Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IZkWgO530SAk2ozoxHQ1jsIF9bY.roa
File: IZkWgO530SAk2ozoxHQ1jsIF9bY.roa (raw, json)
Hash identifier: 86KaPASEo3vwl/lMRlJsOiIOUIktDQM8egjgXwEBDu8=
Subject key identifier: 21:99:16:80:EE:77:D1:20:24:DA:8C:E8:C4:74:35:8E:C2:05:F5:B6
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D2497C447726738F391553BF26B85B8B2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IZkWgO530SAk2ozoxHQ1jsIF9bY.roa
Signing time: Wed 25 Mar 2026 10:43:39 +0000
ROA not before: Wed 25 Mar 2026 10:43:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39328
IP address blocks: 206.203.8.0/21 maxlen: 21
206.203.8.0/22 maxlen: 22
206.203.8.0/23 maxlen: 23
206.203.8.0/24 maxlen: 24
206.203.9.0/24 maxlen: 24
206.203.10.0/23 maxlen: 23
206.203.10.0/24 maxlen: 24
206.203.11.0/24 maxlen: 24
206.203.12.0/22 maxlen: 22
206.203.12.0/23 maxlen: 23
206.203.12.0/24 maxlen: 24
206.203.13.0/24 maxlen: 24
206.203.14.0/23 maxlen: 23
206.203.14.0/24 maxlen: 24
206.203.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:97:c4:47:72:67:38:f3:91:55:3b:f2:6b:85:b8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 25 10:43:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21991680ee77d12024da8ce8c474358ec205f5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:22:4e:70:b0:73:26:f9:81:9a:0d:ba:4c:
00:75:25:f7:5d:58:68:85:68:44:d6:e4:88:ae:b1:
b2:d9:54:f4:de:6e:60:b0:c4:b5:db:bf:17:7e:b6:
5a:94:61:da:79:68:87:c2:a3:28:00:36:86:72:47:
98:cc:bb:3d:41:fb:32:13:a6:55:fe:b2:58:df:c9:
88:5e:1e:45:44:de:55:45:9f:44:ea:d4:a6:df:f8:
09:4a:f0:70:7e:63:37:cd:f3:df:71:68:9e:ee:42:
49:c0:8b:24:61:4c:f2:ef:98:c0:51:7c:78:02:45:
33:0c:e9:ac:42:6e:85:64:23:20:1f:58:52:dc:eb:
f9:e5:02:89:b5:66:5e:0d:18:b4:91:99:dd:8c:03:
71:6a:36:b3:a9:09:b5:e7:19:1b:89:84:2c:83:d5:
f7:b8:32:bb:f7:a8:4b:81:d4:e6:ba:00:dd:b4:b7:
2f:ae:d4:06:b4:02:f9:4a:a2:6e:55:f6:08:39:4a:
ff:ce:a1:67:6a:ea:72:d3:ea:86:88:2e:c1:cc:e9:
48:68:cf:89:10:c5:db:61:0c:f1:72:f7:46:09:c4:
a0:27:ec:15:aa:be:8b:85:30:ee:cd:40:be:db:27:
b2:3c:e1:b1:6e:4f:07:22:68:0b:b0:a9:76:fc:dd:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:16:80:EE:77:D1:20:24:DA:8C:E8:C4:74:35:8E:C2:05:F5:B6
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IZkWgO530SAk2ozoxHQ1jsIF9bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.203.8.0/21
Signature Algorithm: sha256WithRSAEncryption
66:80:73:91:c5:49:d1:73:da:fa:bb:e2:cb:ba:12:1b:ef:04:
52:6f:06:34:b3:f0:46:16:18:4a:02:c5:1a:51:c9:c3:0b:ce:
72:56:20:88:f1:24:18:9a:ef:05:fd:02:2c:8a:97:2a:19:56:
8b:ea:b9:65:3f:e9:3f:fb:aa:aa:bf:9a:96:5c:48:4c:99:e9:
c3:3d:9f:3f:81:a7:6d:5c:72:e7:d9:eb:14:61:93:8f:62:49:
79:a9:48:42:58:76:49:2c:bd:e1:48:fe:43:3f:6a:01:0b:e7:
bc:be:e0:b7:05:75:13:e4:f3:c1:68:60:ad:21:81:07:88:f8:
7f:dd:18:b0:b7:66:97:fa:7e:d1:9a:0e:d2:0a:18:16:6a:8e:
52:80:ab:4f:63:46:75:fa:ea:ae:c8:34:4a:f7:02:4f:43:02:
f1:4c:10:9c:f2:88:1d:09:ff:ce:82:ad:ab:29:50:bf:a4:6e:
f0:da:f5:bc:61:2b:0a:8f:2c:c1:6d:b3:07:01:30:b2:da:21:
72:84:07:12:4f:af:bd:31:65:54:9c:01:b1:b6:bc:34:f3:a1:
4e:a8:1d:33:9a:4c:15:e4:6c:1e:6a:3f:97:da:d0:49:3f:cf:
67:11:26:19:7c:09:b4:95:b1:c5:b2:c0:ed:24:84:f8:27:c3:
65:96:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:18 2026 by rpki-client