5:87:
68:e3:51:d2:53:94:e0:a7:61:7b:c0:a6:17:69:17:e0:31:85:
9b:34:72:5f:cc:e5:68:87:a6:8b:03:2a:d4:a0:0c:98:94:c9:
db:c5:1c:b0:ff:69:13:5e:3a:1b:ae:3d:85:58:9c:8b:8c:df:
b0:ec:3b:db:00:59:ef:0e:b3:c5:46:e2:7b:11:bc:8d:28:9a:
16:fd:fd:59:c0:4c:4d:ac:ca:9f:fd:15:90:a4:54:ed:fc:2a:
81:7e:27:a9:0f:6a:f5:6e:5d:10:9c:b8:48:21:7e:a7:31:6c:
0b:3a:3b:89:9c:0c:d0:36:d1:d6:bd:52:47:c1:03:8b:35:bb:
1b:87:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:28:22 2026 by rpki-client