Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/zPvhmPPDQT0Fvd_VKmq5Ky_vbIk.roa
File: zPvhmPPDQT0Fvd_VKmq5Ky_vbIk.roa (raw, json)
Hash identifier: 65IroDa8Od3CMDLl4zb4TxsRDqigLEnj0tNbOXPxL5o=
Subject key identifier: CC:FB:E1:98:F3:C3:41:3D:05:BD:DF:D5:2A:6A:B9:2B:2F:EF:6C:89
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398235FC5AAAD4775CA7D1EFFDD1A738
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/zPvhmPPDQT0Fvd_VKmq5Ky_vbIk.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 176.53.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:35:fc:5a:aa:d4:77:5c:a7:d1:ef:fd:d1:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccfbe198f3c3413d05bddfd52a6ab92b2fef6c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:37:c2:06:67:ab:34:0f:1b:74:3b:8d:1f:
70:4d:53:c7:f7:82:2a:75:d3:d8:ad:78:72:a0:dc:
1e:e7:b7:ad:76:c1:a5:47:14:d0:72:df:c2:a5:a4:
8a:a5:fb:92:6a:7c:39:a8:48:9b:51:83:19:0c:82:
74:97:34:3d:84:3e:e6:58:74:83:b5:29:c8:72:32:
34:2d:48:37:79:dd:06:9d:33:1a:4f:30:8d:3c:52:
8a:fa:d6:b9:0c:d1:00:9d:aa:75:21:ec:7f:78:53:
e8:2a:3a:aa:b2:d3:67:12:df:cd:b4:fb:7d:78:7e:
6e:8c:b8:51:1d:8a:eb:75:c0:53:1c:af:52:dd:fb:
e5:07:b7:c8:74:20:17:5f:80:1d:90:9c:d2:41:4b:
cf:f3:a5:ba:17:f6:66:aa:eb:24:1c:98:80:1c:42:
49:65:83:27:ab:e2:5e:d9:a1:3e:c7:20:5c:0b:cb:
64:d8:1f:d0:f8:30:65:59:14:47:9f:57:ab:32:ac:
dd:08:22:f2:a2:79:bc:81:15:ae:c5:df:1c:72:72:
70:83:da:c8:e8:9e:7f:cd:ef:2c:f7:32:0a:2f:40:
b5:01:28:b6:73:7b:2c:49:c8:05:98:3b:d6:fc:c6:
92:00:cd:7e:30:3b:47:8c:38:86:c5:bf:7f:dd:26:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FB:E1:98:F3:C3:41:3D:05:BD:DF:D5:2A:6A:B9:2B:2F:EF:6C:89
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/zPvhmPPDQT0Fvd_VKmq5Ky_vbIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.156.0/24
Signature Algorithm: sha256WithRSAEncryption
56:27:48:b5:d0:de:fd:7d:b8:f3:3e:73:f0:ad:de:67:c2:44:
df:fe:40:1c:13:d8:ab:43:69:d0:72:3f:54:b3:07:4c:6e:d0:
73:59:3d:bf:3e:a9:81:6b:32:18:fa:89:b1:cd:6f:40:37:76:
a7:b1:cd:09:4c:fe:83:d8:27:0f:4c:a3:e0:dc:ef:64:4d:c7:
40:c5:73:9d:2f:b1:7d:7a:54:14:5d:2a:61:86:0e:06:b2:20:
61:88:c2:d1:68:bd:cf:2a:57:9c:68:94:45:37:1b:5e:7b:5f:
93:2f:dd:a9:36:f8:7d:52:cd:c1:30:56:4d:a5:c7:ce:88:29:
97:ee:8b:3f:a7:22:51:84:a6:ce:ce:6e:2e:3c:62:51:df:5e:
9d:6c:6d:7f:52:f4:b9:1d:48:20:00:86:26:ea:72:94:0f:45:
ea:a1:f4:50:71:d2:48:10:c0:86:c2:1f:dd:78:a0:14:3e:09:
de:6f:4d:1c:44:da:e3:f5:61:6d:54:a7:5c:4f:fe:41:0d:84:
f8:7d:0d:9b:cf:8f:e2:c4:70:e3:42:44:ac:ad:d9:4f:46:74:
a3:6e:f5:65:63:3f:b1:cb:70:c9:8e:f0:32:94:64:b6:7d:c3:
a9:4e:05:d6:bb:20:fd:10:ec:b7:50:83:ed:e8:c3:28:f7:2e:
4c:95:af:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gjX8WqrUd1yn0e/90ac4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2ZiZTE5OGYzYzM0MTNkMDViZGRmZDUyYTZhYjkyYjJmZWY2Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRw3wgZnqzQPG3Q7jR9wTVPH94Iq
ddPYrXhyoNwe57etdsGlRxTQct/CpaSKpfuSanw5qEibUYMZDIJ0lzQ9hD7mWHSD
tSnIcjI0LUg3ed0GnTMaTzCNPFKK+ta5DNEAnap1Iex/eFPoKjqqstNnEt/NtPt9
eH5ujLhRHYrrdcBTHK9S3fvlB7fIdCAXX4AdkJzSQUvP86W6F/ZmquskHJiAHEJJ
ZYMnq+Je2aE+xyBcC8tk2B/Q+DBlWRRHn1erMqzdCCLyonm8gRWuxd8ccnJwg9rI
6J5/ze8s9zIKL0C1ASi2c3ssScgFmDvW/MaSAM1+MDtHjDiGxb9/3SYSbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMz74Zjzw0E9Bb3f1SpquSsv72yJMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvelB2aG1QUERRVDBGdmRfVkttcTVLeV92YklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWcMA0G
CSqGSIb3DQEBCwUAA4IBAQBWJ0i10N79fbjzPnPwrd5nwkTf/kAcE9irQ2nQcj9U
swdMbtBzWT2/PqmBazIY+omxzW9AN3ansc0JTP6D2CcPTKPg3O9kTcdAxXOdL7F9
elQUXSphhg4GsiBhiMLRaL3PKlecaJRFNxtee1+TL92pNvh9Us3BMFZNpcfOiCmX
7os/pyJRhKbOzm4uPGJR316dbG1/UvS5HUggAIYm6nKUD0XqofRQcdJIEMCGwh/d
eKAUPgneb00cRNrj9WFtVKdcT/5BDYT4fQ2bz4/ixHDjQkSsrdlPRnSjbvVlYz+x
y3DJjvAylGS2fcOpTgXWuyD9EOy3UIPt6MMo9y5Mla/f
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:23 2026 by rpki-client