Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zBktoOfAtH0TyqWaE_SbdXchdgs.roa
File: zBktoOfAtH0TyqWaE_SbdXchdgs.roa (raw, json)
Hash identifier: Fb/1cLDQNF54XKQ9akcZFsvJ6rY7q9iLYMPfgb0m5tw=
Subject key identifier: CC:19:2D:A0:E7:C0:B4:7D:13:CA:A5:9A:13:F4:9B:75:77:21:76:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D397A200F177692A084183A79865B59BA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zBktoOfAtH0TyqWaE_SbdXchdgs.roa
Signing time: Sun 29 Mar 2026 12:03:18 +0000
ROA not before: Sun 29 Mar 2026 12:03:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29226
IP address blocks: 2a0a:2d01::/32 maxlen: 32
2a0f:7d03::/32 maxlen: 32
2a10:7100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:7a:20:0f:17:76:92:a0:84:18:3a:79:86:5b:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 29 12:03:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc192da0e7c0b47d13caa59a13f49b757721760b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:61:35:6a:30:f9:07:b2:ea:a1:06:9e:25:
ea:07:c8:03:91:9f:88:b7:fc:5f:3f:19:d6:b9:09:
0d:79:9e:ab:52:b4:41:bd:6e:da:dd:3d:5d:9e:e1:
41:49:92:27:a7:28:51:f8:f8:5d:a7:70:93:65:3a:
54:73:e6:5f:13:da:1b:c2:53:84:52:1a:d7:e4:2f:
cf:18:80:72:4c:90:eb:28:12:a6:30:0b:ea:c6:55:
da:a4:08:22:a5:ae:f2:7c:13:87:8e:f2:46:e4:71:
c6:30:eb:3e:96:84:85:e4:39:eb:49:79:a3:9a:b5:
f2:7b:ce:b6:69:11:38:52:6f:dd:c5:fe:cd:6c:06:
ba:b9:eb:d9:19:40:b9:31:c0:57:85:89:37:12:a7:
e7:b6:ef:96:5f:4e:9f:52:08:61:b6:cc:1c:1c:6f:
7d:cb:4e:28:0d:da:de:4a:61:16:2a:0e:79:c0:5a:
0a:bd:92:a4:34:8f:d7:21:ad:86:e0:8a:5c:68:b0:
c3:ab:03:a2:2f:1c:48:80:65:6c:b8:e5:bc:9b:5e:
e7:ad:19:fb:ac:b1:3b:a3:a9:e0:fd:db:5c:5a:9f:
87:97:5d:92:f2:c7:f9:bf:ef:ad:06:f1:71:d9:3e:
b2:69:41:6b:44:11:4d:f1:a0:c4:c2:01:e5:94:8f:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:2D:A0:E7:C0:B4:7D:13:CA:A5:9A:13:F4:9B:75:77:21:76:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zBktoOfAtH0TyqWaE_SbdXchdgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d01::/32
2a0f:7d03::/32
2a10:7100::/29
Signature Algorithm: sha256WithRSAEncryption
67:31:41:4b:32:bd:d8:7e:52:03:c1:5b:d9:81:d1:e3:36:f4:
7b:15:15:b9:d7:11:c8:15:91:7a:e3:23:3d:6a:b9:12:40:e1:
86:a5:8a:2a:fb:ab:14:af:a8:1b:b8:69:bf:23:e4:bd:ad:bf:
30:16:7b:14:86:26:76:12:76:8b:79:36:dc:c2:ca:11:b9:5d:
b5:9d:86:d8:78:ab:8d:a2:0a:48:dd:18:30:4f:e5:b6:dd:fe:
65:70:fc:81:06:78:da:de:3f:3a:73:a2:7c:8f:17:2f:67:53:
55:83:5b:89:71:45:d5:1b:03:88:e8:49:7b:2b:d3:ab:e6:4a:
ca:f9:44:d6:e2:0f:88:40:18:fb:dd:44:05:15:29:d3:43:87:
fa:57:1b:b5:8b:48:79:f8:ee:e4:d1:f2:4d:4b:5c:28:e6:56:
f9:8b:42:1b:27:46:5f:1d:f9:21:41:88:3f:7e:48:df:36:0c:
a2:96:d6:d9:e4:ef:1e:0d:60:72:76:a9:34:f9:17:04:1e:70:
5d:5a:0e:f9:b8:75:98:18:01:8a:75:4d:9b:fb:e3:c3:45:62:
47:d9:e5:3b:3a:4e:fb:21:01:df:ff:a8:5a:65:5f:54:26:ac:
ea:9b:3b:8a:4e:d7:4e:1b:fb:15:5b:78:93:74:10:a6:16:d0:
9d:df:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:43 2026 by rpki-client