Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/ZXQGdvWLFnzAco0sRYfgzDLvK_A.roa
File: ZXQGdvWLFnzAco0sRYfgzDLvK_A.roa (raw, json)
Hash identifier: qMsrGzgzvuGQC6++4AMbmdy+drL9onm/Y7RHh0ci6LA=
Subject key identifier: 65:74:06:76:F5:8B:16:7C:C0:72:8D:2C:45:87:E0:CC:32:EF:2B:F0
Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial: 01A18C812112F4857F50F98BC0ACDA04F0A2
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/ZXQGdvWLFnzAco0sRYfgzDLvK_A.roa
Signing time: Fri 30 Oct 2026 11:10:35 +0000
ROA not before: Fri 30 Oct 2026 11:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a00:dc83::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:81:21:12:f4:85:7f:50:f9:8b:c0:ac:da:04:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Validity
Not Before: Oct 30 11:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65740676f58b167cc0728d2c4587e0cc32ef2bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:d5:65:77:37:22:e1:20:f1:ef:85:e6:a6:
ca:3c:f7:9d:78:d7:f9:fa:89:06:03:06:03:21:ce:
65:db:db:3e:bf:5c:77:6a:56:c8:b0:0f:3a:d1:63:
22:c9:6d:e7:bf:ba:6b:e2:90:aa:a5:db:c8:42:c0:
a4:d5:9d:69:ea:e9:bd:89:d9:d0:4e:ab:9d:98:d1:
63:12:c9:05:11:07:66:18:ca:4f:44:cd:8f:b3:87:
e5:b1:56:4e:13:55:ea:7f:1d:10:ec:e8:7c:bc:28:
ad:60:53:b8:97:d5:b9:c8:7d:02:06:b0:2a:c3:de:
7e:b5:6b:59:15:cf:a2:ac:22:fa:a9:d7:c3:92:26:
ad:9d:ef:ca:55:8f:12:35:9f:3f:98:2d:f5:f8:42:
f8:ae:00:63:2c:5a:e0:d3:2d:18:39:f7:fd:ba:c9:
a4:e9:03:81:2f:27:02:e7:a1:c8:4b:6f:aa:95:7c:
3a:f8:2e:ba:61:aa:8f:8d:21:27:b7:5b:2e:f4:bf:
d9:80:b7:82:5b:5e:2b:30:6c:c0:46:f4:bd:fc:88:
66:fc:00:6d:30:cb:15:83:50:da:98:47:57:5e:43:
ac:78:01:ac:4a:cf:fa:50:c8:9e:e4:4e:ee:61:38:
ed:de:98:37:f0:54:21:d1:15:7e:1a:e2:76:03:c9:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:06:76:F5:8B:16:7C:C0:72:8D:2C:45:87:E0:CC:32:EF:2B:F0
X509v3 Authority Key Identifier:
keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/ZXQGdvWLFnzAco0sRYfgzDLvK_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dc83::/40
Signature Algorithm: sha256WithRSAEncryption
6a:71:90:d0:10:9c:c0:84:8a:47:9a:c4:9b:15:e0:17:f7:48:
7e:33:ee:34:85:8a:b0:13:68:b2:23:cb:89:7d:b3:0b:2b:55:
e2:27:8e:e0:ff:fd:33:d6:53:16:c4:f8:37:b5:8b:1d:cf:f8:
f8:f8:1c:d7:dc:34:05:ba:3c:bf:c4:2b:ea:cd:d0:63:4e:19:
b6:19:a2:cd:31:dd:fc:b2:62:73:d9:18:d2:bb:e5:08:cc:3b:
55:f9:7d:f8:a2:c7:e7:4b:79:9c:11:a0:ff:cf:7d:48:59:69:
18:f4:24:6f:6f:57:55:5c:d2:8f:15:e8:17:ff:39:9d:98:16:
79:23:33:3f:55:e1:34:4e:9b:40:ab:d3:28:63:f4:40:6c:56:
dc:58:cf:6c:06:4e:bb:af:31:27:aa:ad:fe:d7:6d:0e:9a:e5:
05:18:07:79:37:a7:c5:2a:c6:75:84:e6:85:66:8b:e3:b5:9f:
01:a2:e7:7d:b5:7d:3c:6c:c5:33:01:4b:15:02:f2:56:8a:7f:
48:e8:bb:3a:8f:7a:83:f5:97:ec:0f:a0:6a:d9:aa:31:06:f5:
29:0c:65:87:b3:a2:73:19:9a:65:a8:0b:7f:d9:c6:a5:23:ab:
57:fa:be:ef:5f:d1:34:c2:88:3a:6b:80:85:9f:da:66:eb:0f:
6a:76:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:07:58 2026 by rpki-client