Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/iz6H1ZCD2HQkbI3iycWGNl4m8ko.roa
File: iz6H1ZCD2HQkbI3iycWGNl4m8ko.roa (raw, json)
Hash identifier: Bg8lotV37nzdSO1p2B8HlIju7cM6vDj8KLbRXCZGkQ8=
Subject key identifier: 8B:3E:87:D5:90:83:D8:74:24:6C:8D:E2:C9:C5:86:36:5E:26:F2:4A
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019C6881F3BE064B52614A2AAFF59B57A6E4
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/iz6H1ZCD2HQkbI3iycWGNl4m8ko.roa
Signing time: Mon 16 Feb 2026 22:11:12 +0000
ROA not before: Mon 16 Feb 2026 22:11:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.145.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:81:f3:be:06:4b:52:61:4a:2a:af:f5:9b:57:a6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Feb 16 22:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b3e87d59083d874246c8de2c9c586365e26f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:da:62:c8:8b:51:06:6c:68:87:05:a8:b6:
80:c4:d6:ea:de:1b:2a:17:fa:21:f6:34:12:74:b0:
48:d0:d0:5a:f0:71:15:48:39:43:a7:e4:a4:f3:aa:
43:c1:30:2c:aa:4e:2d:69:82:43:52:3f:19:7b:10:
f9:4b:6f:a3:90:06:77:47:95:73:50:38:f9:55:10:
68:da:76:7a:94:f2:45:ae:78:cd:3a:ce:b1:23:fc:
fb:11:8c:a2:9a:22:b0:27:17:fc:ee:b4:6c:69:01:
c0:95:46:78:03:c9:38:bf:c1:b4:bd:25:b6:f7:29:
f8:19:e7:27:e0:7e:cb:d4:fb:e3:fe:a5:99:46:6e:
d4:7c:6f:b6:05:fd:35:d1:eb:33:88:a9:7e:be:9f:
d4:99:2d:6a:7f:ed:76:9f:91:89:e5:80:28:bf:9b:
58:43:c7:63:1e:57:cf:09:c9:88:38:65:d7:b7:74:
29:46:a9:e3:8e:4a:f1:2c:cc:9c:ad:23:54:0f:95:
45:44:af:6f:6e:9b:b7:e2:b1:67:39:b1:72:b6:44:
a6:0f:9c:e1:b9:37:9e:03:7f:9c:9e:59:b3:f5:40:
ec:2f:68:25:38:27:c9:78:83:9b:84:2a:81:4f:8b:
66:a7:de:a7:1d:67:d9:e5:dd:34:c2:9e:ad:d2:21:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3E:87:D5:90:83:D8:74:24:6C:8D:E2:C9:C5:86:36:5E:26:F2:4A
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/iz6H1ZCD2HQkbI3iycWGNl4m8ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a3:b0:1d:84:d6:1c:f9:28:20:32:5b:83:5f:51:80:25:ba:
af:54:3f:d7:b6:1c:0c:ac:bd:26:64:f7:68:48:83:ea:a8:22:
6f:9a:44:b0:29:cd:63:b0:13:41:96:94:dd:12:fe:84:44:36:
9a:fa:f2:c7:7c:e5:bc:0e:ac:17:e3:34:3d:76:6e:48:79:e2:
e8:cc:d6:76:99:49:fb:44:5c:f2:7c:54:dd:ef:b8:e5:65:e8:
10:dd:1e:b2:80:2d:9e:d0:6b:16:38:da:61:c2:72:25:78:ed:
1f:ed:67:f0:45:84:62:ed:a7:84:6b:a5:45:5b:22:c4:2c:1a:
36:8f:76:3d:9c:a9:85:df:e5:b1:11:db:fe:99:e1:1a:62:8d:
3f:66:a8:4f:da:04:08:4a:6a:1b:68:2b:f0:4a:79:15:bf:06:
de:ab:19:c5:dc:2a:49:a7:21:96:fa:74:fa:6a:0d:6c:50:f9:
4e:8e:57:64:be:de:b1:b1:ad:bd:18:05:71:b5:e1:ea:62:f6:
c5:0b:e6:b0:92:8d:22:29:81:01:6d:49:81:21:93:fa:ac:cf:
2e:bb:49:81:3d:5b:6b:37:4b:66:6b:6e:54:e3:0b:18:98:f8:
0b:0b:a3:a5:66:71:e9:5f:e0:8b:5e:6e:71:a8:9b:e2:2c:d5:
ec:5c:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:02 2026 by rpki-client