Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/BzYrqoWzq2UjpYzNUeYZ2Chi4-k.roa
File: BzYrqoWzq2UjpYzNUeYZ2Chi4-k.roa (raw, json)
Hash identifier: tFHL2cY9PeULi8ZDCk/uw0VBy3o/s60co/X817DhH08=
Subject key identifier: 07:36:2B:AA:85:B3:AB:65:23:A5:8C:CD:51:E6:19:D8:28:62:E3:E9
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 01A10BD5FFB76CA76B411AD277002F7E30E6
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/BzYrqoWzq2UjpYzNUeYZ2Chi4-k.roa
Signing time: Mon 05 Oct 2026 11:32:16 +0000
ROA not before: Mon 05 Oct 2026 11:32:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205097
IP address blocks: 194.44.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:d5:ff:b7:6c:a7:6b:41:1a:d2:77:00:2f:7e:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Oct 5 11:32:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07362baa85b3ab6523a58ccd51e619d82862e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:85:2c:f7:6b:ee:db:10:b4:3c:aa:64:a1:
6c:cf:d2:ab:cb:12:40:93:bf:bc:14:d8:4d:8b:12:
bf:00:58:f4:f4:e0:61:4e:1a:81:bc:db:e0:5a:44:
58:91:fd:e3:44:48:55:6a:cb:b8:75:dc:34:36:95:
08:66:3e:60:de:6b:aa:94:30:ab:eb:b0:e7:35:20:
31:1d:71:3f:c6:22:b9:be:41:13:6c:53:ea:ba:bd:
e1:d1:94:00:ab:34:36:13:77:20:9e:34:8b:ef:ff:
c2:d5:3b:5a:d8:1a:d9:28:74:43:67:b1:0d:3b:06:
2c:64:4d:91:fa:33:92:5a:dc:e8:37:6e:41:4b:3d:
d6:a1:5e:e3:21:b1:1a:8b:79:18:38:9e:13:16:48:
f9:a9:34:71:c0:53:b3:a2:2d:5d:2b:03:cc:39:8f:
24:b7:47:2e:e5:4e:45:42:61:0b:de:1a:69:f2:2d:
d8:60:6e:63:09:55:3f:d9:95:97:8e:31:54:78:38:
b8:79:f7:98:5b:dc:b4:0b:9c:d3:e8:38:07:0a:43:
b5:cd:d9:56:7b:f7:ea:d8:b6:ab:09:f2:ff:f9:6e:
39:b1:14:3a:c6:b0:ce:48:66:9f:c7:ab:34:b4:c2:
49:05:ef:2d:b5:b3:b4:6b:56:11:ec:c2:9f:9a:30:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:2B:AA:85:B3:AB:65:23:A5:8C:CD:51:E6:19:D8:28:62:E3:E9
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/BzYrqoWzq2UjpYzNUeYZ2Chi4-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0b:fe:37:cd:72:4a:df:95:1f:6c:db:4b:5b:5e:03:aa:22:
34:cf:c1:0c:cf:05:a4:b3:6a:9d:44:1e:f5:fb:fc:02:47:14:
09:3a:de:60:fd:df:8e:6e:99:a0:53:1c:2c:93:da:d9:0a:98:
cf:fe:50:a0:dc:16:4f:28:aa:18:ea:e4:51:95:03:46:ea:ee:
33:32:30:df:a9:c6:67:f6:98:2f:4d:00:4b:b5:a5:2c:33:f6:
75:1f:94:e2:eb:4d:97:fa:f6:69:77:68:d1:54:29:0a:71:b7:
a5:b6:1d:6e:8c:8e:b3:b1:f1:80:16:c7:41:de:ce:84:0b:51:
62:76:e4:c4:06:2d:c0:66:e0:a0:1a:63:b0:ac:6c:93:5b:b6:
9c:d3:27:06:1e:f7:bc:ff:ee:c0:4b:4a:6b:c6:33:1e:2a:f2:
05:d8:3f:1d:b2:51:08:1c:31:91:1a:eb:e4:a3:d3:67:f1:ec:
4b:3c:1d:c9:bb:8b:72:c0:3a:ca:4b:11:d1:85:d3:ad:0a:87:
24:10:c3:9d:8f:c7:4a:16:50:17:6d:a6:a6:34:3a:bb:ec:19:
29:23:44:17:e1:fa:13:ed:7f:60:93:40:ad:01:8a:b1:50:2e:
10:f1:58:9d:6c:bc:ff:0e:53:81:ba:c4:92:e0:ea:6e:a9:4d:
60:6f:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:27:52 2026 by rpki-client