Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/zfEcWQPqi-VdMvuQ8qSI2Po_taM.roa
File: zfEcWQPqi-VdMvuQ8qSI2Po_taM.roa (raw, json)
Hash identifier: jrPqy9eqPGYuqZqd/WHKMilLyac7mNSPcvUdK8y/DAM=
Subject key identifier: CD:F1:1C:59:03:EA:8B:E5:5D:32:FB:90:F2:A4:88:D8:FA:3F:B5:A3
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019E592684D56179C363319A84B7785AF6CE
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/zfEcWQPqi-VdMvuQ8qSI2Po_taM.roa
Signing time: Sun 24 May 2026 08:42:37 +0000
ROA not before: Sun 24 May 2026 08:42:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13287
IP address blocks: 2a0d:9843::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:26:84:d5:61:79:c3:63:31:9a:84:b7:78:5a:f6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: May 24 08:42:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdf11c5903ea8be55d32fb90f2a488d8fa3fb5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:51:37:53:4f:be:9a:13:75:06:15:6b:98:
bf:3e:30:a8:ca:84:e6:56:81:97:33:b0:ca:e3:41:
5a:fd:25:e0:83:6d:f7:24:06:dd:f6:3e:91:73:be:
a3:67:a9:b8:d6:c7:53:89:0e:31:28:bd:b8:d2:fd:
2c:0f:6a:00:5d:29:ae:8e:06:de:cd:ce:7a:64:e5:
52:a7:2d:32:e5:69:aa:e6:ae:21:ed:00:da:4a:06:
7b:53:19:2e:ca:46:82:ec:5c:00:b5:3d:03:69:be:
65:33:1e:99:0a:5e:ef:90:ef:b7:3d:fb:a8:b4:de:
43:fb:ba:3a:3d:56:48:bd:71:2b:97:3f:8a:97:c0:
69:3a:0f:29:72:58:42:b2:a4:c5:40:50:bc:31:d4:
9b:a1:a7:b3:b2:95:e8:6c:74:03:b6:b4:14:74:04:
9a:f0:68:36:d6:fd:b0:91:41:a1:fe:8a:72:94:af:
20:b6:b5:f6:d5:7a:08:16:88:96:05:dc:2b:b7:00:
b0:8c:aa:dd:c8:dd:12:73:12:ee:67:ec:d6:af:a3:
da:d0:f3:07:4d:e9:62:c2:9d:e4:10:f4:23:d4:48:
e2:7a:21:49:bd:4f:44:29:0f:67:6d:4f:d5:23:50:
e2:5d:a5:5f:08:95:bd:1e:0b:be:64:13:7d:c0:f8:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:1C:59:03:EA:8B:E5:5D:32:FB:90:F2:A4:88:D8:FA:3F:B5:A3
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/zfEcWQPqi-VdMvuQ8qSI2Po_taM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9843::/48
Signature Algorithm: sha256WithRSAEncryption
81:8a:e3:23:9b:0b:4b:24:cd:a4:ab:0e:39:75:36:be:7b:c1:
85:43:3c:ba:98:95:41:3d:06:0c:4f:3e:9f:10:f1:80:96:c0:
fd:73:4d:8f:e8:97:94:ed:02:1a:94:f1:ee:4b:44:d9:88:73:
dd:61:fa:46:bb:ea:6e:17:ec:ee:1b:8e:a6:a7:e0:d6:9f:93:
a0:3e:42:7c:49:16:17:02:e7:32:02:e2:f6:f0:f4:ff:5f:1b:
5f:52:09:df:f6:14:f9:11:59:35:75:69:80:77:da:34:04:2d:
c4:5b:fc:3f:43:ed:7c:1d:ea:d4:ab:bc:88:74:24:cf:f0:39:
34:0f:cc:c8:0a:f5:c7:e6:d8:de:84:c9:b9:ac:94:e9:db:e9:
e1:5b:df:16:64:f8:6e:fc:7e:83:f6:03:92:84:50:4e:d7:68:
bb:3e:85:27:d2:5c:de:42:fa:ed:8e:b5:be:d0:73:91:8d:56:
70:fc:7b:8c:65:c5:e0:c1:2e:bb:fe:c9:cd:c6:75:db:31:31:
58:c0:ec:24:6d:98:aa:9f:d8:07:27:61:5f:b2:73:04:55:ff:
4b:74:07:db:5b:8e:73:b2:2f:70:39:cb:34:d5:53:4b:b8:4c:
b3:18:33:df:6e:d0:ee:28:9f:69:52:b7:fe:2b:d8:a9:0c:17:
8d:2a:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:28 2026 by rpki-client