Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BLzIaqgrpIcvmdLJoUdsBtBJs5E.roa
File: BLzIaqgrpIcvmdLJoUdsBtBJs5E.roa (raw, json)
Hash identifier: Ze3D65l9C6aMKxQsbiR/XminxMZVqq6fjFfZJb3Ol3g=
Subject key identifier: 04:BC:C8:6A:A8:2B:A4:87:2F:99:D2:C9:A1:47:6C:06:D0:49:B3:91
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A15D886AAD45EBD1E77D60A537D5D84F01
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BLzIaqgrpIcvmdLJoUdsBtBJs5E.roa
Signing time: Wed 21 Oct 2026 08:16:23 +0000
ROA not before: Wed 21 Oct 2026 08:16:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12301
IP address blocks: 194.41.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 08:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:88:6a:ad:45:eb:d1:e7:7d:60:a5:37:d5:d8:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 21 08:16:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04bcc86aa82ba4872f99d2c9a1476c06d049b391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:60:2f:ae:ab:0a:a4:2c:3f:c7:82:ff:0b:
e0:dd:0f:c4:22:e5:8e:51:ca:03:eb:04:b4:3b:87:
06:37:d1:6d:bc:7c:1c:d1:27:bd:a2:ea:b2:97:b1:
e4:df:f0:e7:b3:7b:de:42:30:b0:db:37:3f:16:b4:
18:22:21:68:02:32:a7:65:85:ec:19:53:09:e4:41:
c3:72:c9:ba:30:df:83:db:f9:8f:fc:66:d2:83:56:
36:e0:79:52:02:9a:df:2f:5b:7d:dd:71:c9:53:32:
aa:e7:85:95:a4:52:e7:30:7c:27:e6:dc:52:c9:c8:
16:87:6d:09:1e:0a:e9:34:6f:1e:3c:d4:02:23:3d:
0a:c0:df:6d:fe:47:69:68:a9:98:54:82:99:5f:21:
57:45:dd:1a:5a:37:9a:1d:e6:de:7a:17:0c:4f:2c:
03:2a:94:f3:c0:df:71:c4:7d:dd:3d:b5:41:a1:79:
d7:ac:9d:d7:d1:10:4a:6e:21:5e:46:e5:43:ff:c2:
d1:14:e5:70:0c:e9:e1:05:04:5b:fc:4e:1f:da:6f:
c0:1f:39:5b:83:ac:78:1f:8d:27:65:16:54:b3:65:
ce:da:95:66:36:37:e6:fc:7e:db:f0:24:e7:6b:46:
f0:9f:17:a3:cc:33:1a:42:d7:60:03:ec:88:bb:a6:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:C8:6A:A8:2B:A4:87:2F:99:D2:C9:A1:47:6C:06:D0:49:B3:91
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BLzIaqgrpIcvmdLJoUdsBtBJs5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.44.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:ac:4c:2b:1c:93:ae:b6:80:48:bc:f9:78:04:8f:1d:ba:5b:
76:1f:22:2d:7c:90:7c:63:36:bb:0c:e4:4b:75:a3:d4:63:68:
92:e5:7f:3f:9e:4d:3d:6a:a7:59:f0:54:03:90:b8:f4:2e:45:
34:d6:fa:b0:4a:0e:01:4e:bf:b1:14:ce:ee:8b:c3:7f:63:8e:
2e:04:f4:b4:90:b0:c8:f9:9b:d5:35:be:1b:6e:3a:84:99:55:
81:72:76:16:df:f6:38:d1:e7:a6:1f:28:a5:b8:78:ca:89:be:
62:0e:b4:85:04:a2:9b:53:b2:a2:2c:72:0a:94:97:26:ab:e1:
be:62:c8:a4:48:82:b2:1d:3d:9b:68:b7:69:69:9a:a0:fc:f9:
60:62:64:63:d3:28:5b:24:bb:9b:33:e7:36:58:c2:c6:74:0b:
24:df:a3:0c:39:3f:cb:3c:e0:e6:27:37:5a:a2:50:13:18:54:
95:87:f6:92:83:65:9a:1b:94:bd:96:a0:b3:6a:1a:11:82:74:
ff:dc:6e:6a:3c:e2:c5:b1:0e:6f:5c:fa:3c:f3:e8:aa:eb:8f:
be:ca:45:cd:a1:c6:72:9d:31:21:0c:0a:30:d1:ba:22:8d:6a:
eb:b7:71:95:98:6c:1c:bb:d1:45:ca:64:22:6b:9e:09:1e:ee:
9f:14:44:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFdiGqtRevR531gpTfV2E8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYxMDIxMDgxNjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGJjYzg2YWE4MmJhNDg3MmY5OWQyYzlhMTQ3NmMwNmQwNDliMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyntgL66rCqQsP8eC/wvg3Q/EIuWO
UcoD6wS0O4cGN9FtvHwc0Se9ouqyl7Hk3/Dns3veQjCw2zc/FrQYIiFoAjKnZYXs
GVMJ5EHDcsm6MN+D2/mP/GbSg1Y24HlSAprfL1t93XHJUzKq54WVpFLnMHwn5txS
ycgWh20JHgrpNG8ePNQCIz0KwN9t/kdpaKmYVIKZXyFXRd0aWjeaHebeehcMTywD
KpTzwN9xxH3dPbVBoXnXrJ3X0RBKbiFeRuVD/8LRFOVwDOnhBQRb/E4f2m/AHzlb
g6x4H40nZRZUs2XO2pVmNjfm/H7b8CTna0bwnxejzDMaQtdgA+yIu6YYQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAS8yGqoK6SHL5nSyaFHbAbQSbORMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvQkx6SWFxZ3JwSWN2bWRMSm9VZHNCdEJKczVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiksMA0G
CSqGSIb3DQEBCwUAA4IBAQBLrEwrHJOutoBIvPl4BI8dult2HyItfJB8Yza7DORL
daPUY2iS5X8/nk09aqdZ8FQDkLj0LkU01vqwSg4BTr+xFM7ui8N/Y44uBPS0kLDI
+ZvVNb4bbjqEmVWBcnYW3/Y40eemHyiluHjKib5iDrSFBKKbU7KiLHIKlJcmq+G+
YsikSIKyHT2baLdpaZqg/PlgYmRj0yhbJLubM+c2WMLGdAsk36MMOT/LPODmJzda
olATGFSVh/aSg2WaG5S9lqCzahoRgnT/3G5qPOLFsQ5vXPo88+iq64++ykXNocZy
nTEhDAow0boijWrrt3GVmGwcu9FFymQia54JHu6fFESW
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:43:27 2026 by rpki-client