Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/FaZ0cLgTBZNcBwPe27HVLy0g3uQ.roa
File: FaZ0cLgTBZNcBwPe27HVLy0g3uQ.roa (raw, json)
Hash identifier: UEgljiMrAQpcRRhA4Pac+ms+SkFVsWGJ6bxNZbKxlps=
Subject key identifier: 15:A6:74:70:B8:13:05:93:5C:07:03:DE:DB:B1:D5:2F:2D:20:DE:E4
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 01A0610A9C6BA1F0D7A982384175010A6958
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/FaZ0cLgTBZNcBwPe27HVLy0g3uQ.roa
Signing time: Wed 02 Sep 2026 07:34:40 +0000
ROA not before: Wed 02 Sep 2026 07:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31331
IP address blocks: 83.150.160.0/20 maxlen: 20
83.150.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:0a:9c:6b:a1:f0:d7:a9:82:38:41:75:01:0a:69:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Sep 2 07:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a67470b81305935c0703dedbb1d52f2d20dee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:8a:cb:ac:f4:71:18:70:e1:59:ec:19:fc:
cf:b6:d7:9c:d6:aa:89:85:40:76:76:24:ed:9f:8b:
9c:8a:81:f2:60:a9:9e:70:1c:96:f6:7d:34:17:ed:
4e:4b:50:dc:d5:70:a2:0c:ee:54:1c:75:31:55:02:
5b:7f:ef:d3:ab:d3:19:b0:d9:8f:8d:f6:dc:5c:05:
8c:a1:80:d8:f0:74:36:8c:0c:84:f8:9d:d4:b8:2e:
4e:35:7a:9f:0a:d2:06:ff:3e:99:15:72:9c:37:b6:
c4:2e:4a:1a:f3:30:f3:d1:52:6f:3b:24:44:b7:d4:
26:4c:36:79:17:1a:42:4b:68:38:fb:83:17:76:ba:
66:a0:ce:56:71:4a:33:d1:d4:24:9c:d8:b8:0f:e8:
2c:9f:65:5c:da:f2:2c:3a:a3:f5:df:62:21:1a:ea:
4d:f6:24:c9:2e:6a:04:85:c9:68:8d:12:f5:d5:75:
7d:e3:85:dc:ed:82:7f:3a:03:89:cd:6d:a3:73:d6:
0b:10:1f:5a:59:75:24:d1:38:f6:58:f3:b0:46:87:
9b:6e:53:aa:38:00:d1:aa:8b:e2:c1:9c:a9:fb:9a:
23:06:ea:e8:0f:22:87:e8:cf:31:50:6b:96:a7:5c:
72:ea:d6:0b:d6:19:14:10:c8:1d:14:5d:d3:8f:8f:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A6:74:70:B8:13:05:93:5C:07:03:DE:DB:B1:D5:2F:2D:20:DE:E4
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/FaZ0cLgTBZNcBwPe27HVLy0g3uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.160.0/20
83.150.184.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:7a:66:7d:17:8f:42:d4:7d:60:92:05:57:09:da:a7:d7:dc:
fd:72:8f:6b:ba:74:07:b3:07:74:11:85:53:b4:26:35:b5:1c:
3a:ef:19:e3:fc:f3:6c:2d:0e:f8:08:4e:f9:ce:0a:ab:77:11:
24:4d:7a:06:0d:90:bb:72:fe:2f:0f:65:d9:5a:11:27:99:7d:
1c:64:0c:17:79:17:04:3e:d0:c9:9c:05:2c:39:fa:81:f5:62:
78:30:1d:0e:19:12:54:26:f8:cd:69:d9:96:49:c3:dd:2a:76:
08:eb:88:53:38:4c:c8:dc:27:88:90:93:34:f6:da:76:c8:ab:
12:2b:cf:fb:e3:a0:04:b2:88:03:63:c2:c7:f4:8f:07:3e:dc:
e4:52:c7:bc:09:19:86:87:cf:8b:86:cb:b9:0d:fa:5b:7b:c2:
54:a4:27:14:af:c1:15:08:bf:be:ab:f7:af:84:a7:14:e5:12:
2e:e6:fd:73:87:ae:3b:70:62:d4:d4:32:bf:25:34:93:cc:b6:
96:c7:aa:58:ca:0c:14:e2:2e:8d:b7:5b:bc:78:db:97:e3:0b:
57:2f:cb:7a:c4:cb:60:11:c0:95:7d:cc:b7:9d:92:fc:8e:19:
fe:89:2b:63:65:bb:59:3a:bf:1f:c3:8b:2b:cc:a2:7a:4c:fd:
00:2f:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:26 2026 by rpki-client