Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/DZRRAdctSa4CVUBsnqANHKo8DbA.roa
File: DZRRAdctSa4CVUBsnqANHKo8DbA.roa (raw, json)
Hash identifier: dNAFaUwzL63hmLrib+niPT9WNwhu3ti4JBM4gbkcCtk=
Subject key identifier: 0D:94:51:01:D7:2D:49:AE:02:55:40:6C:9E:A0:0D:1C:AA:3C:0D:B0
Certificate issuer: /CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Certificate serial: 019F2368B3E0EC2497333C393CB674791DB8
Authority key identifier: 4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/DZRRAdctSa4CVUBsnqANHKo8DbA.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199380
IP address blocks: 193.34.62.0/23 maxlen: 23
193.34.62.0/24 maxlen: 24
193.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b3:e0:ec:24:97:33:3c:39:3c:b6:74:79:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d945101d72d49ae0255406c9ea00d1caa3c0db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:13:ad:0d:7c:16:20:5e:d0:e3:44:af:10:
04:1b:a4:c6:dc:ab:69:ca:f0:6d:13:6d:d7:f9:65:
99:4e:2e:21:b7:2a:98:ed:cc:72:fe:78:42:20:27:
f8:8d:44:82:b9:93:e6:bf:31:7d:8e:7a:92:9f:28:
9f:cc:a6:c7:80:b2:b7:9a:d1:f1:b7:ea:d3:67:6c:
ac:e1:ba:17:75:6e:39:42:4f:54:ad:1a:2e:ed:c5:
28:7a:77:95:c3:04:d7:f1:00:f3:ab:91:a8:66:d7:
07:80:48:2c:11:f3:bc:6d:75:84:d2:b5:6c:50:75:
20:ec:39:ec:a1:c1:57:1f:e7:2a:84:cf:3a:e0:b0:
ab:a8:5a:82:76:f8:08:97:b2:19:7b:f2:e7:24:b4:
70:02:ef:da:65:0b:5a:d7:c3:65:da:2d:52:3b:17:
48:5a:c2:b4:ee:78:21:07:ef:32:f3:b0:c5:c2:25:
e6:6c:e9:50:21:fa:87:eb:9f:46:a2:98:e1:36:12:
ab:d8:9d:7c:60:84:2a:71:71:2f:38:d3:61:e3:b1:
e7:ff:85:85:f3:17:02:e6:63:65:54:b0:ec:a3:4a:
85:45:80:bb:f0:c2:55:43:48:62:b0:d8:ea:b5:d7:
c8:15:74:7c:17:61:7d:5a:5d:df:5e:eb:ec:33:b4:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:94:51:01:D7:2D:49:AE:02:55:40:6C:9E:A0:0D:1C:AA:3C:0D:B0
X509v3 Authority Key Identifier:
keyid:4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/DZRRAdctSa4CVUBsnqANHKo8DbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.62.0/23
Signature Algorithm: sha256WithRSAEncryption
67:cf:cb:90:89:4d:7e:5b:a9:90:0e:ce:21:1e:45:ae:01:fc:
b3:ac:e5:1b:69:6e:3d:20:88:22:50:4e:14:ec:5f:06:1f:f7:
ee:e5:6e:7e:08:ae:6d:22:b9:a4:88:6b:fb:83:cf:0d:9c:5b:
29:e7:2b:de:ad:f6:db:7b:62:2a:de:29:d5:97:70:9e:14:03:
0a:3f:9a:b9:51:9d:5f:46:7b:18:20:fe:0e:a6:8e:c0:a2:8b:
2f:a3:f8:b6:49:d3:b7:d3:58:a1:b2:11:be:62:08:14:6d:25:
84:4b:85:97:10:64:53:93:9f:7d:11:52:b9:0a:58:c5:2f:9a:
61:4b:58:4f:c1:42:95:44:36:7b:14:d9:14:04:4f:10:7d:15:
33:52:8f:dd:7f:a5:42:31:5b:4a:69:b6:16:46:ae:aa:fb:68:
2f:b7:97:41:f9:86:97:e2:d0:39:de:de:b7:5b:c5:38:42:10:
70:e2:81:e8:c2:e3:4e:c0:04:c1:1a:68:e8:b5:49:8b:28:50:
71:f4:35:57:3f:b0:a1:5c:94:39:41:3c:75:32:7a:ef:b9:5a:
bc:0a:f0:51:d3:ba:e2:ba:a2:04:01:6f:af:63:28:71:db:13:
fe:39:30:09:99:b1:ea:39:6c:3e:e3:16:4f:f2:0d:1a:32:af:
19:17:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:36 2026 by rpki-client