Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/z657-juX3He43lAQRFdSrUowMuA.roa
File: z657-juX3He43lAQRFdSrUowMuA.roa (raw, json)
Hash identifier: cF2Zd6GwGD3rF8S9m/D0s5xLKX+lYpS93npMzrcgzIY=
Subject key identifier: CF:AE:7B:FA:3B:97:DC:77:B8:DE:50:10:44:57:52:AD:4A:30:32:E0
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019FBA3DBB2509B8637149D29011C7DDFE1F
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/z657-juX3He43lAQRFdSrUowMuA.roa
Signing time: Fri 31 Jul 2026 22:13:55 +0000
ROA not before: Fri 31 Jul 2026 22:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203729
IP address blocks: 2a0b:6b81:1::/48 maxlen: 48
2a0b:6b81:205::/48 maxlen: 48
2a0b:6b81:208::/48 maxlen: 48
2a0b:6b81:210::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:3d:bb:25:09:b8:63:71:49:d2:90:11:c7:dd:fe:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jul 31 22:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfae7bfa3b97dc77b8de5010445752ad4a3032e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:ed:29:e4:ab:69:ae:0f:c5:44:73:6f:27:
1a:94:04:f6:42:41:80:dc:f7:b1:e2:76:8a:bd:64:
ce:0f:a4:1b:6c:d4:c0:57:42:fb:7f:9b:89:ce:9d:
15:80:26:f7:1d:4b:8c:df:29:5d:ce:a0:cf:ce:6b:
96:2f:1a:46:18:69:ba:89:e0:68:00:c3:f0:1b:a1:
45:b2:56:84:8a:60:e9:6e:5b:c8:d1:69:d4:28:65:
51:8d:b1:41:bd:3b:f4:c1:2b:c3:47:0a:29:cb:41:
c4:bc:bb:d4:96:52:49:60:7d:8a:b3:fa:c2:cc:bf:
fa:b9:2c:ec:20:76:d7:d3:f9:2e:24:ea:71:c4:9f:
28:e9:56:25:c1:a6:e2:b5:ae:b7:08:16:20:4f:d1:
26:2c:8f:f6:e4:3f:db:38:cb:15:09:e1:6b:50:5e:
90:14:ea:c4:bf:d1:e7:ef:4c:26:35:99:a7:e2:02:
24:52:96:c1:7d:4d:b1:02:f1:ea:a3:4a:c9:68:ab:
ba:0c:ca:6e:03:ce:6e:88:6b:e0:f9:ce:0e:88:39:
8c:b8:34:0c:fa:9c:ae:03:c8:59:8f:c7:18:91:6c:
eb:31:30:97:dd:e8:2f:e0:14:b4:37:d1:b3:67:2b:
83:98:fc:02:cc:50:94:ac:ed:7f:f0:fe:8d:2b:2c:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AE:7B:FA:3B:97:DC:77:B8:DE:50:10:44:57:52:AD:4A:30:32:E0
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/z657-juX3He43lAQRFdSrUowMuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b81:1::/48
2a0b:6b81:205::/48
2a0b:6b81:208::/48
2a0b:6b81:210::/48
Signature Algorithm: sha256WithRSAEncryption
32:b6:5b:33:49:3d:98:63:65:fa:07:ee:bb:f0:4c:62:65:23:
81:cf:4a:48:29:b1:c1:8f:71:c1:ef:e5:f7:75:67:f3:9c:6d:
26:8a:79:aa:ce:00:7a:ab:2b:fd:ba:8c:0d:3d:31:1d:0d:e7:
52:30:42:74:1b:05:0b:86:3e:02:fc:61:78:8f:e5:34:43:26:
0b:13:de:97:2b:d3:59:21:17:1a:e4:87:16:f9:be:da:ea:c5:
d7:47:16:b8:cf:c1:07:2c:0a:f0:85:e6:c3:f7:98:09:b9:10:
e1:59:1b:28:93:18:5a:9a:28:67:2d:a4:a1:d2:3d:a7:c1:4f:
03:ce:11:45:14:4e:1f:ad:26:58:22:58:91:51:ba:6b:01:ba:
26:53:36:27:63:58:d7:7d:f0:24:62:a7:81:7c:bb:ed:a5:ee:
2c:72:42:35:9e:fb:f4:7e:a8:ab:2b:2a:25:53:c0:39:6b:d3:
86:3a:a9:a2:ad:e4:8c:eb:65:7b:83:97:1e:0f:14:2c:ca:24:
ae:b9:d9:bb:0f:60:04:6c:90:33:0d:b4:99:c3:50:0a:69:6d:
88:7d:35:71:90:3e:70:13:29:4c:b8:ae:6c:6b:12:f4:03:9a:
ec:9e:56:ae:a0:4d:71:cc:98:db:57:13:c6:ca:f0:1e:a8:3a:
2e:ef:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:35 2026 by rpki-client