Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bzfMGn4wZqRk1s79QUs1bzzzfyo.roa
File: bzfMGn4wZqRk1s79QUs1bzzzfyo.roa (raw, json)
Hash identifier: foA+1ZYAFuHxss5ndRv0PLIBCr57cUH0iYbVfoQTl1Q=
Subject key identifier: 6F:37:CC:1A:7E:30:66:A4:64:D6:CE:FD:41:4B:35:6F:3C:F3:7F:2A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A153FB9530EB35143284B7128B79BC30CD
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bzfMGn4wZqRk1s79QUs1bzzzfyo.roa
Signing time: Mon 19 Oct 2026 11:45:59 +0000
ROA not before: Mon 19 Oct 2026 11:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218862
IP address blocks: 194.77.4.0/24 maxlen: 24
194.231.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:fb:95:30:eb:35:14:32:84:b7:12:8b:79:bc:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 19 11:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f37cc1a7e3066a464d6cefd414b356f3cf37f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:e4:22:aa:fe:0f:cd:ed:22:ce:04:30:ea:
e1:c8:eb:7a:94:2a:9e:ad:25:f8:d1:7e:b1:d0:9c:
61:2c:70:85:a6:8e:02:b1:da:6e:0a:7a:ee:4b:27:
0b:29:01:a4:9c:6c:f7:bc:04:32:18:5b:cc:99:21:
e4:bb:8c:12:23:4f:d8:f9:e5:85:1c:13:08:c7:d2:
d2:ca:5d:d7:02:11:6b:42:31:7e:2e:7f:d8:f5:fb:
83:12:64:29:ac:5e:ff:6a:dd:22:d9:05:31:f3:c9:
fc:64:28:27:f9:f4:2c:17:2c:09:50:2b:03:6b:44:
b0:e8:bd:59:9a:47:fe:af:74:c9:74:14:ab:81:22:
cf:fe:52:a4:c2:08:95:90:ce:36:96:d0:51:d3:03:
81:30:f2:0e:7e:d0:88:30:61:f0:9e:e7:b2:ea:0a:
c4:2e:71:57:c4:6b:dc:3d:54:cb:e0:1e:9d:b9:19:
b3:0f:11:bf:3d:1e:15:49:94:56:65:75:10:56:04:
6d:86:0d:dc:8e:78:a0:35:1a:db:8e:ba:c7:6b:73:
07:87:8f:80:65:05:36:e8:16:46:85:7d:83:dd:29:
c8:4c:08:86:f2:e6:cb:fc:67:a9:7d:e0:e2:73:eb:
1d:6f:45:d1:44:3b:de:97:7b:a1:f0:87:0b:ba:25:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:37:CC:1A:7E:30:66:A4:64:D6:CE:FD:41:4B:35:6F:3C:F3:7F:2A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bzfMGn4wZqRk1s79QUs1bzzzfyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.4.0/24
194.231.202.0/24
Signature Algorithm: sha256WithRSAEncryption
52:84:bf:34:45:fb:79:42:17:7a:dc:a6:48:9d:a5:9b:4f:cc:
13:63:93:70:05:b7:95:7a:56:15:60:54:c9:9c:aa:d9:52:e4:
d6:a0:ab:f3:1a:e9:7e:32:16:34:09:ee:90:99:9c:88:69:15:
ae:27:08:b0:cf:9a:00:d8:17:92:03:76:ac:53:bf:77:83:ac:
27:5f:0b:60:d7:43:01:af:35:7e:23:70:28:36:37:10:cc:81:
e9:d4:fa:e3:be:48:f4:7c:54:dc:34:60:75:80:0e:fb:7c:64:
b9:79:b3:e4:c0:a9:44:38:a8:f2:1f:b9:a1:c1:7b:46:bf:f3:
c7:f1:3c:70:62:09:60:d6:30:de:9b:c0:ee:66:c2:ef:80:74:
d5:44:99:ed:f9:29:ab:d4:14:76:33:1b:dc:09:f7:7d:91:26:
9c:8b:70:19:31:62:6c:c5:57:e6:6a:81:d3:11:b1:f9:c0:23:
e4:1e:75:a2:27:5a:ee:ff:59:c4:89:8f:b3:54:50:5c:ac:fb:
c3:31:b4:fe:19:28:41:a8:94:4e:a3:59:8d:55:11:43:f3:3b:
b7:f5:d0:31:e6:c9:2b:a7:78:ab:0c:53:8a:78:a1:59:b1:93:
b6:a6:5b:88:33:f6:23:25:2d:58:95:be:b2:e4:80:38:02:4a:
64:b7:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:03 2026 by rpki-client