Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa
File: B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa (raw, json)
Hash identifier: AH8e1SFxP7mwVEgpLVC0rJF7pyGIB69p63iAMsbetvc=
Subject key identifier: 07:5C:F8:C6:84:71:67:88:75:9E:E4:14:ED:F8:86:1C:8B:AC:99:CB
Certificate issuer: /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial: 019F2368D3FBB560A02CDCC0C455A492792E
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207754
IP address blocks: 194.99.65.0/24 maxlen: 24
2a14:a900::/29 maxlen: 32
2a14:a900::/32 maxlen: 32
2a14:a900::/48 maxlen: 48
2a14:a900:e7f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d3:fb:b5:60:a0:2c:dc:c0:c4:55:a4:92:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=075cf8c684716788759ee414edf8861c8bac99cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:17:f3:00:e1:89:89:c5:37:60:ac:7d:b9:
f9:bc:9a:57:87:56:22:ae:be:ef:77:99:c2:c5:28:
3a:8e:56:f5:3f:df:86:c7:fa:39:8c:32:08:3b:fb:
20:0f:61:e7:f5:c1:a7:95:ee:dc:aa:72:95:d5:2e:
3f:bb:ef:5b:ab:77:41:91:35:73:ad:ad:21:6b:8f:
0e:f2:85:b6:2c:57:13:7c:7c:f5:d5:6a:d3:32:b0:
a4:b9:b4:92:05:4b:78:7a:cb:61:98:26:20:0b:e7:
fb:c2:a2:0a:49:98:ba:b9:d1:34:0e:52:13:82:f5:
99:59:5b:b3:79:59:d1:78:21:5f:46:81:b3:c6:11:
9c:55:64:e7:0c:64:a7:be:d6:b3:75:b0:db:7e:aa:
fe:e9:70:c8:3d:a0:52:12:10:e6:9e:a4:91:8e:be:
95:59:ea:ae:50:b0:8a:d7:29:fa:c8:f0:37:a6:19:
c3:2a:f0:99:42:eb:dc:10:ae:9f:b1:a8:62:f9:e0:
ac:d1:f3:d9:2d:fd:70:ff:d7:69:36:9e:56:31:69:
50:6a:14:f9:17:96:df:f3:ea:e7:77:3e:fb:44:55:
c0:9d:32:b2:5f:01:88:9d:fd:a6:bd:94:49:0e:96:
e8:0f:cf:02:0d:47:a5:57:be:cd:a3:e7:bf:5c:41:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5C:F8:C6:84:71:67:88:75:9E:E4:14:ED:F8:86:1C:8B:AC:99:CB
X509v3 Authority Key Identifier:
keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.65.0/24
IPv6:
2a14:a900::/29
Signature Algorithm: sha256WithRSAEncryption
46:ea:04:ae:87:30:af:03:8f:0f:24:49:11:06:43:59:9c:71:
3c:27:81:e7:f0:15:01:cc:5d:e3:31:0e:b9:ab:97:0d:cf:15:
3c:e9:dd:c1:cb:13:aa:ae:6e:9c:33:5f:07:98:19:a3:40:6c:
ec:6c:30:e2:1c:ea:ec:96:4d:c0:a0:f8:6d:dc:e0:68:fa:c4:
c0:ed:82:b0:cf:18:66:9d:0a:eb:f2:88:24:4d:1b:67:d3:46:
c8:2d:d4:49:3f:09:44:f0:f1:94:57:70:af:45:6b:dc:50:6f:
e9:72:5b:b7:a2:d0:f3:62:35:4e:85:0a:64:77:cf:d0:b8:62:
7c:58:63:33:c5:c3:66:a4:7a:73:72:72:4b:da:72:83:ec:f4:
5a:fe:3c:d3:52:90:5d:3a:4f:3b:4c:c1:9e:e1:f2:e8:d7:90:
2f:e6:ae:fc:1d:e5:65:7a:17:2e:c7:ba:8c:0f:6b:e9:88:73:
d5:1e:0a:f4:e5:68:9f:14:f5:3c:47:85:2e:09:21:5b:8e:fb:
71:96:2d:1c:02:42:96:ec:96:c5:73:4f:26:4c:47:34:0e:31:
6b:f7:3a:ab:8b:54:34:6d:b1:76:02:4b:e6:b7:dc:d3:3d:6a:
b8:84:7b:63:1c:25:d9:17:a5:ca:45:9c:79:d3:ca:7e:52:7e:
27:67:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:00:59 2026 by rpki-client