Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/Z8qE5YUzEyCcM3jZOnTg2ZjRVpw.roa
File: Z8qE5YUzEyCcM3jZOnTg2ZjRVpw.roa (raw, json)
Hash identifier: NyJPpR4fRq7MT3qJBWIBVQGhgw+n4Kp/Bk2plkqWG5w=
Subject key identifier: 67:CA:84:E5:85:33:13:20:9C:33:78:D9:3A:74:E0:D9:98:D1:56:9C
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 01A02032137C88D7E7AF07645866CFFC2C86
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/Z8qE5YUzEyCcM3jZOnTg2ZjRVpw.roa
Signing time: Thu 20 Aug 2026 17:22:27 +0000
ROA not before: Thu 20 Aug 2026 17:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13379
IP address blocks: 157.23.251.0/24 maxlen: 24
157.23.253.0/24 maxlen: 24
2a0e:bbc0:1500::/40 maxlen: 48
2a0e:bbc0:1600::/40 maxlen: 48
2a0e:bbc0:1700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:32:13:7c:88:d7:e7:af:07:64:58:66:cf:fc:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Aug 20 17:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67ca84e5853313209c3378d93a74e0d998d1569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:b1:4f:e4:90:69:7d:c6:b2:f7:b9:77:ec:
f9:0b:63:ac:e8:6f:26:ac:93:dc:46:62:ef:b5:f1:
d9:51:6c:26:76:8e:7e:61:b4:64:ac:6f:b9:7e:0c:
55:db:b3:f4:66:2d:09:38:31:d6:ce:63:32:68:cd:
77:55:e7:77:9a:49:7e:53:66:e3:ad:6e:f5:0a:84:
d8:d4:4a:2f:c0:57:ff:86:3e:1c:ec:95:f5:95:a5:
27:a2:3b:25:df:7e:61:c0:95:96:50:8a:b6:63:f9:
84:8b:1b:25:5c:93:e2:96:dc:d3:c9:f9:42:dc:45:
76:fd:3b:a5:bd:eb:81:a6:ae:1c:99:07:83:5f:f7:
c1:5b:8e:78:63:8b:84:ba:4d:b0:dd:8a:bb:57:35:
ff:ad:3f:e2:2a:60:0b:57:16:62:0d:6d:38:f2:b5:
9d:3e:86:20:33:f7:5a:65:2b:46:f3:06:b2:e8:6a:
d5:e1:7f:b6:7b:e8:99:97:a8:3c:09:98:02:f1:bf:
0f:91:48:80:61:e4:18:b1:92:f2:83:41:d6:f6:43:
4d:4d:2e:8f:e7:70:70:66:4f:3d:32:bb:a1:1d:1f:
5e:fc:f0:55:19:19:8b:fd:2e:32:42:2e:f4:4d:80:
5e:c2:5d:e3:fa:e7:f1:9a:0e:45:cf:73:fc:82:14:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:84:E5:85:33:13:20:9C:33:78:D9:3A:74:E0:D9:98:D1:56:9C
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/Z8qE5YUzEyCcM3jZOnTg2ZjRVpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.251.0/24
157.23.253.0/24
IPv6:
2a0e:bbc0:1500::-2a0e:bbc0:17ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:fb:62:37:27:04:bc:aa:45:89:ca:1b:50:b9:7a:88:74:69:
f6:4d:78:92:1e:a6:d0:2f:e5:0d:64:66:71:cb:f1:ab:b2:9c:
a1:4e:a5:2c:c0:2c:61:89:bf:14:26:43:68:6a:3f:23:86:3d:
7f:49:64:2e:8c:94:83:8a:72:ef:48:a5:6d:9e:cf:03:d8:f4:
d3:ef:1c:8b:b6:3d:7a:0f:ff:d8:be:04:22:27:07:33:fb:14:
c9:e5:07:fc:4a:16:78:7b:9b:e4:15:2a:51:a2:8d:7a:60:4b:
3d:7f:ae:f2:c9:db:90:8f:d3:10:0d:63:db:63:a8:35:8e:8b:
e6:1e:04:65:ea:7e:07:af:7d:fe:3a:02:f3:db:13:98:f2:8b:
07:69:00:c6:28:80:fe:35:97:36:6f:68:57:91:90:b9:bf:d8:
85:83:7b:52:1d:7e:9b:07:ef:c7:23:51:98:3a:ae:39:13:3f:
49:41:06:33:68:f4:4b:42:36:39:21:a6:48:07:54:a9:a0:05:
ff:51:7a:99:d4:f4:5d:39:85:b8:9e:af:8f:55:62:e0:e3:91:
37:22:1d:cd:ec:e0:75:48:17:aa:1a:c1:45:85:7d:6d:47:83:
ed:9c:dd:47:72:0a:c2:1e:68:cd:93:ba:6b:f2:ff:4c:57:12:
4a:e5:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:57:15 2026 by rpki-client