Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/1-ZsRWNvdt3D8wn8sI2L1WODnkqM.roa
File: 1-ZsRWNvdt3D8wn8sI2L1WODnkqM.roa (raw, json)
Hash identifier: 6Eum4e6s1YywQEdj8irMXAzstfAffIT89qs3aZzQIj0=
Subject key identifier: F9:9B:11:58:DB:DD:B7:70:FC:C2:7F:2C:23:62:F5:58:E0:E7:92:A3
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01A159D8AA8D884D4187847A94201F8AA178
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/1-ZsRWNvdt3D8wn8sI2L1WODnkqM.roa
Signing time: Tue 20 Oct 2026 15:05:34 +0000
ROA not before: Tue 20 Oct 2026 15:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 153.63.132.0/22 maxlen: 22
153.63.140.0/22 maxlen: 22
153.63.156.0/22 maxlen: 22
153.63.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d8:aa:8d:88:4d:41:87:84:7a:94:20:1f:8a:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Oct 20 15:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f99b1158dbddb770fcc27f2c2362f558e0e792a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:d5:70:bc:9f:e2:4e:da:f5:c9:30:2e:6a:
e5:cc:5a:ac:89:8e:23:02:f0:9d:b0:91:8b:5a:a7:
dc:d4:51:da:8e:cd:7a:fd:ba:66:ce:5c:9a:6c:fe:
67:fc:80:0a:9e:2e:ae:eb:e5:29:90:f4:83:9b:47:
1a:c4:ea:a8:7d:ae:1b:eb:84:aa:73:cc:85:99:f8:
43:59:d3:0d:07:f4:f9:3e:a4:d8:f5:58:24:26:bc:
16:13:0a:04:a9:02:71:a7:c7:75:24:ce:8c:4c:75:
c6:17:71:6d:8e:31:b0:8b:4d:f0:c7:b5:89:57:4c:
96:b6:08:cc:3e:cf:4b:16:38:5f:6a:dc:96:09:2e:
c7:fe:ee:49:ff:0a:ac:7c:3e:59:61:f4:c2:87:8e:
be:68:1a:c0:7b:d3:40:b2:f2:b4:f3:60:95:9b:25:
b1:9e:0c:35:ac:9c:8f:3f:db:91:3f:2d:f1:ff:2c:
1f:7d:e2:d5:4c:7f:53:cb:d1:02:0f:02:47:39:8f:
90:cc:33:b2:17:49:53:e3:7f:24:d5:98:13:49:d5:
7c:01:87:07:7d:d0:45:a6:0d:4a:d9:91:09:cb:ba:
1b:be:99:4a:3b:78:30:54:e0:66:60:71:df:07:d6:
d8:5b:b2:5d:11:c3:13:c0:70:6b:c2:dd:d0:79:1f:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9B:11:58:DB:DD:B7:70:FC:C2:7F:2C:23:62:F5:58:E0:E7:92:A3
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/1-ZsRWNvdt3D8wn8sI2L1WODnkqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.63.132.0/22
153.63.140.0/22
153.63.156.0/22
153.63.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:35:ed:02:09:33:ed:3f:93:60:9a:3b:c6:0f:5a:26:50:0f:
a7:fb:82:50:c5:c3:d2:f2:18:3a:5c:66:1c:d2:f4:2d:c9:9d:
88:e3:31:3d:49:9a:76:cf:2d:fe:ee:43:56:8d:4f:54:fe:44:
1a:02:cc:b0:7c:de:4d:a0:79:69:f2:ec:92:8b:27:a2:e8:e7:
c5:94:5f:1d:2d:fe:c8:42:09:46:21:e8:ab:f3:3a:11:4e:67:
ab:d0:4e:9c:aa:dc:65:1b:7b:8a:ad:78:7a:72:f3:bb:57:d3:
04:65:00:db:bb:cf:2c:6f:1d:38:50:e0:59:c7:74:72:fd:6e:
a3:62:00:49:e6:24:6e:63:44:9f:3a:6b:75:e9:14:b0:5b:64:
67:85:fc:c9:9d:9c:dd:e9:ae:f3:20:6e:62:6c:e3:e7:ed:17:
6d:e7:46:b9:b6:ac:66:35:ca:20:47:ab:4a:d4:d8:05:d5:82:
86:01:2b:b6:49:28:5d:7d:e6:60:f8:38:9c:00:aa:81:19:2f:
bb:9a:a0:5c:72:c0:27:78:cb:0f:b0:60:22:62:7d:39:51:02:
46:2f:19:8a:81:8e:d8:7b:a1:6b:d6:7d:ab:c3:81:ab:ae:78:
1a:64:d4:c8:4d:c9:e3:d9:d5:7c:10:33:a8:16:a5:01:28:b9:
ea:aa:be:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:20 2026 by rpki-client