Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/bzFosFN5ObqKTXX0o67vA-bvyEU.roa
File: bzFosFN5ObqKTXX0o67vA-bvyEU.roa (raw, json)
Hash identifier: yXoWK432d1fj4jLB5fBcuqn/7QkMmdbiVvgP3kSmafw=
Subject key identifier: 6F:31:68:B0:53:79:39:BA:8A:4D:75:F4:A3:AE:EF:03:E6:EF:C8:45
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 0199E8BFF82614313C38C565303B1E91CA19
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/bzFosFN5ObqKTXX0o67vA-bvyEU.roa
Signing time: Wed 15 Oct 2025 16:41:58 +0000
ROA not before: Wed 15 Oct 2025 16:41:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214986
IP address blocks: 193.36.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:bf:f8:26:14:31:3c:38:c5:65:30:3b:1e:91:ca:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: Oct 15 16:41:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f3168b0537939ba8a4d75f4a3aeef03e6efc845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:08:dc:fe:d9:9e:51:48:a9:2c:bd:e8:ad:
1d:57:34:62:75:d2:c5:bd:23:44:df:7c:42:2b:9f:
19:ea:bf:b3:15:77:26:6b:c2:cd:96:a9:d0:a4:b1:
7a:9f:43:0a:7c:30:f6:8e:49:3d:62:ec:60:a9:b5:
72:f8:c9:d8:3d:a5:d5:60:46:55:ae:81:e3:91:6e:
04:8c:4d:b3:fe:96:9b:bc:70:9d:98:11:0e:2f:d8:
0c:ff:ed:13:5f:44:e2:36:47:52:70:71:52:c9:09:
99:b7:28:91:7b:d1:91:f8:0b:12:f2:c9:19:24:d4:
9b:c8:eb:ab:28:cd:51:d5:40:58:02:06:4a:9b:41:
99:e4:59:6a:fa:d6:14:84:bc:4e:82:48:96:68:31:
9f:bf:19:19:eb:fd:52:97:8d:04:ca:ce:67:92:73:
89:a2:84:6d:fc:97:e2:53:bf:65:b6:de:42:d0:69:
23:75:37:21:29:94:83:ac:10:2a:29:59:bf:7f:a9:
47:b8:37:40:3b:2f:74:b3:fb:9b:ca:34:2b:4e:42:
bd:52:79:46:61:1e:c3:95:37:d5:51:b2:31:08:12:
46:59:e6:ac:67:a2:79:f6:93:56:2b:41:85:af:73:
b5:63:b1:71:b4:6e:4e:9f:89:85:2c:32:16:11:35:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:68:B0:53:79:39:BA:8A:4D:75:F4:A3:AE:EF:03:E6:EF:C8:45
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/bzFosFN5ObqKTXX0o67vA-bvyEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.226.0/24
Signature Algorithm: sha256WithRSAEncryption
62:aa:05:38:98:8a:bb:7f:b5:41:0b:73:b2:10:85:e3:5c:ef:
ba:d9:f0:07:70:a9:78:fd:3c:ac:fd:e7:5f:83:80:cf:1f:bc:
c7:62:ee:59:95:7d:d5:96:2e:58:87:37:8b:c5:26:db:5a:27:
e0:95:52:c8:d5:e8:e9:3c:b5:1f:fb:fe:50:30:02:8e:d8:3e:
fb:d1:40:44:f2:41:2b:7c:f3:06:f0:0a:57:b1:92:ed:59:d6:
f3:26:cc:c8:65:60:76:9a:30:ad:33:84:33:b3:d0:8b:28:0a:
1c:20:a3:af:9d:cb:06:c1:51:04:aa:66:3c:76:26:3f:3d:16:
e2:45:a5:37:94:55:bc:9b:c0:c8:8b:d6:7e:56:f9:cf:cf:5c:
cd:59:8a:c8:73:fa:27:96:2a:95:d2:9d:f2:99:bd:cd:2b:b6:
44:2a:2f:fa:cd:49:53:65:47:89:60:29:1c:77:5a:02:bd:7e:
48:53:51:5c:73:59:11:f0:55:4a:b4:07:b4:09:84:15:17:c8:
45:96:eb:ad:e5:c6:0f:ec:15:0a:34:b9:d9:34:48:e8:54:b7:
da:80:c2:5e:54:8e:fd:85:a0:71:98:4a:3e:3d:66:b4:95:ae:
3f:9a:29:90:0c:2d:b3:85:44:a7:e6:8f:7d:aa:c0:c5:62:96:
6b:36:76:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnov/gmFDE8OMVlMDsekcoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi
MzYxMTYwHhcNMjUxMDE1MTY0MTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjMxNjhiMDUzNzkzOWJhOGE0ZDc1ZjRhM2FlZWYwM2U2ZWZjODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPwI3P7ZnlFIqSy96K0dVzRiddLF
vSNE33xCK58Z6r+zFXcma8LNlqnQpLF6n0MKfDD2jkk9YuxgqbVy+MnYPaXVYEZV
roHjkW4EjE2z/pabvHCdmBEOL9gM/+0TX0TiNkdScHFSyQmZtyiRe9GR+AsS8skZ
JNSbyOurKM1R1UBYAgZKm0GZ5Flq+tYUhLxOgkiWaDGfvxkZ6/1Sl40Eys5nknOJ
ooRt/JfiU79ltt5C0GkjdTchKZSDrBAqKVm/f6lHuDdAOy90s/ubyjQrTkK9UnlG
YR7DlTfVUbIxCBJGWeasZ6J59pNWK0GFr3O1Y7FxtG5On4mFLDIWETV/rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG8xaLBTeTm6ik119KOu7wPm78hFMB8GA1UdIwQY
MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt
NGI5NTI5YjQ4Y2VhLzEvYnpGb3NGTjVPYnFLVFhYMG82N3ZBLWJ2eUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh
LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSTiMA0G
CSqGSIb3DQEBCwUAA4IBAQBiqgU4mIq7f7VBC3OyEIXjXO+62fAHcKl4/Tys/edf
g4DPH7zHYu5ZlX3Vli5YhzeLxSbbWifglVLI1ejpPLUf+/5QMAKO2D770UBE8kEr
fPMG8ApXsZLtWdbzJszIZWB2mjCtM4Qzs9CLKAocIKOvncsGwVEEqmY8diY/PRbi
RaU3lFW8m8DIi9Z+VvnPz1zNWYrIc/onliqV0p3ymb3NK7ZEKi/6zUlTZUeJYCkc
d1oCvX5IU1Fcc1kR8FVKtAe0CYQVF8hFluut5cYP7BUKNLnZNEjoVLfagMJeVI79
haBxmEo+PWa0la4/mimQDC2zhUSn5o99qsDFYpZrNnbu
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:27 2025 by rpki-client