Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/b7ZPMXlosKgEeC7ZcNzNOfCikgU.roa
File: b7ZPMXlosKgEeC7ZcNzNOfCikgU.roa (raw, json)
Hash identifier: yzwUyKLf0O7SCujNCYa68TiKBRhLa1piuhgRaBp9AQw=
Subject key identifier: 6F:B6:4F:31:79:68:B0:A8:04:78:2E:D9:70:DC:CD:39:F0:A2:92:05
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A146C7FF2A238DE3450EA4D27BA88F5DF0
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/b7ZPMXlosKgEeC7ZcNzNOfCikgU.roa
Signing time: Fri 16 Oct 2026 22:14:34 +0000
ROA not before: Fri 16 Oct 2026 22:14:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 187.13.75.0/24 maxlen: 24
189.74.120.0/24 maxlen: 24
189.74.121.0/24 maxlen: 24
191.44.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:c7:ff:2a:23:8d:e3:45:0e:a4:d2:7b:a8:8f:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Oct 16 22:14:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fb64f317968b0a804782ed970dccd39f0a29205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:e7:81:80:ca:fb:af:a2:46:f1:69:04:34:
ce:00:16:69:cc:53:d8:8c:1a:e1:42:e0:91:bc:cb:
e2:a8:a2:79:ff:e3:14:a7:f9:eb:f3:d3:15:63:7d:
d6:e6:7b:7b:bf:f8:52:bc:c0:86:19:14:7a:19:29:
a0:b0:f4:15:19:06:ab:65:19:fc:3f:40:43:77:98:
88:06:60:d3:65:49:d8:29:2e:a8:d1:57:66:83:35:
c0:1a:84:16:61:df:ab:1c:7d:d0:72:ad:06:db:85:
22:9b:14:d0:24:3c:1b:7a:3e:8d:fc:7d:49:eb:01:
9a:03:04:67:bc:1d:33:ff:e7:bb:33:0c:a9:2a:b7:
27:49:70:7b:01:e0:3a:59:59:d6:e3:90:a7:ca:4f:
4d:0c:53:9e:70:4b:0f:7b:f1:18:52:c8:f2:bb:74:
7b:47:d0:43:cf:45:3b:bd:27:4a:df:17:8d:e5:17:
59:ae:b1:ed:a3:eb:63:fb:c5:b5:c7:28:0c:a6:1c:
01:29:b6:54:96:80:c2:0c:65:9e:43:cd:63:49:83:
2e:3d:64:9f:94:d6:2a:a0:79:c0:75:68:79:e6:34:
75:d5:3d:90:ea:ba:c5:89:d7:36:02:7d:72:c6:d3:
d9:c2:cd:86:02:11:3a:f9:7d:4a:6e:94:55:ec:95:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:4F:31:79:68:B0:A8:04:78:2E:D9:70:DC:CD:39:F0:A2:92:05
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/b7ZPMXlosKgEeC7ZcNzNOfCikgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.75.0/24
189.74.120.0/23
191.44.40.0/22
Signature Algorithm: sha256WithRSAEncryption
48:de:0c:54:ea:b8:74:66:b4:08:20:fd:bf:12:08:4b:8e:0d:
54:c9:d9:ef:a7:a7:a1:73:fd:2b:a3:55:eb:c0:08:db:b8:9b:
5a:84:5b:5b:64:52:12:3a:89:89:4c:aa:e4:9a:2a:0c:80:1e:
ad:6a:25:db:7f:00:72:96:a0:ef:19:a3:fe:d9:20:39:46:ab:
50:08:9b:3f:ff:7d:e8:86:7c:42:ed:cc:8e:83:00:f2:2d:cd:
a5:a1:dc:b2:8a:d7:01:6c:a2:86:ce:cf:2c:2d:8f:e7:56:a5:
7c:85:ee:b7:d5:f4:85:d4:ce:b5:87:d9:e4:0c:2c:54:19:64:
59:40:4f:60:60:53:e2:90:96:8d:83:3b:8f:a0:f9:05:fe:ca:
db:20:6a:dd:60:f6:0b:14:7e:47:c8:af:49:9d:3a:dd:06:d4:
1c:b1:73:1e:90:4f:75:fe:82:3d:d6:70:75:c4:39:2a:bd:ed:
f5:91:b9:04:fa:5e:2d:5d:27:3d:5b:0f:d1:4e:bc:c5:2c:47:
29:da:db:f4:0f:ee:68:ed:b3:15:20:2e:64:76:a2:ba:02:09:
e3:cd:7c:33:e9:5d:ce:03:16:2d:56:2c:41:9b:b4:9b:9f:48:
12:f3:8b:83:c2:04:ac:3b:10:b7:cb:75:5a:8d:58:d9:30:65:
5e:73:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:38 2026 by rpki-client