Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/zBqcD9UR8aVOjoHH-2ra9w4MeW8.roa
File: zBqcD9UR8aVOjoHH-2ra9w4MeW8.roa (raw, json)
Hash identifier: Fns2UKe4K+qxSFerVdiFRjhwS488Ttd1J+HTASI/f+M=
Subject key identifier: CC:1A:9C:0F:D5:11:F1:A5:4E:8E:81:C7:FB:6A:DA:F7:0E:0C:79:6F
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019D6D9F77B5EF887D2266CD18628F5BC4C0
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/zBqcD9UR8aVOjoHH-2ra9w4MeW8.roa
Signing time: Wed 08 Apr 2026 15:04:20 +0000
ROA not before: Wed 08 Apr 2026 15:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200523
IP address blocks: 62.68.70.0/24 maxlen: 24
78.128.120.0/23 maxlen: 24
78.142.10.0/24 maxlen: 24
80.72.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:9f:77:b5:ef:88:7d:22:66:cd:18:62:8f:5b:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Apr 8 15:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc1a9c0fd511f1a54e8e81c7fb6adaf70e0c796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:25:3d:3c:9c:c5:2a:f2:60:b0:67:a2:97:
a3:75:ab:d6:0c:59:42:be:ea:a4:b7:8c:83:20:de:
35:76:d8:58:ed:11:8a:b9:53:71:f0:8b:4d:cc:d3:
3f:71:cc:63:f9:a8:25:06:36:ae:da:9d:16:52:ee:
c9:6e:c4:49:52:a5:71:55:49:87:0a:af:7e:51:53:
9c:ac:d3:83:64:7a:e8:5b:61:f8:0f:3a:bc:4f:3c:
c1:17:b7:07:c8:1c:de:7f:f8:e3:35:55:0d:e5:84:
16:d1:87:91:8b:49:88:e4:16:df:0d:cc:a0:03:0a:
d7:13:28:aa:19:95:a9:eb:ee:c5:e4:8f:7c:a2:2e:
db:6f:45:06:38:8a:54:48:55:55:a8:fb:0b:5c:c2:
40:7a:92:81:4c:25:7f:5b:c5:45:00:f3:73:80:f4:
84:6f:08:09:4e:a5:4c:af:48:13:87:b2:b2:f3:34:
f5:e2:1a:de:cc:fc:ac:ae:81:3d:99:01:67:94:5b:
34:78:e4:54:12:35:8c:d7:07:94:2a:5c:20:2a:aa:
e2:64:3e:9d:fe:8b:5d:ee:6d:44:bc:d7:bd:29:99:
e0:a0:da:0d:3e:2f:dc:b5:c7:e8:00:b6:02:fe:ce:
f6:23:03:41:93:48:ad:d4:9e:46:88:64:ca:1b:2d:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:9C:0F:D5:11:F1:A5:4E:8E:81:C7:FB:6A:DA:F7:0E:0C:79:6F
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/zBqcD9UR8aVOjoHH-2ra9w4MeW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.70.0/24
78.128.120.0/23
78.142.10.0/24
80.72.78.0/24
Signature Algorithm: sha256WithRSAEncryption
44:60:b2:75:a6:56:5a:db:ab:39:d8:a1:21:3b:c3:71:4c:cd:
cd:47:1a:dc:ce:83:d7:a8:50:c2:2c:3b:9e:56:2a:d8:36:b6:
b3:f7:b6:8d:1f:3b:70:c8:bb:d3:90:7b:14:29:99:68:2c:be:
40:62:e7:ec:ef:62:67:15:a3:42:eb:05:29:a9:5c:2f:bb:51:
c4:9a:85:ec:0d:8d:2a:36:45:80:1c:00:98:e1:59:9b:6b:90:
ae:81:f3:cd:31:66:2e:52:20:90:d8:05:56:47:b9:87:29:38:
9c:42:38:3b:39:3c:c4:44:70:c5:87:de:c1:6c:26:d8:4b:dc:
ab:20:2f:69:be:e0:b3:9b:06:4d:23:78:4c:ff:fe:2c:2b:f3:
b1:b3:1e:f1:f8:7f:dd:23:c0:e3:b0:0a:3d:0b:2b:93:60:f3:
09:b0:b6:56:f1:c8:db:ba:2d:56:d3:6e:09:ca:6a:24:3c:98:
fe:42:f9:71:6d:72:62:23:da:dc:a0:5d:33:1d:c0:63:2c:10:
ff:5f:60:e2:ec:dc:b6:2c:ac:26:2b:c1:02:6c:67:99:36:84:
91:ab:16:40:3a:e8:c3:3d:af:dc:c0:f0:13:90:d4:c9:fd:4d:
fb:d5:b3:20:2d:55:e6:c6:19:36:6c:ed:b2:3a:4f:b9:b8:9d:
c6:9b:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:12 2026 by rpki-client