Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/FtUZYcsFth-eDFAFImzR-YU79LI.roa
File: FtUZYcsFth-eDFAFImzR-YU79LI.roa (raw, json)
Hash identifier: yeCMBGP8+IF7/VljhvF8HDnc5ZfiOnyA7kI7XPiPOiw=
Subject key identifier: 16:D5:19:61:CB:05:B6:1F:9E:0C:50:05:22:6C:D1:F9:85:3B:F4:B2
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824D29DAC95F2672D6F694FA1EF6CB
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/FtUZYcsFth-eDFAFImzR-YU79LI.roa
Signing time: Tue 25 Aug 2026 15:20:35 +0000
ROA not before: Tue 25 Aug 2026 15:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 176.53.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4d:29:da:c9:5f:26:72:d6:f6:94:fa:1e:f6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16d51961cb05b61f9e0c5005226cd1f9853bf4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:5f:cf:a0:78:4a:25:8f:c4:d4:bc:51:fb:
14:a8:02:6d:b8:a5:3b:94:48:15:5e:7c:41:c8:60:
17:6b:5d:31:31:c9:89:27:e4:35:87:a4:ef:1a:79:
1f:3d:3b:fc:2c:05:e1:be:6b:11:96:32:5a:c6:b0:
ec:1b:c7:ba:68:22:f4:76:43:23:6c:e8:67:44:d1:
7a:9a:de:2b:8a:1f:89:28:d2:ab:d0:19:cc:28:3f:
05:bb:b8:44:34:e8:99:5e:cc:43:00:92:2a:82:c7:
4e:80:5a:b2:a3:de:9f:50:2c:77:83:b2:e1:7c:71:
cf:fd:f4:78:52:7d:95:bf:89:98:8c:4d:57:da:41:
cb:3a:bc:46:5f:74:fc:52:66:f2:70:62:af:a8:f5:
a9:8a:6e:62:87:6d:90:8c:77:56:12:70:a0:df:ba:
99:ca:2d:00:a8:88:8c:e6:a5:7c:5e:36:8b:45:fb:
90:53:30:29:b2:ed:af:75:d0:a9:10:7e:fa:ae:d2:
86:a4:e6:77:6d:75:09:d8:fb:3a:cc:33:27:0f:16:
8c:91:a6:b7:a2:f7:cd:dd:25:99:88:e2:28:8a:51:
65:3b:df:c3:91:6e:e3:87:aa:11:fb:b2:74:f1:7a:
24:8f:bb:77:14:29:4e:92:44:b6:84:95:81:91:93:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:19:61:CB:05:B6:1F:9E:0C:50:05:22:6C:D1:F9:85:3B:F4:B2
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/FtUZYcsFth-eDFAFImzR-YU79LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.157.0/24
Signature Algorithm: sha256WithRSAEncryption
58:00:8d:a2:6a:46:1e:f2:a9:a8:3e:ee:bc:85:77:38:8e:3d:
bd:e9:8e:95:e6:1c:e9:9c:77:22:c1:23:92:7f:2e:f5:67:1f:
89:7c:0f:92:31:ec:3f:76:8d:47:cd:be:4e:05:7a:00:fd:a1:
ef:6f:38:82:2a:cb:8a:ab:59:f8:0e:55:5f:85:35:0b:46:58:
08:77:e9:4c:59:5d:78:9a:53:a8:a4:ec:8a:2b:ec:3c:0e:c6:
bd:9b:13:c8:e0:2a:2a:31:dc:e8:8c:6e:9e:3e:e6:72:0e:e4:
5f:8d:0a:21:73:85:17:c4:9b:79:0b:fc:20:9d:bc:dc:bb:a0:
24:20:06:10:38:16:17:1c:80:70:7e:db:d9:f7:75:96:30:44:
41:95:c2:2c:fa:d5:11:3a:80:aa:79:6a:ae:1e:3b:7b:cb:7c:
9b:32:a7:86:8f:ea:b9:9a:bb:1d:00:32:95:f6:de:a5:81:13:
38:18:76:2f:1b:94:d5:17:8b:89:1a:13:3b:2a:38:2e:1d:08:
27:a0:69:2b:ed:f6:66:c2:00:3f:b9:2f:03:d1:3f:85:3c:43:
50:4a:d3:34:06:e8:5a:96:2d:e9:13:b9:99:bf:60:47:78:83:
31:3b:3e:01:fb:99:25:02:6c:86:f5:9e:49:3e:f5:d7:52:90:
a6:d8:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:27:01 2026 by rpki-client