Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/P_bsl56DtaIF1lt9rp-k5VLQWvY.roa
File: P_bsl56DtaIF1lt9rp-k5VLQWvY.roa (raw, json)
Hash identifier: c6m/3V7o5WSGGv1khR9dZE4zuxjrXjOt9iPFZZshU40=
Subject key identifier: 3F:F6:EC:97:9E:83:B5:A2:05:D6:5B:7D:AE:9F:A4:E5:52:D0:5A:F6
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F23684144C3E7E197C4BA5858B5F91508
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/P_bsl56DtaIF1lt9rp-k5VLQWvY.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31514
IP address blocks: 83.217.196.0/24 maxlen: 24
83.217.198.0/24 maxlen: 24
83.217.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:41:44:c3:e7:e1:97:c4:ba:58:58:b5:f9:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ff6ec979e83b5a205d65b7dae9fa4e552d05af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:87:03:f0:dc:3c:15:c0:38:a3:89:ad:ea:
f8:70:61:53:8e:80:70:c6:72:87:e9:3b:12:22:77:
29:f0:6a:05:62:18:a8:7f:84:f4:c7:5e:ce:36:ae:
03:65:6d:09:10:7e:e0:2c:d8:d8:fc:8e:44:8c:0b:
6a:c7:5e:dd:0a:e4:ce:75:55:b0:cb:bb:70:74:67:
ab:42:99:79:86:0d:f3:78:b6:da:4c:00:1e:d7:4f:
bf:34:ab:a0:7c:ab:43:6a:69:d9:df:9e:b6:62:04:
d6:9a:ce:a3:e4:aa:9e:3b:0a:6f:2c:57:54:3d:16:
c4:d8:01:47:4b:7b:5b:69:35:2b:93:8a:e1:c8:bb:
09:f4:a3:70:ae:a6:bd:a3:b3:59:a8:6a:87:21:20:
45:47:ff:d5:12:10:37:40:44:54:4f:0f:7b:2a:e1:
58:3d:2d:1d:52:83:fc:69:c6:5d:c0:e6:18:0b:bc:
68:75:8e:59:5c:67:e6:73:15:fe:9a:30:8a:ab:ee:
f3:02:43:ff:2e:fb:39:8b:89:3a:ce:a7:ca:c2:2f:
a7:d5:b4:64:61:62:b6:8a:1a:d7:b0:60:62:73:28:
da:ed:cf:61:b1:fe:f7:5f:90:80:c6:ae:83:97:e6:
c0:8a:54:e9:61:e4:c8:cb:f4:c0:c4:3a:b9:4c:4f:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:EC:97:9E:83:B5:A2:05:D6:5B:7D:AE:9F:A4:E5:52:D0:5A:F6
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/P_bsl56DtaIF1lt9rp-k5VLQWvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.196.0/24
83.217.198.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:ba:92:17:c8:79:be:00:51:b5:61:a0:89:ec:31:0c:c9:3a:
df:f0:7b:61:89:70:d3:9c:75:a2:7d:f8:ee:ae:38:78:b4:3d:
90:1a:d0:6d:46:f0:71:ab:e9:a9:82:95:b0:a0:41:a5:5a:8e:
66:47:24:6f:2a:be:0c:dd:03:e2:1e:9a:5e:1b:6e:d9:7c:83:
8c:de:59:45:59:3a:d8:9a:f7:24:31:b7:27:80:c8:c9:30:04:
64:69:f1:57:9b:4d:1b:a5:c2:7f:e7:bc:b8:c2:3d:92:3f:5c:
4f:f5:7e:b4:42:e9:a6:c5:79:5b:41:b4:6c:28:17:b9:97:f0:
a6:b4:a6:3b:ba:8d:c7:51:e6:7c:96:65:58:3e:c5:24:58:ee:
ad:e6:17:c2:7e:c7:81:08:b8:4b:84:43:8c:f8:85:b2:09:48:
35:58:8a:a5:de:6b:4a:fe:73:1d:23:07:b9:44:6f:40:27:37:
4f:f0:42:88:0c:2e:47:85:19:bd:62:62:41:f5:5f:b5:97:ab:
95:2a:2a:b6:68:4e:0c:81:6b:77:78:3f:c9:e2:f0:8c:b2:ec:
10:10:57:32:b4:9a:82:19:8c:de:ce:26:cf:54:eb:a6:5b:80:
2e:91:2f:0e:1a:24:32:14:0f:b1:ac:0c:c0:37:5b:46:54:ac:
f8:19:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:52 2026 by rpki-client