Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/a2ZPbARvsluL7rNbVgdnXTvbqzQ.roa
File: a2ZPbARvsluL7rNbVgdnXTvbqzQ.roa (raw, json)
Hash identifier: SgMukQsZHJnM/ZU5IlG04IiHUegCFFvgUA+3BlYtL6E=
Subject key identifier: 6B:66:4F:6C:04:6F:B2:5B:8B:EE:B3:5B:56:07:67:5D:3B:DB:AB:34
Certificate issuer: /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial: 01A00D785F40893A7732FBE5FED655E9EF63
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/a2ZPbARvsluL7rNbVgdnXTvbqzQ.roa
Signing time: Mon 17 Aug 2026 02:06:27 +0000
ROA not before: Mon 17 Aug 2026 02:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137182
IP address blocks: 45.157.132.0/22 maxlen: 24
157.228.192.0/18 maxlen: 24
2a0f:4280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:78:5f:40:89:3a:77:32:fb:e5:fe:d6:55:e9:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Validity
Not Before: Aug 17 02:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b664f6c046fb25b8beeb35b5607675d3bdbab34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:9f:d5:d4:3a:57:79:b9:ed:80:cb:19:7e:
17:f3:39:01:d2:70:b6:8f:89:24:68:2e:dd:d8:5f:
4e:a3:42:d3:28:db:d1:65:9a:61:cd:bb:b8:e1:c5:
3e:a5:37:93:1c:c1:f2:87:f9:ac:bf:7a:32:19:8b:
23:e8:0d:07:02:17:df:7c:56:33:8b:1b:98:ae:e1:
91:26:4d:aa:a1:3d:42:dd:0c:d5:44:b5:b0:a0:7f:
25:23:f7:45:cd:28:f9:ac:02:fd:1c:c7:c6:39:19:
4d:80:0b:c4:c7:f2:b6:f1:99:e4:2d:a8:09:eb:8d:
25:61:97:ae:10:d1:ae:19:bc:d3:37:16:10:a7:8c:
62:5c:bb:6e:f6:0d:42:53:65:09:84:a4:65:e2:55:
70:41:e9:de:07:8a:79:c1:79:82:bc:04:1e:f7:88:
ab:7e:51:2c:f2:d8:f6:c6:69:18:62:0e:4f:6c:df:
33:4a:43:39:5d:8a:bc:fb:cb:ef:70:59:a8:5d:60:
d1:36:65:a5:55:f0:3d:ea:4f:74:46:cd:92:4e:9b:
68:92:4a:56:20:35:7d:bd:d8:2b:98:c9:02:74:89:
f7:cb:bc:d4:d8:06:5e:c6:bd:ae:9f:0f:f7:eb:dc:
40:ab:e7:f5:ee:6e:23:60:9c:dd:55:33:d8:7a:eb:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:4F:6C:04:6F:B2:5B:8B:EE:B3:5B:56:07:67:5D:3B:DB:AB:34
X509v3 Authority Key Identifier:
keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/a2ZPbARvsluL7rNbVgdnXTvbqzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.132.0/22
157.228.192.0/18
IPv6:
2a0f:4280::/29
Signature Algorithm: sha256WithRSAEncryption
34:aa:d9:04:ab:9a:4d:96:90:b2:1f:e3:db:cf:bd:37:63:77:
ad:8d:5a:67:64:f3:6f:5b:1d:04:6d:62:40:86:f8:04:ff:6e:
76:91:d7:e2:fa:81:25:b6:ee:21:9d:6b:ef:da:fe:08:af:61:
5f:c6:fd:4b:71:7e:a1:cc:84:07:cd:81:37:fc:ff:16:93:06:
8a:d2:20:4a:ff:d3:64:d4:f3:9a:0d:87:aa:f1:34:d5:cc:85:
c0:16:e2:a7:a0:04:56:9d:58:4f:f5:5c:b1:a1:95:5b:bf:b9:
83:b8:f9:5f:af:1b:da:52:f8:90:ff:dc:ca:bd:2b:7c:92:d2:
65:4a:f1:32:03:74:d7:59:35:f4:40:63:7c:fa:79:e3:21:d3:
b2:d7:6f:b4:e9:cc:eb:50:32:43:e8:8f:a0:12:29:1d:8f:e5:
a5:f5:c7:ca:f2:0c:56:e0:93:46:cb:0c:cc:33:21:26:55:9e:
7b:ad:28:37:53:6f:93:06:25:b1:d9:18:bb:6b:d4:02:b0:5b:
70:3e:9d:e4:a2:12:ea:06:45:5f:84:05:84:15:ff:26:21:e1:
f4:0b:7e:06:50:e7:fe:71:f5:1c:3d:4f:12:a2:74:2f:01:bf:
58:cb:9c:90:e6:53:5d:c3:06:57:1d:be:a4:5a:2d:71:79:b1:
4a:fc:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:44:58 2026 by rpki-client