Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/B4KYwS05QgHpINLFLm8jx9WAMUE.roa
File: B4KYwS05QgHpINLFLm8jx9WAMUE.roa (raw, json)
Hash identifier: Y/ZtdGLIxiXNc+93eNU6l9a/8sOjOG7FjbIkKfPBPaw=
Subject key identifier: 07:82:98:C1:2D:39:42:01:E9:20:D2:C5:2E:6F:23:C7:D5:80:31:41
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A09AC97023998B93C05E73BAA870887A3E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/B4KYwS05QgHpINLFLm8jx9WAMUE.roa
Signing time: Sun 13 Sep 2026 12:41:27 +0000
ROA not before: Sun 13 Sep 2026 12:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48976
IP address blocks: 109.111.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:c9:70:23:99:8b:93:c0:5e:73:ba:a8:70:88:7a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 13 12:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078298c12d394201e920d2c52e6f23c7d5803141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:22:a6:49:dc:f4:77:8a:e8:64:d5:65:69:
a2:63:78:80:58:1a:71:22:75:eb:eb:45:4c:dc:40:
9f:42:5e:7f:e5:80:9e:57:cf:f7:75:59:7d:63:04:
27:7a:ea:88:0c:cd:9e:7a:86:9b:c9:05:8c:97:92:
dd:f1:d4:22:9a:c9:2e:08:d2:49:c6:9c:99:45:5e:
cb:2c:9d:04:1c:d5:b6:35:ba:a8:62:14:f8:a9:ba:
85:fb:e0:02:e3:8b:80:bc:ad:de:1c:79:4a:54:8e:
7b:8a:63:4b:43:3f:05:4e:01:df:1f:d6:52:bb:5f:
12:2f:17:3b:4d:db:8c:f8:11:69:25:c6:45:15:6c:
48:23:68:fb:33:6c:0d:0a:0e:04:16:60:c8:f2:09:
05:65:2d:c6:7f:8f:91:80:6b:c1:dc:80:fd:ef:b1:
80:00:57:7e:24:c6:77:d1:c4:db:73:f0:5d:2d:f9:
06:b4:29:ba:46:a3:64:37:84:a0:af:f8:9b:02:3a:
5e:57:6c:62:c2:83:d7:53:67:e5:f3:cb:80:62:e8:
4f:35:85:e2:76:11:86:a8:33:71:f1:9f:59:92:25:
bd:7a:07:e4:e1:01:f2:ad:ca:c8:89:5f:f3:5d:36:
0e:ad:e3:20:03:9a:17:1e:98:91:83:8f:02:0c:db:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:98:C1:2D:39:42:01:E9:20:D2:C5:2E:6F:23:C7:D5:80:31:41
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/B4KYwS05QgHpINLFLm8jx9WAMUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/23
Signature Algorithm: sha256WithRSAEncryption
10:65:36:dc:33:86:2e:b1:c1:34:8a:02:0f:2d:4a:32:ba:54:
45:7e:95:27:b0:42:1b:1e:a7:f8:30:da:f1:37:ca:eb:f7:fe:
58:c3:7d:88:cf:60:9a:0f:d0:61:ff:fb:85:3b:09:60:5a:a6:
2a:28:5a:0d:0b:41:f9:d2:6f:59:9e:55:2b:6f:c5:a2:e8:1d:
2e:49:87:dd:c8:de:37:ff:90:46:cd:22:9d:89:e7:d2:9b:8c:
0f:f4:73:4f:4e:f9:9a:3f:9c:6f:92:44:b9:3f:2c:c8:21:2d:
f6:d9:c4:a9:1b:41:af:57:f3:90:a1:72:22:a4:16:f6:97:35:
90:39:ad:5d:9e:90:58:4d:5d:e5:b6:c3:34:40:1c:c5:3a:43:
84:08:5a:34:eb:0a:84:80:fb:29:a4:97:97:63:0a:cc:6b:80:
a3:78:cc:da:f7:18:88:76:ec:ea:d1:19:67:11:93:d4:ba:7e:
9e:47:1f:a9:9d:ee:e1:4b:5d:e9:9a:16:f0:a7:ea:89:e2:fb:
ac:fb:6d:d7:c9:df:b1:8e:a1:08:b0:f8:16:58:63:aa:c8:c6:
57:db:63:cb:6d:88:43:27:79:2c:74:0e:ec:e0:68:e0:6f:3e:
e5:41:b2:ba:7d:65:9a:2a:8e:52:52:12:32:b8:c9:04:3c:2c:
78:85:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:53:18 2026 by rpki-client