Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ZiW92i6QlImRRc0GQP8Xv9UuTQI.roa
File: ZiW92i6QlImRRc0GQP8Xv9UuTQI.roa (raw, json)
Hash identifier: aDAO0n/FIgwPx+Xp0ouU9N8Sw8NwaXClTm/MxzPT/W4=
Subject key identifier: 66:25:BD:DA:2E:90:94:89:91:45:CD:06:40:FF:17:BF:D5:2E:4D:02
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824B9D485F91705C6F0E63F9466E43
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ZiW92i6QlImRRc0GQP8Xv9UuTQI.roa
Signing time: Tue 25 Aug 2026 15:20:35 +0000
ROA not before: Tue 25 Aug 2026 15:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206064
IP address blocks: 176.53.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4b:9d:48:5f:91:70:5c:6f:0e:63:f9:46:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6625bdda2e9094899145cd0640ff17bfd52e4d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:a6:74:74:92:68:9c:15:51:d2:fb:0b:69:
f6:d0:0f:67:7e:e3:da:03:91:d3:7d:76:92:fc:3b:
77:94:9a:64:2b:69:3f:51:05:23:c0:6a:27:90:7f:
b1:79:ce:ec:61:47:35:09:73:42:c7:f0:7d:ba:a4:
7d:05:f3:2d:25:e2:7e:e6:98:93:fc:3a:cd:c5:0d:
ab:26:c4:9c:a0:58:fd:b4:f0:a5:4a:5a:20:d1:5b:
f8:19:03:4f:a3:68:dd:74:29:93:3e:c9:71:4d:f0:
43:e2:7a:a8:a1:48:91:33:ee:1c:ff:47:2e:04:f9:
9f:b7:de:f3:4f:b7:95:40:cb:93:dd:fb:89:85:50:
82:9e:1f:36:fe:66:f6:e2:83:63:f2:bc:82:03:41:
07:21:46:aa:92:6e:07:65:97:3d:2a:cd:0a:87:a6:
81:03:71:eb:9a:a7:a6:20:10:e6:83:ae:87:47:80:
f9:f0:36:fb:61:c6:3e:f3:1d:bc:52:52:9a:86:f4:
6f:87:80:96:58:7d:0b:16:95:ef:53:9b:55:d9:ab:
79:b2:89:30:d3:40:b4:37:5b:de:28:d7:49:47:34:
65:d3:d6:06:cc:a4:57:3f:83:bc:2e:bd:35:bf:bc:
df:9a:09:10:62:fc:bf:c2:20:7f:f0:b5:45:c2:60:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:BD:DA:2E:90:94:89:91:45:CD:06:40:FF:17:BF:D5:2E:4D:02
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ZiW92i6QlImRRc0GQP8Xv9UuTQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.171.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e3:8e:72:aa:c0:2d:de:02:a4:2e:38:8d:c8:14:e6:7e:39:
ea:9a:61:cd:6a:c5:0d:0f:4d:2b:88:3d:f4:f6:cc:d0:72:11:
c9:51:0e:41:7c:ae:ff:e6:a1:56:66:6b:d5:be:c1:2a:60:fc:
09:d3:bf:42:85:5d:dd:70:a4:d4:af:d4:63:7d:7f:aa:b6:65:
bb:f8:67:21:79:9d:c9:f6:1b:db:6a:95:f8:f6:ab:b6:9a:0b:
c1:f2:cc:21:6c:6e:c7:f9:b9:3b:c5:00:d5:42:c0:b8:2f:b9:
fa:18:a5:b0:6a:81:a2:f8:b2:70:f3:ab:31:1c:e1:c5:56:37:
a7:a1:f7:d3:46:e4:74:39:5b:1a:5e:3f:1a:de:43:4c:ee:7e:
e8:43:b2:10:1c:7b:46:79:3f:67:f8:10:e7:cc:c8:67:51:bd:
b1:08:d2:6e:a9:fb:2d:c2:38:db:cd:c1:66:58:69:dc:41:4a:
e9:2b:a0:79:41:70:9f:a9:38:ce:03:19:71:06:62:1f:6b:a5:
03:f0:a9:42:4b:d6:d9:6e:dd:34:5a:98:a8:55:bd:8d:0d:af:
64:f7:69:bf:29:9c:84:95:13:a9:07:4f:6d:2b:07:55:3b:42:
e8:a0:30:a9:8c:8c:dd:1c:5a:c5:c6:ba:d8:40:56:59:f4:2d:
a2:77:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:47 2026 by rpki-client