Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/tZzd-4vJwTNaHI1mDTSbAye9aUg.roa
File: tZzd-4vJwTNaHI1mDTSbAye9aUg.roa (raw, json)
Hash identifier: WUVxikPavSYyUIB2ehZCr1awJETbczoTgfaX/AVFzSA=
Subject key identifier: B5:9C:DD:FB:8B:C9:C1:33:5A:1C:8D:66:0D:34:9B:03:27:BD:69:48
Certificate issuer: /CN=ec97b3271f2d2d2c07772faad0133c546e497408
Certificate serial: 019C469D805F2E7A628E1BA42CB86F3AD3F2
Authority key identifier: EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/tZzd-4vJwTNaHI1mDTSbAye9aUg.roa
Signing time: Tue 10 Feb 2026 08:14:13 +0000
ROA not before: Tue 10 Feb 2026 08:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197494
IP address blocks: 198.202.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:9d:80:5f:2e:7a:62:8e:1b:a4:2c:b8:6f:3a:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b3271f2d2d2c07772faad0133c546e497408
Validity
Not Before: Feb 10 08:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b59cddfb8bc9c1335a1c8d660d349b0327bd6948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:24:77:e7:27:51:38:52:47:94:b5:96:65:
78:f2:36:95:f5:ba:be:6e:fd:2a:7a:e2:c0:e3:74:
63:26:07:e2:72:e7:05:66:8e:ec:df:dc:2b:46:e7:
0b:6c:45:90:4c:0a:4d:d4:dc:2f:a4:9c:31:cd:8a:
71:14:36:80:a1:df:59:0a:49:2c:8e:f4:24:58:d6:
63:d6:09:2f:7a:92:5f:ff:4c:18:ce:b3:2d:b0:de:
73:83:29:2a:18:be:5a:47:b3:f4:49:48:39:08:c6:
de:51:97:8a:c9:a9:30:db:6d:d5:e8:7e:79:c7:10:
56:9f:8f:ee:55:3c:c0:c6:15:c8:84:13:5d:3e:d9:
29:62:08:67:b1:c1:a1:5f:17:36:9f:c0:4e:e7:6a:
59:d5:64:dd:c6:90:1c:4f:2b:55:6b:5c:49:58:f9:
0f:46:7b:fe:99:ed:f3:e7:38:0b:11:3c:a9:0f:c7:
36:c8:4f:be:e3:3d:67:a9:a6:b6:4f:75:46:1f:79:
e9:db:19:75:8d:f0:ba:20:19:44:d6:45:b8:0e:0c:
44:99:ae:e2:4b:43:65:17:b8:f0:0e:bd:3b:f8:b0:
3f:3b:f7:13:b4:22:9e:b0:a2:06:24:ea:57:3a:6d:
4e:0c:7e:ce:58:15:3a:a8:3e:44:d7:7a:c2:c8:c1:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:DD:FB:8B:C9:C1:33:5A:1C:8D:66:0D:34:9B:03:27:BD:69:48
X509v3 Authority Key Identifier:
keyid:EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/tZzd-4vJwTNaHI1mDTSbAye9aUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.202.29.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:4b:78:b7:56:cb:f6:68:0b:a9:f0:55:1d:7b:e8:84:42:b5:
25:cb:5c:86:c5:ba:f0:93:96:04:fd:d7:5c:05:4e:d3:2a:66:
8c:9a:81:c3:21:a8:ef:3c:27:9e:7a:cd:70:c3:fd:31:d5:ec:
74:b4:8e:18:97:0c:71:f0:ce:fb:a8:90:30:47:a2:3a:d4:9d:
ed:88:28:81:38:c3:e6:e4:02:6d:86:4c:d8:28:61:24:8c:d2:
5d:bd:64:cc:45:51:d9:9e:35:42:8c:0a:ab:0c:cb:b0:fa:6f:
04:55:27:1f:ff:83:98:26:d6:a9:f4:4b:5d:ee:d5:a9:03:42:
69:fa:e9:a6:36:b1:41:f9:48:69:4d:76:e5:2b:5a:b6:ef:0f:
27:d8:a8:37:6d:09:f1:db:32:dd:98:30:72:77:8f:9b:34:9a:
87:28:d8:6c:81:98:8b:3e:53:17:1e:a5:61:33:db:7f:b3:0f:
40:d0:8d:96:60:2c:3e:40:84:cb:b4:0c:23:93:24:83:d8:12:
d9:4e:48:4d:cd:28:0d:a2:9c:ee:ac:94:44:d1:a9:05:4d:92:
33:7d:27:33:65:61:f0:f5:79:59:50:7f:41:87:a4:53:ed:1c:
8f:81:22:4f:12:90:af:3c:51:dc:a3:01:55:45:12:aa:c1:84:
20:db:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:19:47 2026 by rpki-client