Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/dZqs8E7LyKHkfB4jh2GOoyNo76Y.roa
File: dZqs8E7LyKHkfB4jh2GOoyNo76Y.roa (raw, json)
Hash identifier: zgo7CuU8bSN45o0HLMgfnKvZADdH4eXVAz8vL+7KLKo=
Subject key identifier: 75:9A:AC:F0:4E:CB:C8:A1:E4:7C:1E:23:87:61:8E:A3:23:68:EF:A6
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01A07AAE05EC72BC46BEC0561F0B31B26188
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/dZqs8E7LyKHkfB4jh2GOoyNo76Y.roa
Signing time: Mon 07 Sep 2026 07:03:40 +0000
ROA not before: Mon 07 Sep 2026 07:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 193.31.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:ae:05:ec:72:bc:46:be:c0:56:1f:0b:31:b2:61:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Sep 7 07:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759aacf04ecbc8a1e47c1e2387618ea32368efa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:fc:1e:e9:7a:79:88:7a:48:c2:6b:87:c0:
45:da:08:a9:02:82:0b:a0:8c:1a:85:a3:76:59:0c:
56:d6:bc:0b:45:36:65:cd:b0:81:ab:b4:a4:ff:01:
44:28:7d:3a:78:a0:76:37:16:51:e1:fc:9d:08:13:
1a:f5:72:df:a5:71:c9:01:aa:f3:4f:cd:dd:ab:74:
cd:e6:bb:2e:71:9b:77:58:96:28:25:ab:eb:61:06:
58:83:ec:a9:56:67:74:61:00:18:a5:18:8a:74:e2:
37:fd:d2:fb:38:87:de:25:d9:c9:89:ca:16:d7:0b:
74:dc:02:41:5d:91:36:63:0c:fb:f8:8f:ac:15:c8:
2b:5f:6e:70:b1:52:7c:48:17:84:95:8b:b7:c0:71:
aa:28:d3:07:a4:5f:87:0a:a9:3b:99:00:54:01:b2:
12:a3:55:a1:76:86:0b:84:38:33:4f:13:e1:56:00:
06:e5:e8:c4:e9:08:4a:f5:f3:52:ec:d4:0f:29:74:
86:e2:ae:56:74:99:df:57:1f:3a:81:a3:55:b1:06:
1f:dc:76:29:2a:cc:a8:2f:41:ce:70:74:62:01:34:
43:74:2b:5d:0a:76:67:97:ba:2d:8a:b8:5a:92:47:
75:c3:d9:7a:b9:a4:95:3c:fb:dd:ca:31:03:3e:b2:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9A:AC:F0:4E:CB:C8:A1:E4:7C:1E:23:87:61:8E:A3:23:68:EF:A6
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/dZqs8E7LyKHkfB4jh2GOoyNo76Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.15.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d9:87:e6:11:42:e4:e7:66:62:1f:dd:ad:05:b3:8a:81:0d:
fa:b6:fd:8e:03:d8:1c:8e:18:eb:1a:35:37:51:83:57:9f:59:
84:56:4d:8e:f4:15:48:4d:5a:0f:f0:5a:fd:4d:41:ec:ac:ff:
61:70:0e:58:06:d0:2d:b2:9a:46:cf:73:b9:38:f2:a0:c1:52:
8d:57:d2:9c:e0:9a:5d:83:0f:97:5e:06:37:6d:c5:61:0f:35:
47:77:c0:52:9f:bf:a2:d4:51:a2:78:3f:98:e2:26:03:42:ef:
e5:d7:4a:ad:6c:b5:cb:61:2d:b0:53:2f:c3:e3:06:e8:cc:af:
9e:fa:38:bc:50:e2:9b:e8:31:15:37:83:7e:ed:ae:97:53:04:
d1:dc:0e:82:58:6b:8e:67:aa:1c:55:e4:c0:11:30:58:ff:72:
68:0e:36:a8:bc:f6:95:ca:17:81:28:d4:15:d0:31:fa:21:b5:
86:04:66:7d:e6:97:a3:c9:1b:ae:2b:c0:52:cd:8f:f8:8b:4b:
ec:cf:21:c1:bc:03:76:7f:04:ce:5d:b6:72:a9:67:f7:38:64:
36:a6:ef:98:0f:e5:7f:23:b1:a7:8d:e1:6b:60:1a:bd:46:82:
12:11:4e:36:74:f9:b4:3f:db:ab:d9:33:d2:27:f7:1d:e0:68:
dd:6b:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:03:23 2026 by rpki-client