Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Cz0osyW-7HPy2q8AAnhtv4l67FI.roa
File: Cz0osyW-7HPy2q8AAnhtv4l67FI.roa (raw, json)
Hash identifier: W4dvatF/b3t/YMa+Ug9B9hDcCU45zavF2lzIWkJJDmg=
Subject key identifier: 0B:3D:28:B3:25:BE:EC:73:F2:DA:AF:00:02:78:6D:BF:89:7A:EC:52
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019DED6986DDE431C292B64C3018E50E1F18
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Cz0osyW-7HPy2q8AAnhtv4l67FI.roa
Signing time: Sun 03 May 2026 10:36:49 +0000
ROA not before: Sun 03 May 2026 10:36:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 213.145.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:69:86:dd:e4:31:c2:92:b6:4c:30:18:e5:0e:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 3 10:36:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b3d28b325beec73f2daaf0002786dbf897aec52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:84:6a:57:9e:8d:f3:7b:4f:d9:0c:95:24:
2f:45:3b:c6:93:d3:12:82:3e:b6:d5:d1:4b:ec:98:
3a:11:88:23:22:56:b7:98:37:b5:bf:f5:cb:d4:f1:
8e:a8:04:c2:07:7b:32:e0:5e:68:b1:08:d3:af:8d:
13:bb:1f:d3:26:ed:e4:79:0b:f2:ad:c5:13:5f:b8:
ea:cf:f8:f4:fb:1e:e3:6e:49:01:00:18:ea:a5:0d:
fc:f7:f2:cc:06:70:1f:f0:6d:20:81:d9:0d:07:ef:
bf:04:f7:cc:cf:4d:2c:61:63:67:6d:b7:23:be:cb:
78:56:5f:78:db:d9:35:8d:8b:c2:6c:df:3b:09:9c:
9b:d7:cc:49:4a:4b:95:5e:96:a8:db:ee:2b:9f:f1:
a3:b4:74:df:a1:f6:11:5f:76:6c:ae:09:54:eb:69:
56:c2:4e:d1:08:b7:7b:42:17:90:9c:75:ce:98:d2:
5f:d7:aa:37:df:27:80:be:22:56:49:02:e3:e1:0f:
70:d3:28:b4:44:b4:1f:c6:99:9f:f3:4f:af:8e:35:
94:59:69:4b:cc:7e:63:31:1c:99:5c:34:0c:43:3c:
ed:b8:6a:6f:ae:7e:b6:82:4c:41:80:60:54:68:72:
93:6a:be:2d:fe:92:26:cb:58:83:b1:27:31:be:56:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3D:28:B3:25:BE:EC:73:F2:DA:AF:00:02:78:6D:BF:89:7A:EC:52
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Cz0osyW-7HPy2q8AAnhtv4l67FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:00:70:fb:e5:d2:37:46:38:a4:bc:c6:13:66:f8:6d:05:ba:
54:93:97:c1:09:78:a6:17:9f:40:ea:61:8c:5d:1d:36:73:ef:
b7:13:03:25:d4:2b:5d:0a:64:67:0d:c8:42:65:e7:5d:f6:12:
b0:23:63:ff:a3:85:c7:ed:b8:43:da:00:eb:c8:df:52:c0:c0:
ec:f6:87:10:b5:8a:8e:01:aa:ca:31:06:48:6f:25:68:ee:08:
ee:42:7f:cd:a3:25:0d:43:2e:80:6a:62:4e:14:ff:4a:27:95:
f1:65:d7:f9:2a:0a:2e:07:60:41:ec:de:8b:e1:6a:91:ec:9b:
8b:93:ec:44:b6:aa:dc:ae:3f:0f:af:d9:c2:03:98:76:3d:32:
3b:ec:11:94:49:e1:f3:36:5c:f9:e2:e6:51:b5:35:98:b8:b0:
5d:e2:13:a1:f3:17:cf:56:29:94:e4:12:b4:63:93:ef:98:f0:
67:cd:a6:8d:1d:ec:55:90:16:17:56:6a:10:9b:d0:23:4e:13:
d3:fb:2c:d6:f5:53:a9:5f:08:1f:39:6d:96:6a:11:db:9f:1e:
8b:41:87:2a:fc:b7:88:17:05:78:94:07:e5:c6:c2:c6:79:0a:
90:78:fb:9c:9d:ea:49:e8:bb:32:22:a5:38:9a:37:02:e1:43:
c4:18:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:43 2026 by rpki-client