Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/_bPDHrvIsjdcZy245hCU8pQOLYI.roa
File: _bPDHrvIsjdcZy245hCU8pQOLYI.roa (raw, json)
Hash identifier: m08RhPN3PMiQiUBrSHXB/7R0o3RF3l3z3Q3vENFUT+I=
Subject key identifier: FD:B3:C3:1E:BB:C8:B2:37:5C:67:2D:B8:E6:10:94:F2:94:0E:2D:82
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 01A16D95566C293E7B62C4F12DB906965FE6
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/_bPDHrvIsjdcZy245hCU8pQOLYI.roa
Signing time: Sat 24 Oct 2026 11:04:25 +0000
ROA not before: Sat 24 Oct 2026 11:04:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 194.117.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:95:56:6c:29:3e:7b:62:c4:f1:2d:b9:06:96:5f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Oct 24 11:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdb3c31ebbc8b2375c672db8e61094f2940e2d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:0e:f7:1e:55:0c:e6:77:14:63:35:8f:47:
0c:8a:dc:b6:a8:01:75:05:f3:37:fe:b0:66:66:74:
02:d3:bf:d2:91:80:51:31:54:a2:a3:97:1c:77:e5:
df:ce:78:56:21:a7:85:13:f5:56:9f:54:6b:00:4d:
6a:50:c0:41:35:8e:17:54:dc:2e:fa:50:40:fa:78:
7f:7f:19:c5:e0:57:67:0f:8a:82:1b:ae:be:d1:93:
46:f0:42:2c:e5:9f:4d:c6:02:08:a9:ee:d9:b5:c6:
68:10:fe:d1:ba:dc:18:27:0b:c0:85:ec:d3:ec:da:
f2:72:e1:fc:36:51:ce:14:f2:38:d8:ea:e8:93:ea:
e2:34:42:7f:07:bb:33:ab:c1:35:14:38:4b:f2:28:
e9:a4:11:87:31:97:9d:f8:e1:18:3c:3a:d0:7c:0d:
f5:9b:ff:5a:53:86:3f:20:2b:03:d3:0a:10:95:62:
64:e9:de:72:ff:a0:86:fa:f3:ec:15:60:d7:d5:7c:
2e:af:0b:8c:c1:92:3d:5a:d3:2a:93:35:52:ae:08:
49:76:27:09:f8:66:92:dc:6a:26:34:55:de:98:04:
c0:d2:e7:74:40:8a:6c:c8:1b:92:17:de:3a:39:ff:
c6:50:00:3d:b7:dc:9a:37:ac:0e:01:13:91:ba:cb:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:C3:1E:BB:C8:B2:37:5C:67:2D:B8:E6:10:94:F2:94:0E:2D:82
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/_bPDHrvIsjdcZy245hCU8pQOLYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e2:71:1e:fd:65:6e:ec:f8:26:77:01:27:3a:bd:e2:d0:50:
93:25:8b:e0:30:82:03:83:21:fa:e5:b5:23:bc:8f:11:95:5d:
8c:98:4f:e8:c6:f0:b9:f2:f4:7e:a6:46:64:7c:42:58:e8:6b:
3b:41:c0:0a:a7:0b:97:3e:fa:e9:70:d8:ba:99:2c:20:33:78:
fc:fa:d6:a7:cc:d0:8a:1d:86:36:bf:b4:ba:6a:60:43:5d:c6:
1e:44:e7:1b:94:f9:4f:cf:6c:f7:c9:52:02:90:98:a9:d9:47:
8b:1b:aa:1a:24:58:7a:2f:49:97:25:ab:91:e5:e0:b6:c5:8c:
db:c5:af:18:74:20:ff:39:76:f0:77:df:e1:01:d3:c3:48:bd:
bf:ea:68:2e:37:54:72:33:7e:e0:32:64:88:31:73:17:8e:52:
d7:68:82:da:ef:c8:1c:3c:02:21:99:bb:d6:97:99:b5:7a:e5:
93:d9:a3:64:d3:b3:69:11:73:77:cc:7b:69:a1:07:8b:d1:19:
aa:4c:ce:e9:4f:17:d8:63:38:a7:18:7f:6f:b4:95:7b:fc:4c:
b7:19:fb:26:02:d5:c7:5e:f1:76:fa:73:f6:01:51:de:02:3b:
5d:e0:3a:ce:b4:1c:ab:7b:9a:6d:b0:6a:24:c8:87:f8:72:20:
55:d8:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:17 2026 by rpki-client