Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/CBZslF2d4seK45Uczxy9-blOw-E.roa
File: CBZslF2d4seK45Uczxy9-blOw-E.roa (raw, json)
Hash identifier: CexRsWd+qHuH/H91cPSAXnIKG13TBnmlKemW5aXv7c4=
Subject key identifier: 08:16:6C:94:5D:9D:E2:C7:8A:E3:95:1C:CF:1C:BD:F9:B9:4E:C3:E1
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019FFB7CAD01DF513BF830D27B6FD4F40337
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/CBZslF2d4seK45Uczxy9-blOw-E.roa
Signing time: Thu 13 Aug 2026 14:17:59 +0000
ROA not before: Thu 13 Aug 2026 14:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8529
IP address blocks: 2.18.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:7c:ad:01:df:51:3b:f8:30:d2:7b:6f:d4:f4:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Aug 13 14:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08166c945d9de2c78ae3951ccf1cbdf9b94ec3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:4c:42:57:bd:ae:84:2c:11:b3:d8:46:b1:
7d:75:97:ab:92:b6:82:01:8f:67:72:71:a9:30:ba:
cc:3c:5a:9a:2f:65:b8:4a:e8:4e:e4:4c:ad:39:ac:
28:ee:0a:24:fc:81:25:51:a3:35:95:f5:05:3f:ae:
7e:ff:50:bf:78:96:4e:f5:1e:f6:d9:50:51:88:16:
5e:ee:40:5c:de:da:0a:7d:78:71:0d:a6:7d:fc:f3:
9b:ed:cd:ce:0b:3a:4f:06:2f:0d:a0:13:2e:0b:49:
38:37:f9:82:93:1d:7c:57:17:7d:e3:0e:c8:63:69:
9e:22:7f:7f:41:01:01:e7:79:f6:61:9e:4e:2d:93:
60:1a:bc:35:76:e9:f0:5b:d9:16:29:f2:cb:3f:9c:
96:0a:d8:57:c8:a6:a8:10:51:90:06:70:2d:4c:9a:
2f:db:f8:75:f8:ab:8f:83:99:0c:4b:94:09:28:c8:
f8:c9:6b:8f:c5:ed:95:ed:9e:2a:2d:ce:4d:f2:7b:
70:37:04:08:c4:ec:8a:f5:7a:d3:84:49:46:93:ce:
db:dd:03:69:a3:e3:cc:39:81:0e:b6:af:d8:38:a9:
e9:5f:d7:4a:f7:ff:78:b9:e9:52:f3:a3:6f:dc:87:
aa:be:4f:c2:be:d1:42:b6:f6:5b:fc:83:27:82:eb:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:6C:94:5D:9D:E2:C7:8A:E3:95:1C:CF:1C:BD:F9:B9:4E:C3:E1
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/CBZslF2d4seK45Uczxy9-blOw-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.18.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:50:35:3a:a1:74:dc:87:ef:33:5c:48:f8:31:fa:56:56:85:
05:99:12:d9:dc:48:a6:22:e8:91:f2:fc:82:68:1b:39:68:bc:
dd:8a:93:b5:1a:bb:3e:f2:0f:4d:08:d7:92:f2:26:72:7f:50:
c1:2c:e7:8e:89:34:c3:d5:44:10:a8:e3:8f:c6:02:5a:fe:b2:
fa:4b:9e:2f:d8:81:d6:f3:b5:64:94:9d:c3:1c:62:78:74:a2:
49:e7:b4:c5:e2:ff:3b:24:e4:ef:2e:c6:14:4e:67:01:ec:37:
c8:75:70:b9:4e:e9:e6:58:03:a5:dd:6c:3e:20:66:62:8c:21:
c2:d4:21:2c:c0:74:75:33:e7:16:09:9b:06:c9:3d:23:cf:8e:
f9:01:dc:3e:25:e3:73:94:2e:c6:ee:37:85:26:55:6e:45:fa:
20:03:e6:86:3f:32:d5:3c:6a:6d:5e:41:de:14:ae:24:f4:bc:
a6:a3:33:61:6d:6b:78:80:9a:ab:4f:94:0d:91:ed:0c:4a:f6:
d7:27:51:56:9e:4c:19:ef:5f:b8:96:c1:81:88:cf:18:73:22:
95:52:32:05:59:c5:ee:2d:62:35:55:de:e8:81:58:49:97:24:
26:2d:ac:d2:29:e3:b8:3b:6d:99:20:6d:32:7e:35:23:13:9c:
82:a9:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:03:20 2026 by rpki-client