Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/0ZBaxsRuFuLvDM9Zab8lEIUBRiA.roa
File: 0ZBaxsRuFuLvDM9Zab8lEIUBRiA.roa (raw, json)
Hash identifier: kstJet361baMNTD+/HClBmRUoGqWDXMhiuwcosanoZU=
Subject key identifier: D1:90:5A:C6:C4:6E:16:E2:EF:0C:CF:59:69:BF:25:10:85:01:46:20
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019D8C6BFBDAD46B2EE95920FE0652104A98
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/0ZBaxsRuFuLvDM9Zab8lEIUBRiA.roa
Signing time: Tue 14 Apr 2026 14:36:20 +0000
ROA not before: Tue 14 Apr 2026 14:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 157.97.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:6b:fb:da:d4:6b:2e:e9:59:20:fe:06:52:10:4a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Apr 14 14:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1905ac6c46e16e2ef0ccf5969bf251085014620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:85:be:3c:1f:b2:50:b2:88:06:39:37:1a:
7e:cb:e5:a6:b8:35:43:b6:0e:0d:75:71:e4:7a:c8:
ff:a6:7f:cd:d1:b8:d3:85:c2:84:8f:dd:2e:d2:3d:
1a:0f:2c:12:cd:a7:5f:7d:13:7c:fd:6a:b9:65:88:
28:98:25:19:2f:d6:d5:7a:6e:ff:19:08:44:de:78:
d3:96:46:cd:6d:d4:cf:d8:57:9f:78:68:52:cd:45:
51:a0:19:27:c1:7b:0b:49:b6:ec:6f:66:4d:6b:48:
f0:b4:4f:4b:4c:64:ce:0a:9c:95:be:60:a6:a2:e9:
75:1d:59:82:dd:44:7b:df:32:74:c2:75:68:e1:7e:
95:3b:0d:77:2c:4e:51:52:da:ed:2e:31:e4:22:2a:
cf:eb:9c:03:4d:cb:66:af:a1:94:41:46:3d:a9:c3:
d1:17:f0:de:dc:aa:db:d7:95:32:9f:4b:cb:62:24:
d3:2d:1d:0c:1a:18:97:0d:da:90:ac:84:e5:93:16:
63:5c:3f:2a:12:35:79:f1:2b:e5:00:c3:0c:56:eb:
b1:5c:7d:01:b3:45:3a:4e:2a:48:7c:77:3e:ac:ea:
09:c4:9b:34:3d:c0:88:11:2b:89:b6:b6:3b:15:e1:
88:8c:4e:1e:17:f3:a8:be:f4:0c:c5:08:7d:d6:7b:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:5A:C6:C4:6E:16:E2:EF:0C:CF:59:69:BF:25:10:85:01:46:20
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/0ZBaxsRuFuLvDM9Zab8lEIUBRiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.122.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a3:92:4c:8c:a0:48:d8:82:e3:ba:79:dc:24:d0:61:31:f9:
06:8f:a5:33:c3:04:ef:4f:d9:1e:9e:1b:5a:e9:24:7e:af:88:
6b:a6:62:58:56:2c:b0:18:0e:4d:e6:e0:9d:66:c8:df:38:f6:
98:8a:92:bf:49:eb:68:80:0c:8b:27:78:92:86:e8:37:60:7b:
a2:e9:80:7e:b9:3c:19:a4:57:75:1b:5d:21:65:1e:e7:57:82:
35:44:2f:7a:e4:f1:33:34:9b:18:90:79:f8:c0:78:a8:78:3b:
04:ca:92:b8:bc:78:89:91:85:00:07:81:fe:3b:cb:c4:3f:6c:
83:73:d6:5c:a7:83:0c:3b:83:be:bb:01:4c:a8:bf:08:e2:3e:
12:63:bd:36:b1:ce:bc:fd:76:fa:ef:b3:88:81:68:be:63:da:
7f:fc:15:02:d1:12:fe:f7:09:7c:9c:72:38:ec:d5:be:bd:6e:
1e:ed:29:6d:00:72:b7:6d:d1:2f:88:c6:97:e2:da:3e:06:b6:
a5:ad:45:dd:21:af:44:53:1d:b0:5d:9f:b2:fd:72:30:e4:59:
9b:5d:b3:b1:6c:15:c8:aa:bb:39:39:17:ab:d7:db:4e:0c:5e:
89:58:84:5c:04:64:b4:d1:48:e9:b4:71:6d:5f:07:e4:a0:2a:
8b:2d:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:13 2026 by rpki-client