Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/u7ZWAaBzlABZ-QZA-Bd1Xl5OXBQ.roa
File: u7ZWAaBzlABZ-QZA-Bd1Xl5OXBQ.roa (raw, json)
Hash identifier: S84OvzHgnNB7KAJknamEKhkwMOlgRvtVcLZBEin8FQM=
Subject key identifier: BB:B6:56:01:A0:73:94:00:59:F9:06:40:F8:17:75:5E:5E:4E:5C:14
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019D20296C6917806FCC5E9420ABD18876AC
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/u7ZWAaBzlABZ-QZA-Bd1Xl5OXBQ.roa
Signing time: Tue 24 Mar 2026 14:04:38 +0000
ROA not before: Tue 24 Mar 2026 14:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 217.147.167.0/24 maxlen: 24
217.147.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:29:6c:69:17:80:6f:cc:5e:94:20:ab:d1:88:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Mar 24 14:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbb65601a073940059f90640f817755e5e4e5c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:de:ba:c4:fc:25:aa:63:81:69:84:ca:20:
e8:15:f7:e0:3a:82:70:4d:32:87:99:f5:a9:f3:61:
38:d6:66:b5:75:13:a7:a9:62:93:fe:3a:a5:ac:aa:
e4:c1:bf:86:63:8e:41:41:d1:9a:6f:2a:75:11:0a:
a3:e4:e4:90:62:da:f1:29:15:71:bc:50:1a:81:79:
7c:48:5f:cb:a6:9d:e8:48:f9:e2:e2:aa:98:6d:59:
47:9d:e0:39:9b:b9:49:5a:f8:dd:9e:ff:f0:0f:e8:
6e:d5:7b:10:2c:83:e8:47:59:2d:38:23:31:2f:b4:
69:ca:fc:50:8f:08:81:22:47:5d:64:7e:46:2f:42:
fa:73:b8:f5:88:99:54:19:87:a3:45:b5:ee:7b:e5:
a3:6c:0c:58:00:bd:dc:e2:e0:59:34:b3:16:2b:40:
da:c8:f5:e7:3a:12:c1:4d:de:00:ac:29:57:b5:e6:
4f:9a:e6:c6:7f:cc:6a:59:f3:17:8f:4c:26:dc:76:
a2:4c:bd:1a:1e:e8:a7:70:d7:d1:2f:88:3c:3b:9a:
13:0f:be:dd:ef:4f:dd:a7:3a:f7:08:5d:d4:80:9c:
fb:7b:06:19:6b:cc:56:fb:3d:3f:18:9c:b6:bc:95:
1d:c1:f0:a4:3c:ed:02:ba:e8:de:ba:de:70:09:83:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:56:01:A0:73:94:00:59:F9:06:40:F8:17:75:5E:5E:4E:5C:14
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/u7ZWAaBzlABZ-QZA-Bd1Xl5OXBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.167.0-217.147.168.255
Signature Algorithm: sha256WithRSAEncryption
59:8c:1f:f1:45:a6:d9:0c:25:ba:ef:23:7f:96:ac:11:4f:2e:
30:af:36:d6:80:0b:dc:c1:63:aa:06:d0:18:fc:48:4d:12:4d:
8a:f0:0a:b5:78:88:52:46:30:87:fe:c1:3c:4a:bc:2a:d3:2b:
9a:1f:7d:95:d4:63:a0:76:cb:97:2b:7e:e5:59:a5:f6:d1:13:
15:98:24:dd:b2:a7:03:0b:8b:19:83:1e:90:d4:71:66:fa:fe:
f4:ac:b0:77:7b:62:e9:26:21:29:57:0d:b7:d3:eb:56:bf:0b:
3b:31:65:52:00:2d:c0:00:c7:5a:81:93:35:20:1c:1c:8d:f9:
4d:98:07:97:bc:75:2e:38:ef:66:57:78:2c:f0:1b:cc:e7:3a:
14:ec:71:e9:1b:1b:2a:2f:e2:2e:09:23:2a:9a:00:9c:ab:7d:
0a:c3:61:f1:d8:4a:5b:f2:b8:b9:33:b5:a1:d7:45:87:9d:ee:
ff:92:91:3a:90:c6:dc:56:f3:d8:6c:0f:c6:4d:40:56:c3:24:
a2:eb:4f:ee:34:98:22:17:00:b6:28:cf:ca:3d:89:e3:1a:f5:
52:26:ad:5e:e7:13:cf:b5:8b:6d:b1:e4:75:c8:77:63:fa:2d:
c4:61:e4:44:8a:24:03:b3:b3:5b:e9:50:d9:8b:ec:4a:d4:e3:
e5:52:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:23:51 2026 by rpki-client