Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/zDbXBWuUtJNusqOvbCndBNN80Io.roa
File: zDbXBWuUtJNusqOvbCndBNN80Io.roa (raw, json)
Hash identifier: 7Lbj5BCGj2t7KPfgPi+9t9ReOGx4VQdMsoCL0ryz/pQ=
Subject key identifier: CC:36:D7:05:6B:94:B4:93:6E:B2:A3:AF:6C:29:DD:04:D3:7C:D0:8A
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01A0620C7B4DDD028789178571A1F2B18E6E
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/zDbXBWuUtJNusqOvbCndBNN80Io.roa
Signing time: Wed 02 Sep 2026 12:16:20 +0000
ROA not before: Wed 02 Sep 2026 12:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208722
IP address blocks: 2a13:5947:1a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0c:7b:4d:dd:02:87:89:17:85:71:a1:f2:b1:8e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Sep 2 12:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc36d7056b94b4936eb2a3af6c29dd04d37cd08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:5f:c7:28:de:a6:8e:11:7f:95:f0:e0:c0:
e6:9d:67:c3:5e:89:74:31:69:e6:98:b8:61:44:08:
25:36:5f:9b:72:bd:10:7b:88:ba:af:4b:ab:ad:a9:
46:5e:55:8b:04:be:f3:63:6b:4e:bf:34:2d:0c:e9:
16:72:a2:54:c0:c4:bf:64:2f:ea:0c:f2:34:e3:91:
c5:8f:f1:f3:98:39:9a:ff:61:f4:da:ed:6a:8a:65:
3b:28:5b:53:de:b6:13:fc:77:a9:07:21:f6:64:28:
4f:15:01:ea:97:c0:d3:65:c4:04:6c:71:e0:fb:01:
e4:d0:ad:ea:55:49:09:ba:6f:a8:22:5b:87:90:d9:
3e:ff:be:41:68:d5:1a:69:cd:85:5b:80:ba:7b:81:
f1:a9:db:8f:e9:9f:1c:5c:8c:0a:8b:63:0c:44:83:
76:fc:51:68:28:65:a2:5e:05:8f:b9:43:d0:6d:4b:
ed:6f:09:c3:11:6a:8f:ad:a8:d8:6e:69:0a:8c:d0:
d6:a0:44:70:09:90:99:53:51:3c:49:2a:0d:a3:2b:
46:6d:74:cf:9f:8c:98:5c:7b:05:98:47:cf:a8:e1:
11:b1:88:32:99:08:51:43:de:bc:d9:8a:be:a0:59:
1e:5e:2c:14:97:0f:9a:08:67:7d:2d:00:d3:e9:c4:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:D7:05:6B:94:B4:93:6E:B2:A3:AF:6C:29:DD:04:D3:7C:D0:8A
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/zDbXBWuUtJNusqOvbCndBNN80Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5947:1a0::/48
Signature Algorithm: sha256WithRSAEncryption
08:6c:63:39:e4:da:d0:b2:81:86:24:33:1a:4b:96:94:57:73:
72:67:c3:3f:5f:54:cc:3f:52:24:1b:dd:c6:1c:bd:ce:c6:81:
d8:43:f1:b9:df:ff:a7:1b:5e:87:9c:89:e3:21:33:0b:3e:f5:
97:d0:d4:25:6c:f0:d9:01:76:16:57:8c:1c:42:e9:22:56:43:
1a:66:b3:b2:96:f0:22:52:4d:ff:4c:2b:f6:e8:69:e3:93:15:
4b:17:cc:df:64:c2:c1:e3:91:e6:dc:95:f1:93:d8:c1:e0:62:
f5:68:7e:97:ea:65:6f:08:7e:0c:41:53:29:00:24:12:76:66:
e8:b3:c8:51:97:da:b4:c4:7b:30:ac:2c:9a:96:91:3b:30:97:
e9:0b:01:c8:49:fd:e3:65:d5:44:ea:5a:2e:fe:ed:df:64:86:
ee:37:eb:e4:dd:f7:fb:f1:c1:a0:e6:1d:2c:b2:11:9e:9a:bc:
9e:90:da:69:84:ba:1a:09:35:8e:41:64:68:59:46:c8:c5:d0:
b3:dc:d5:62:74:0d:d9:d8:c5:fd:53:f8:5d:39:79:66:e3:04:
28:c4:cf:12:bc:88:8f:a3:ff:c3:36:06:44:f4:39:98:4a:01:
36:20:9f:04:d1:b2:30:af:79:ed:32:16:34:dd:d1:8c:fe:21:
27:ff:77:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBiDHtN3QKHiReFcaHysY5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTI2NTMxNzljYWZlNWZmNjY1MWM2MDU4YjY3YWQyZDJj
ODQ4NWUwHhcNMjYwOTAyMTIxNjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzM2ZDcwNTZiOTRiNDkzNmViMmEzYWY2YzI5ZGQwNGQzN2NkMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM5fxyjepo4Rf5Xw4MDmnWfDXol0
MWnmmLhhRAglNl+bcr0Qe4i6r0urralGXlWLBL7zY2tOvzQtDOkWcqJUwMS/ZC/q
DPI045HFj/HzmDma/2H02u1qimU7KFtT3rYT/HepByH2ZChPFQHql8DTZcQEbHHg
+wHk0K3qVUkJum+oIluHkNk+/75BaNUaac2FW4C6e4HxqduP6Z8cXIwKi2MMRIN2
/FFoKGWiXgWPuUPQbUvtbwnDEWqPrajYbmkKjNDWoERwCZCZU1E8SSoNoytGbXTP
n4yYXHsFmEfPqOERsYgymQhRQ9682Yq+oFkeXiwUlw+aCGd9LQDT6cS4fQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMw21wVrlLSTbrKjr2wp3QTTfNCKMB8GA1UdIwQY
MBaAFOriZTF5yv5f9mUcYFi2etLSyEheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTkt
OTkyZDc5N2Y0YmJiLzEvekRiWEJXdVV0Sk51c3FPdmJDbmRCTk44MElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTktOTkyZDc5N2Y0YmJi
LzEvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhNZRwGg
MA0GCSqGSIb3DQEBCwUAA4IBAQAIbGM55NrQsoGGJDMaS5aUV3NyZ8M/X1TMP1Ik
G93GHL3OxoHYQ/G53/+nG16HnInjITMLPvWX0NQlbPDZAXYWV4wcQukiVkMaZrOy
lvAiUk3/TCv26GnjkxVLF8zfZMLB45Hm3JXxk9jB4GL1aH6X6mVvCH4MQVMpACQS
dmbos8hRl9q0xHswrCyalpE7MJfpCwHISf3jZdVE6lou/u3fZIbuN+vk3ff78cGg
5h0sshGemryekNpphLoaCTWOQWRoWUbIxdCz3NVidA3Z2MX9U/hdOXlm4wQoxM8S
vIiPo//DNgZE9DmYSgE2IJ8E0bIwr3ntMhY03dGM/iEn/3fy
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:32:47 2026 by rpki-client