Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa
File: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (raw, json)
Hash identifier: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=
Subject key identifier: CD:7D:2F:B4:EA:42:99:E4:29:90:1D:EB:9F:EA:F3:D6:39:1D:FA:BE
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 019C1D9B6A59258C9E252429615F91E94AF8
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa
Signing time: Mon 02 Feb 2026 09:07:30 +0000
ROA not before: Mon 02 Feb 2026 09:07:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205659
IP address blocks: 2a13:d3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:9b:6a:59:25:8c:9e:25:24:29:61:5f:91:e9:4a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Feb 2 09:07:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd7d2fb4ea4299e429901deb9feaf3d6391dfabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:01:20:ba:cb:ec:d6:3a:15:36:ae:cd:ca:
73:78:8d:de:a1:55:a3:5a:1d:74:4c:6b:13:4c:9b:
79:70:88:49:f7:03:a9:ca:a9:da:2d:d4:bc:3a:6f:
85:0f:6b:25:0b:c0:ce:23:32:d4:3b:54:06:40:2d:
84:c5:85:69:12:33:6f:1b:a2:38:86:41:e9:7c:6e:
65:f8:eb:f7:9a:94:49:99:f6:00:39:19:f9:19:1c:
93:81:8a:17:c4:b1:e5:39:6c:d3:ee:35:8e:a9:30:
8a:1b:fd:fe:6a:ab:54:fd:cb:b5:94:96:36:1a:cf:
50:e4:09:5c:76:b1:cf:01:4f:aa:16:9a:13:1f:b7:
fc:1a:b9:1d:fc:f2:66:25:b3:bd:81:0c:ae:0e:d3:
f1:ce:ab:c1:56:41:a4:07:d5:28:61:82:ab:7c:cc:
fd:9c:ad:0a:35:2c:6c:29:04:f4:0c:09:1c:ff:66:
d7:9a:94:fe:29:7a:73:fa:f4:41:de:13:0c:1b:16:
34:47:84:7b:43:e9:a1:91:e4:05:51:87:4c:ee:7e:
3a:81:a5:f2:91:f3:fc:bc:8a:e6:e1:f0:c5:f9:bf:
9f:40:5d:a1:90:6e:94:f3:cb:b8:8e:dc:27:eb:32:
d3:47:0c:53:57:2d:a1:32:40:42:1f:4c:ef:06:7c:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:2F:B4:EA:42:99:E4:29:90:1D:EB:9F:EA:F3:D6:39:1D:FA:BE
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:b8:cf:0b:6a:10:6b:46:41:34:32:f8:d0:8e:6c:50:26:7a:
c8:80:a9:ec:09:2a:06:7b:6b:b8:36:7c:04:e8:f9:c4:8b:f0:
6d:aa:87:ca:7a:27:58:cc:9d:12:9a:30:70:1c:65:c0:d1:9f:
a6:2a:87:cf:9f:b2:1e:0c:51:cc:ca:97:39:6c:9d:57:28:de:
0e:64:f6:55:8d:35:2f:aa:bf:12:84:ca:e7:a6:9b:76:4c:61:
00:16:7e:45:d8:86:99:10:79:17:21:96:eb:5d:ec:c5:1d:d3:
4f:06:ca:e4:2c:ac:6e:32:66:95:a3:fb:ec:13:b8:80:b2:87:
26:a0:28:2f:0b:e8:64:b8:f0:52:2b:c8:51:64:89:e4:2a:6d:
aa:0e:79:9a:98:c9:f6:2b:54:d7:00:e6:6a:be:84:64:2e:5c:
0a:bf:08:1b:32:58:80:3e:21:69:03:ae:61:60:f8:f8:50:07:
79:93:66:fd:14:fa:6f:91:e1:dd:8a:a7:aa:eb:0b:0d:12:44:
38:47:4a:ca:43:72:7a:56:92:00:29:33:ba:4a:be:d8:d2:8f:
53:47:9d:f7:3e:8e:9b:f3:8d:65:ac:6f:98:c3:54:4f:b2:42:
dd:74:5e:a3:c8:14:36:43:04:80:8d:6c:a3:eb:de:d1:ce:43:
23:83:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:48 2026 by rpki-client