Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/z67_Z8sHiRAC3rt2S5J-EdtHpcY.roa
File: z67_Z8sHiRAC3rt2S5J-EdtHpcY.roa (raw, json)
Hash identifier: e2pqtdkokZuCMWweiZu1D5jx+OquG8/96QSbZDdPqXI=
Subject key identifier: CF:AE:FF:67:CB:07:89:10:02:DE:BB:76:4B:92:7E:11:DB:47:A5:C6
Certificate issuer: /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial: 019E6F3556C70C799C5E497A16B417BA16F2
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/z67_Z8sHiRAC3rt2S5J-EdtHpcY.roa
Signing time: Thu 28 May 2026 15:30:26 +0000
ROA not before: Thu 28 May 2026 15:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197545
IP address blocks: 2a0c:bbc0::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:35:56:c7:0c:79:9c:5e:49:7a:16:b4:17:ba:16:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Validity
Not Before: May 28 15:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfaeff67cb07891002debb764b927e11db47a5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:28:25:13:19:b5:c0:ed:e9:a5:83:df:c6:
84:3b:8d:20:b0:a8:22:a0:b4:08:8c:60:69:ff:ab:
98:73:36:9c:57:42:5c:24:f4:fe:4a:c3:28:84:c5:
c6:c8:30:4d:53:3d:ad:d2:2e:85:a3:ea:2c:e9:c9:
1b:9c:27:b5:30:59:4a:cc:a6:43:e9:40:d6:75:23:
c1:ee:4c:bb:04:9d:b6:37:6e:36:51:4d:ea:54:ae:
f8:af:b4:46:e1:6a:87:bd:75:0e:fe:d6:81:1f:fd:
07:04:13:30:4d:29:08:3b:31:83:7d:61:0a:cd:a3:
7e:0f:89:ee:b6:98:c5:5a:49:f0:c7:ac:00:d6:c6:
62:7a:01:41:15:db:bc:f1:aa:eb:93:8d:38:84:55:
ed:08:a7:33:3e:b2:34:10:b0:b8:b0:aa:b7:8f:d9:
06:91:eb:3c:13:6f:24:6b:2a:0e:79:05:cd:d4:5f:
f3:63:b2:38:3c:63:92:7f:dd:03:61:90:65:9f:5d:
b7:50:cf:e2:78:45:a1:a8:21:68:92:bd:ee:50:fa:
f4:5f:99:bf:df:f3:d6:4e:47:45:af:75:af:c1:93:
40:28:e4:40:74:9c:5f:45:06:0e:ed:c9:12:26:7b:
4b:9b:3f:87:80:56:17:97:0b:99:35:37:c7:b0:86:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AE:FF:67:CB:07:89:10:02:DE:BB:76:4B:92:7E:11:DB:47:A5:C6
X509v3 Authority Key Identifier:
keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/z67_Z8sHiRAC3rt2S5J-EdtHpcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:bbc0::/33
Signature Algorithm: sha256WithRSAEncryption
75:a4:61:ca:ce:6d:60:48:35:ed:64:75:03:17:a1:7c:b4:7a:
7f:f5:37:12:dd:e8:a6:cf:f9:e2:18:26:2b:75:cc:76:cb:bf:
6a:ca:ab:c4:e4:a5:02:c2:35:db:5a:c4:d4:e5:27:fa:77:a4:
0e:37:14:36:c5:71:6c:cd:56:23:f3:9b:fe:39:41:13:57:28:
5f:b1:cc:74:fc:1c:ff:9d:14:a5:7e:ba:3a:f0:9c:d9:ae:03:
90:41:3d:fd:0b:ce:fa:77:83:5e:bf:34:ae:92:a8:cf:c5:62:
00:03:22:4b:4f:8f:f1:64:65:f1:5a:24:bf:f9:6c:15:f1:aa:
6c:32:27:86:47:53:ec:5e:35:74:5e:1e:7e:d2:c3:81:09:2b:
a6:cd:78:69:2e:58:ed:d7:37:32:3a:d5:45:96:e4:5f:c0:80:
07:18:8e:a1:40:ef:e9:b6:20:21:94:67:56:3f:b2:9c:b0:45:
57:eb:99:2f:ae:c2:38:4d:e2:17:99:76:80:7d:53:3f:91:31:
ff:04:2e:20:4a:57:df:f3:22:ef:73:09:94:7b:5d:52:f6:32:
85:d8:27:6d:a0:31:95:23:b2:59:82:76:2b:52:00:b4:26:2e:
d6:14:95:20:c5:8b:c6:93:5f:c0:7c:f1:31:e6:33:03:d5:b7:
6a:26:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:04:15 2026 by rpki-client