Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/vZuspMqoseBbPHNG2fmOMxJAoRk.roa
File: vZuspMqoseBbPHNG2fmOMxJAoRk.roa (raw, json)
Hash identifier: O8Akdsdgsu3O3BLQ4nDzeqQ7DRsdv1T4urleIjReCIs=
Subject key identifier: BD:9B:AC:A4:CA:A8:B1:E0:5B:3C:73:46:D9:F9:8E:33:12:40:A1:19
Certificate issuer: /CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Certificate serial: 019F2368D044E84602BBDC69092131405B92
Authority key identifier: A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/vZuspMqoseBbPHNG2fmOMxJAoRk.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211071
IP address blocks: 137.83.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d0:44:e8:46:02:bb:dc:69:09:21:31:40:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd9baca4caa8b1e05b3c7346d9f98e331240a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:b9:d5:a0:b4:73:01:60:38:22:34:24:8e:
34:b3:32:49:8f:3e:b5:5f:c7:c5:7c:b4:d7:96:a7:
ec:57:47:0d:9b:b4:a7:2e:ff:83:e8:b9:99:46:30:
8e:85:aa:19:5b:a7:47:b2:fb:fb:21:58:b2:bf:11:
cc:d8:8a:24:fa:53:69:db:0a:0e:8c:ce:9b:89:56:
65:80:d9:a9:03:2d:2f:12:5f:9c:0a:6a:85:0e:f1:
fc:b9:d6:ee:f5:2f:11:34:cf:f4:f8:60:19:8a:40:
7d:1f:f9:e0:08:a9:a4:cd:d1:9f:af:a0:51:1f:07:
70:4a:7d:9b:f4:03:17:29:20:3f:04:d5:86:13:50:
f2:cc:3a:3f:a2:4b:47:9a:61:5b:73:60:62:15:09:
39:2e:18:e0:0b:e5:f5:4c:1a:e5:e6:8d:31:ce:c9:
e4:b1:3b:8e:1d:93:87:21:25:3f:73:0b:f3:50:cc:
b7:28:1d:f9:31:b5:b5:15:56:1a:ad:59:e4:8d:fe:
03:dc:6a:ca:aa:66:58:a9:dc:f2:27:5d:44:10:c1:
31:31:7a:fc:44:d0:67:40:2c:56:4c:e9:4f:f6:de:
48:f2:08:27:8c:90:45:5b:9f:8a:31:d5:e6:49:ce:
48:53:e3:e5:38:38:b2:a4:e8:3c:62:fa:4e:65:02:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:AC:A4:CA:A8:B1:E0:5B:3C:73:46:D9:F9:8E:33:12:40:A1:19
X509v3 Authority Key Identifier:
keyid:A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/vZuspMqoseBbPHNG2fmOMxJAoRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.83.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a8:33:37:78:f6:0f:6c:dc:d5:ec:cc:25:24:43:8a:7b:ed:
2e:27:30:d8:40:ac:5b:d3:f2:fe:9b:58:f2:d2:bf:97:6d:c7:
86:60:06:9d:3d:57:8f:d2:fe:b7:3e:40:80:3f:65:92:c5:cb:
62:02:0f:17:29:2e:b3:eb:b3:25:ac:7f:87:49:fe:70:9e:b6:
1f:b9:0c:aa:7a:91:41:54:9b:f8:57:e5:93:8e:f4:d3:4f:de:
eb:76:e4:17:f3:4a:78:5e:3b:81:79:54:bf:a4:70:fe:91:94:
ab:3b:8e:3a:a4:bb:51:9e:88:14:b1:e0:d1:7d:8b:77:ce:d2:
0d:a8:02:63:2c:c3:f1:fd:27:fb:34:4c:e9:2a:28:9e:85:e3:
ee:d8:ba:ca:b9:7f:41:58:cc:2e:1a:35:5c:5e:dd:04:fc:8e:
81:5f:93:6b:d9:85:8c:a8:8c:05:64:36:8a:d4:86:31:6b:ea:
b1:cf:28:b6:68:e7:88:14:95:63:76:53:eb:58:6f:12:eb:75:
55:ee:88:28:b4:e1:f5:66:28:e2:5d:50:25:0a:44:f4:eb:13:
c7:6a:02:3d:49:7b:3c:c7:a9:fb:89:70:94:9c:f3:0e:a8:ee:
f8:a5:2f:fb:0f:4d:ee:87:cb:7c:ca:13:0b:1d:89:90:89:68:
2d:97:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:10 2026 by rpki-client