Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/dZ_wj-l4u9PRm9NioG9hfmoCmEg.roa
File: dZ_wj-l4u9PRm9NioG9hfmoCmEg.roa (raw, json)
Hash identifier: XONI2zL//Bx6fEgV/SOZ940RDTOysbYIjp1Bo1GWQjc=
Subject key identifier: 75:9F:F0:8F:E9:78:BB:D3:D1:9B:D3:62:A0:6F:61:7E:6A:02:98:48
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 01A13FB74B197E986D927C3D9A6E34D341A6
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/dZ_wj-l4u9PRm9NioG9hfmoCmEg.roa
Signing time: Thu 15 Oct 2026 13:18:59 +0000
ROA not before: Thu 15 Oct 2026 13:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 192.54.49.0/24 maxlen: 24
192.54.60.0/24 maxlen: 24
192.55.188.0/24 maxlen: 24
192.108.23.0/24 maxlen: 24
192.108.24.0/23 maxlen: 23
192.108.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:b7:4b:19:7e:98:6d:92:7c:3d:9a:6e:34:d3:41:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Oct 15 13:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759ff08fe978bbd3d19bd362a06f617e6a029848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:6f:d5:b5:bd:8e:ef:ff:ef:9d:3d:92:88:
16:18:b1:a7:5c:24:ed:87:84:f8:e8:39:3a:d7:1d:
7b:57:05:ca:9a:63:f3:bf:8f:8f:70:c9:a2:58:fe:
fe:e4:a4:8e:74:fe:b7:17:40:5f:6f:c5:39:f9:84:
76:43:7a:62:d0:b5:a0:4d:67:bd:74:87:c9:7c:fa:
82:d4:23:7a:48:6b:a4:8b:8a:4e:0d:e2:c6:ed:43:
e5:af:40:6c:00:16:72:08:bf:40:df:ae:70:aa:18:
97:24:48:17:ff:fe:52:8e:aa:f0:9a:a4:42:63:c9:
12:61:0d:c9:40:2e:e6:37:c8:76:aa:4e:97:50:b8:
5a:62:22:3a:d7:67:38:2e:5c:3c:f0:c4:53:c9:ef:
74:97:f4:89:46:a2:2a:aa:f1:24:2b:d9:50:57:b2:
d6:98:1f:4f:61:e6:14:52:ac:3b:cc:6d:38:28:ff:
ef:21:20:b0:38:62:3a:64:c7:1c:ca:e6:bf:b2:35:
8b:17:41:28:d3:2c:7a:2c:e1:ae:13:f0:a0:d6:ec:
ab:71:20:47:5c:ad:19:c1:5d:e9:1f:15:9b:93:e4:
36:73:b7:db:eb:ae:ff:f8:b6:9f:d1:23:5e:4c:16:
d4:9d:98:b5:ea:bf:95:a2:d2:b6:b6:e0:27:53:de:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:F0:8F:E9:78:BB:D3:D1:9B:D3:62:A0:6F:61:7E:6A:02:98:48
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/dZ_wj-l4u9PRm9NioG9hfmoCmEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.49.0/24
192.54.60.0/24
192.55.188.0/24
192.108.23.0-192.108.26.255
Signature Algorithm: sha256WithRSAEncryption
55:4b:dd:fd:10:a8:a4:3f:79:40:f6:d7:6a:f1:a4:54:47:e1:
cc:b9:b2:3e:eb:f4:b7:42:95:e3:41:c8:ff:95:6d:e0:64:cf:
50:b7:6d:f8:b7:64:86:f2:e4:bb:d5:cf:fc:56:3f:1c:72:4f:
18:ae:0f:6c:06:2b:b6:28:cd:16:68:24:9b:85:88:71:aa:17:
9b:d2:f0:b8:65:a3:be:24:1f:08:ca:d3:ab:63:8f:35:9c:e6:
57:27:87:95:70:96:0c:b9:09:40:7d:73:76:fa:ce:76:8c:ff:
e2:54:70:89:ac:15:17:99:fc:a2:d5:f7:1c:da:28:3e:6e:f9:
95:22:2d:d1:ea:c5:8c:df:ac:19:4e:69:ec:6e:78:0d:c5:39:
48:15:7d:8d:3a:96:2b:b0:56:d6:84:30:94:b2:36:9f:b0:9c:
c4:b2:27:e8:c5:b8:11:fc:d3:e6:dc:bd:9d:c3:3a:46:cd:c4:
6f:78:8f:83:ce:72:07:43:cf:88:a7:c5:27:0e:a7:6a:69:d6:
f5:7b:34:36:aa:27:eb:6d:0c:21:1e:79:84:80:ea:e1:aa:b8:
0c:d9:05:17:fc:cb:7c:64:10:50:4c:5b:8a:ca:44:e8:ca:51:
48:a3:2f:67:b4:31:f9:23:e1:35:cd:53:76:83:dd:74:b5:a6:
a6:a8:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:50:09 2026 by rpki-client