Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/TzZDRLyZV9xu5ytuWDDtHzbeQ-8.roa
File: TzZDRLyZV9xu5ytuWDDtHzbeQ-8.roa (raw, json)
Hash identifier: vtuHNNVgEzYtIxuT+Bguvs6DdKUT6H+XxL3A5uwf/d4=
Subject key identifier: 4F:36:43:44:BC:99:57:DC:6E:E7:2B:6E:58:30:ED:1F:36:DE:43:EF
Certificate issuer: /CN=b885606fb0076605ad1d1fe1ac61e8bfc36a16fc
Certificate serial: 01A0E6B3FEC9A4BDF2A42937CCE3E649D7C3
Authority key identifier: B8:85:60:6F:B0:07:66:05:AD:1D:1F:E1:AC:61:E8:BF:C3:6A:16:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIVgb7AHZgWtHR_hrGHov8NqFvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/TzZDRLyZV9xu5ytuWDDtHzbeQ-8.roa
Signing time: Mon 28 Sep 2026 06:29:10 +0000
ROA not before: Mon 28 Sep 2026 06:29:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 193.107.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIVgb7AHZgWtHR_hrGHov8NqFvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b3:fe:c9:a4:bd:f2:a4:29:37:cc:e3:e6:49:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b885606fb0076605ad1d1fe1ac61e8bfc36a16fc
Validity
Not Before: Sep 28 06:29:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f364344bc9957dc6ee72b6e5830ed1f36de43ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:6a:67:57:75:01:55:b1:5f:14:19:2c:f5:
24:6b:1b:e4:d8:0d:a8:e8:68:76:23:5a:36:6f:b3:
28:90:17:5e:c5:6d:29:59:08:53:26:00:e1:91:1a:
c8:d0:21:79:75:12:f6:bd:9d:f6:46:7a:8b:ae:d5:
c9:e9:49:19:4e:68:7b:7e:59:3a:66:b6:84:39:8e:
98:c0:0e:cb:de:33:5a:b3:50:dd:44:b3:1a:44:56:
1c:a3:c8:ca:f3:9d:b2:81:55:c1:74:0a:53:8e:08:
72:5c:a0:8c:f5:62:ba:f2:68:1b:98:3e:13:6f:a4:
80:79:c6:19:de:5e:8b:73:0b:42:b6:da:a2:04:32:
6a:d7:12:40:97:1d:20:1c:72:bd:96:a2:5b:2c:06:
5e:b0:2e:61:6f:26:85:8a:6c:6b:b0:d4:5b:fe:05:
4d:d4:0d:48:30:d5:13:d5:35:bb:9a:9d:7a:24:86:
dc:b2:c2:ee:a8:7c:d6:69:45:d0:f0:4c:38:92:0a:
27:64:34:b3:0c:90:42:ca:ce:be:03:d6:96:65:a2:
97:2f:b1:97:b6:01:5d:41:f3:30:50:3f:08:26:5f:
21:7c:a8:87:23:77:bc:47:36:8c:ed:e3:db:1f:d9:
86:4a:7b:3e:ff:47:01:b0:03:cd:c9:aa:03:be:a2:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:36:43:44:BC:99:57:DC:6E:E7:2B:6E:58:30:ED:1F:36:DE:43:EF
X509v3 Authority Key Identifier:
keyid:B8:85:60:6F:B0:07:66:05:AD:1D:1F:E1:AC:61:E8:BF:C3:6A:16:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIVgb7AHZgWtHR_hrGHov8NqFvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/TzZDRLyZV9xu5ytuWDDtHzbeQ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:3b:9a:a4:d1:dd:35:ea:87:ce:a1:0d:61:8a:21:de:fe:59:
f6:2e:1c:05:0b:04:34:ba:e0:cb:53:59:68:61:24:33:bc:63:
d7:34:0e:ca:5a:1f:bb:6b:57:2c:f8:23:9c:5d:58:87:24:8c:
0e:2f:fe:ef:81:51:84:44:a7:03:fa:94:fe:ae:30:92:8b:9f:
00:93:c9:00:79:93:e1:52:ab:90:fc:3a:66:38:0c:2f:00:03:
29:03:17:cd:7f:51:fe:8d:9a:b6:ca:a4:36:cb:53:0e:1e:ea:
cb:5e:32:b3:36:70:c1:26:cf:61:63:8c:34:7e:55:d0:5c:0f:
4a:d7:42:b5:98:95:d9:70:25:e0:4e:29:74:c4:49:64:56:1a:
84:3a:41:5b:19:c6:d6:00:6c:e7:19:6f:65:22:4a:75:a6:da:
a5:93:e5:38:cc:88:da:ed:53:ef:9d:c4:b0:7a:aa:bd:1a:7b:
0c:8f:36:2d:e1:1d:33:b1:ed:83:9b:62:a3:cd:e5:58:f7:07:
05:73:7c:5d:b7:df:07:99:e3:22:c1:01:c0:46:c1:ad:7f:88:
d6:44:98:83:15:f6:c7:65:47:1d:e5:b9:0b:a7:6b:b6:90:04:
69:0d:1d:bc:eb:87:53:52:f2:1e:77:49:78:2c:6c:50:8a:c1:
17:fe:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:45 2026 by rpki-client