Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/z7xbYMqcK-OiglaBirFYzOx5qfw.roa
File: z7xbYMqcK-OiglaBirFYzOx5qfw.roa (raw, json)
Hash identifier: iCq7g/m0VQsB5AUC8E3rqsTKyjID8Y8pPw9uGzB/tcU=
Subject key identifier: CF:BC:5B:60:CA:9C:2B:E3:A2:82:56:81:8A:B1:58:CC:EC:79:A9:FC
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398247C4CBEB55089454289CE5631A71
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/z7xbYMqcK-OiglaBirFYzOx5qfw.roa
Signing time: Tue 25 Aug 2026 15:20:34 +0000
ROA not before: Tue 25 Aug 2026 15:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201079
IP address blocks: 185.254.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:47:c4:cb:eb:55:08:94:54:28:9c:e5:63:1a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfbc5b60ca9c2be3a28256818ab158ccec79a9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:a1:80:5f:60:cd:6a:dd:68:86:92:82:de:
8b:d8:5b:42:f3:77:d9:64:a7:41:cf:fc:72:f2:e9:
27:60:6e:55:58:14:2f:4c:62:7b:17:fb:d5:a4:bd:
90:5c:a5:6b:cf:b4:9e:fa:30:bf:51:86:3d:6a:94:
58:9a:99:75:76:d3:9d:21:f1:1b:9d:33:e1:0e:d6:
48:82:c0:85:dc:54:92:ba:a9:84:2f:e1:b7:97:5d:
6c:14:ae:f1:70:04:8c:8e:04:93:b4:d2:c3:a4:2e:
c2:6c:fa:81:1e:86:0e:b0:8c:22:9d:34:37:26:98:
5c:bf:bf:78:5b:a4:44:06:0e:66:54:5d:b3:08:1d:
2f:32:5c:8f:f5:d2:ac:1b:44:22:e8:2d:7b:90:fa:
ce:5c:b8:e6:93:bf:3d:36:50:da:f8:81:2e:45:0c:
fe:bc:a4:03:c4:be:a6:5e:38:3a:a6:77:f8:f1:68:
59:f1:80:22:d8:7d:d3:72:86:e1:5a:32:3d:b0:63:
21:0e:e7:76:20:4f:ef:4a:11:8a:c1:bc:95:af:3e:
1c:b0:e1:e8:1c:a7:7f:8b:11:d7:8e:f3:f4:4e:6c:
17:75:0f:36:08:c3:f1:79:c1:d2:62:b7:93:b9:fc:
62:c8:ee:be:8a:0b:10:8b:5f:bf:31:cd:e6:4e:9e:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BC:5B:60:CA:9C:2B:E3:A2:82:56:81:8A:B1:58:CC:EC:79:A9:FC
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/z7xbYMqcK-OiglaBirFYzOx5qfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d6:a3:6f:6f:15:a9:68:19:60:68:f2:d7:35:c0:c4:91:cf:
be:b9:59:79:0c:2d:a6:9a:70:26:34:71:1d:c2:39:70:be:43:
55:99:9d:6c:f1:ee:ef:82:5b:14:8b:09:a9:fd:ab:1a:35:02:
25:16:1e:35:79:30:f3:63:0d:02:d9:88:9e:3b:8c:66:ac:25:
b9:d3:b4:db:60:9d:bd:49:bd:71:db:f9:b6:20:0d:72:09:d9:
87:f0:7d:5c:28:9e:52:22:f1:53:bc:7f:10:58:33:ac:34:17:
55:5f:38:4c:5f:d8:4d:46:59:cf:c5:a1:78:dd:c3:9a:ff:14:
73:50:06:4e:f0:76:88:b7:38:4a:2c:e5:25:29:c2:d0:90:15:
56:93:4c:b5:df:56:76:d3:11:77:48:f6:ba:35:3b:8e:06:9c:
23:43:de:4e:22:3d:bd:9b:02:d3:e8:4b:ce:93:1d:6f:dc:47:
07:6a:9e:4e:82:6d:9b:d1:55:8d:83:c0:02:e6:01:08:90:ee:
6b:40:5d:32:4e:9a:dd:05:03:a0:1b:ae:5c:1a:3f:c3:bc:d4:
b1:f6:60:34:06:0b:cb:6c:6b:33:b3:79:5c:8d:c9:1a:e9:f6:
d6:61:7a:9f:c2:fb:61:84:c8:8a:ae:4c:dd:b6:ee:e3:2b:bc:
d1:5e:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:02 2026 by rpki-client