Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa
File: B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa (raw, json)
Hash identifier: +Lzs31fW3zuwQ9tYMA1nRcRlZN8oqEJ97KqkruTLEYU=
Subject key identifier: 07:82:8D:D9:87:7D:C3:B5:A4:58:B1:B0:39:49:3C:68:15:6B:D0:AA
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019F51F2F15CB8959893A5D61578F267905D
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa
Signing time: Sat 11 Jul 2026 16:11:43 +0000
ROA not before: Sat 11 Jul 2026 16:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12083
IP address blocks: 85.232.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:51:f2:f1:5c:b8:95:98:93:a5:d6:15:78:f2:67:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jul 11 16:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07828dd9877dc3b5a458b1b039493c68156bd0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:30:37:2b:ca:4a:30:33:33:ba:d6:3c:41:36:
25:f2:09:5b:19:0f:18:87:48:a6:8c:a0:a2:3d:b0:
9b:e5:44:2f:75:de:cf:4a:b3:0a:b0:ef:e4:7d:2f:
2b:f8:1b:35:36:17:5b:a2:c5:38:8f:7a:df:57:30:
a7:cf:e4:56:c0:08:04:97:d0:7f:d1:98:d3:c6:74:
a8:a3:cf:72:15:9c:74:9f:f7:94:80:31:92:cf:20:
31:57:19:f4:af:35:bf:f8:5a:47:9c:4e:88:47:fd:
d8:23:b9:d3:66:09:bd:c7:15:56:91:95:34:d2:0d:
08:20:38:0a:c8:76:db:7d:c5:a1:7e:13:13:13:16:
66:e2:51:d7:20:4c:40:38:13:f6:88:ac:83:a8:7b:
d4:8f:f7:6d:3b:c3:88:11:80:78:02:86:6d:f3:97:
af:81:66:89:74:3b:d5:a2:18:0b:1f:f3:d1:97:60:
48:32:57:26:24:7c:79:47:71:f9:0a:b5:85:37:4e:
4d:ca:45:28:d5:ae:a9:e0:35:9c:36:4b:85:33:74:
41:d8:08:49:a9:7e:a5:4c:87:1f:b2:10:c2:4b:de:
68:20:33:89:a5:94:cf:5f:59:01:60:bb:37:4e:19:
95:fe:cd:88:b0:80:54:e8:e3:37:8a:63:ba:bb:82:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:8D:D9:87:7D:C3:B5:A4:58:B1:B0:39:49:3C:68:15:6B:D0:AA
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.160.0/20
Signature Algorithm: sha256WithRSAEncryption
51:db:0c:f7:bf:80:91:9f:7b:43:2d:7c:eb:ac:62:80:43:bd:
b5:a6:a8:43:be:8e:24:82:60:1f:fb:38:d6:c7:8c:58:e2:8e:
b4:dd:63:8d:fc:4d:89:65:1c:47:6e:0c:76:59:a0:ae:e3:f0:
49:27:58:a5:7d:4d:ac:24:cc:41:3f:40:ad:9b:86:c1:55:0d:
05:9c:a9:a9:b5:1d:84:45:d5:9a:6f:da:6a:e2:02:25:03:2e:
d2:84:cb:a6:77:49:91:08:30:98:0e:f8:f9:4c:75:88:80:e9:
4f:66:c8:37:b2:b0:44:98:b7:cd:e7:8c:fd:98:c3:55:99:c1:
16:de:ff:cb:4b:53:71:95:22:11:00:06:b0:08:9c:8b:fc:d7:
05:2d:bc:ea:8a:9b:17:8a:af:2c:68:09:a2:60:9b:11:d7:f8:
32:29:ac:5d:91:be:58:c8:14:c7:94:be:39:1d:88:d5:10:27:
2d:b4:72:a5:35:8e:9c:a1:bb:01:ef:55:1c:4c:47:94:4e:93:
b7:cc:a7:e3:8a:14:a3:6c:57:8c:b1:38:a8:0f:93:a6:36:bb:
c0:a6:3d:0d:6e:8f:db:b0:b0:e9:c4:5d:2a:73:ce:8e:05:9f:
2b:76:ba:34:40:1f:f2:c1:09:98:1b:da:18:bf:03:9d:6c:00:
eb:10:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:11 2026 by rpki-client