Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZWidGk-DLC-tm0Kq07vPXR1Hvfw.roa
File: ZWidGk-DLC-tm0Kq07vPXR1Hvfw.roa (raw, json)
Hash identifier: Bhwp6bZOUrHl8XmANK1yLwrN0b+8qJVbj7FjXxvB1ZE=
Subject key identifier: 65:68:9D:1A:4F:83:2C:2F:AD:9B:42:AA:D3:BB:CF:5D:1D:47:BD:FC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06884FF7C29A44BA8C7D125AC154251CC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZWidGk-DLC-tm0Kq07vPXR1Hvfw.roa
Signing time: Thu 03 Sep 2026 18:25:41 +0000
ROA not before: Thu 03 Sep 2026 18:25:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 80.68.216.0/21 maxlen: 24
87.84.129.0/24 maxlen: 24
87.85.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:84:ff:7c:29:a4:4b:a8:c7:d1:25:ac:15:42:51:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 3 18:25:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65689d1a4f832c2fad9b42aad3bbcf5d1d47bdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:19:5d:1d:78:cb:fa:bb:04:60:14:3f:0c:
ee:53:ec:b9:cc:86:41:1d:38:7a:f6:fd:0d:b8:87:
c4:32:4f:a8:77:a1:2f:bc:6d:e1:c9:6b:e4:54:c8:
4c:f5:a6:78:cc:09:dc:eb:83:df:ff:be:fd:3e:09:
22:3e:2e:82:50:23:76:d1:1b:5d:7e:14:c8:12:fa:
0c:be:58:2b:72:75:a7:0a:c2:3b:ac:c5:d7:f0:56:
37:66:e2:7a:ad:3b:c5:a9:1d:36:95:c6:c7:a6:88:
26:ab:2b:54:f4:78:7a:a9:0a:2e:1b:7a:7e:a9:d9:
66:6e:38:e5:1b:0a:29:f5:01:cc:c5:77:8c:5d:30:
90:98:6b:67:0f:8f:f8:45:4c:8b:f4:7e:93:22:0f:
1c:5d:20:dd:92:fb:6c:d6:9d:97:c2:9d:52:4e:9e:
34:9e:5e:04:22:c8:2d:fc:ec:af:1c:6f:09:c6:9e:
ca:69:78:f7:8c:17:b8:ef:5e:87:3b:3f:20:15:6a:
68:7b:bf:7b:09:77:28:1d:8f:37:61:84:00:31:4b:
d5:8c:1d:32:07:ec:40:76:0d:e9:30:02:d7:29:d2:
4d:b9:1c:5f:b3:79:bb:bd:fe:af:15:d9:d7:02:d3:
3b:31:85:8f:22:13:8c:75:11:55:1a:d5:9b:72:67:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:9D:1A:4F:83:2C:2F:AD:9B:42:AA:D3:BB:CF:5D:1D:47:BD:FC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZWidGk-DLC-tm0Kq07vPXR1Hvfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.216.0/21
87.84.129.0/24
87.85.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:87:0d:92:f8:01:75:15:db:de:84:34:47:25:96:f5:66:46:
c6:a0:39:fb:3d:15:98:68:11:7c:a9:0c:b0:01:bc:da:52:ec:
22:63:28:44:2a:c6:96:e0:b9:8c:1c:25:47:34:b8:18:bd:f4:
da:59:09:73:41:04:06:32:63:c5:0a:f3:7a:90:94:d9:cc:f2:
d6:ed:59:31:66:50:7f:0b:68:37:93:b0:98:da:d5:1f:1d:d2:
20:2e:dc:82:a7:b4:b5:72:35:fc:f1:0e:29:09:76:05:cc:24:
25:13:e5:08:e6:40:f5:c0:f8:b4:9b:35:c7:8a:12:20:8a:8b:
e4:74:d0:3b:c6:4a:fd:71:e6:07:78:38:6f:f0:18:f3:c3:11:
b8:7e:a5:5f:52:8e:12:d0:8b:cf:1e:5f:00:5c:d6:2e:32:a1:
55:49:f7:7a:8e:05:3c:31:60:a3:3a:0d:0a:6d:a0:62:30:e9:
02:7d:1e:2c:09:23:58:a3:c0:23:0d:24:f3:a2:c0:6a:75:2a:
53:28:b9:f2:c8:c9:c4:fc:6b:ba:62:d3:34:9c:f5:d5:c6:4c:
d3:b0:ff:e0:dc:41:7d:21:87:41:6a:ce:f1:78:7c:6b:4b:0f:
55:92:9c:86:b5:95:b0:0d:f9:ac:57:f9:dc:8f:07:c8:fe:78:
22:d0:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:14 2026 by rpki-client