Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1zLCS8lFdKkzLKvcdA8pCBoudCI.roa
File: 1zLCS8lFdKkzLKvcdA8pCBoudCI.roa (raw, json)
Hash identifier: MH4PkkRK1v4iS7uwaAaOxgGOzPikLhWT5YhHg4KtNUg=
Subject key identifier: D7:32:C2:4B:C9:45:74:A9:33:2C:AB:DC:74:0F:29:08:1A:2E:74:22
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1ABF999BE356990A178BA7BC0D776C465
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1zLCS8lFdKkzLKvcdA8pCBoudCI.roa
Signing time: Thu 05 Nov 2026 13:50:24 +0000
ROA not before: Thu 05 Nov 2026 13:50:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50304
IP address blocks: 193.141.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:f9:99:be:35:69:90:a1:78:ba:7b:c0:d7:76:c4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Nov 5 13:50:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d732c24bc94574a9332cabdc740f29081a2e7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:0e:6a:9f:ed:04:b1:9f:06:a7:73:76:96:
3a:2d:d5:55:e1:18:d9:a4:50:e2:06:d0:77:73:a0:
3e:8f:0b:38:43:52:5e:d0:57:0f:03:b7:17:6a:7e:
1d:c4:b9:e9:7e:7f:e8:c4:37:f8:98:43:62:7e:49:
3c:92:f9:59:e0:ca:d0:a0:17:1c:04:43:8f:d5:04:
d7:1b:4f:da:6d:02:a2:9a:38:c0:52:76:7f:93:92:
61:02:e5:7c:53:fd:80:f4:80:ad:d2:94:f1:ec:c7:
f3:21:8a:e5:a5:3e:21:2b:89:be:dc:4f:86:33:93:
75:54:b5:8f:4f:5b:54:02:2b:c1:d0:e4:4f:c7:17:
04:87:6a:93:10:60:00:dd:bb:77:47:75:6f:e7:04:
4a:23:cf:f0:0d:7a:81:a7:30:f1:27:bb:2e:ea:d7:
78:a7:26:01:33:b2:1e:e7:94:04:0f:15:38:b6:b8:
a3:15:43:ad:c1:81:d1:ab:b2:2c:2f:08:e8:ea:e1:
31:af:9d:59:f5:f2:73:be:7e:1f:3a:7f:21:d0:dc:
71:49:85:d1:21:63:c1:5c:eb:5e:2e:5c:f8:ee:96:
56:3c:48:a5:6f:fa:f3:cf:ec:bc:99:c3:cb:af:ad:
66:b5:b8:13:2e:5a:0b:19:02:48:17:c3:45:46:11:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:C2:4B:C9:45:74:A9:33:2C:AB:DC:74:0F:29:08:1A:2E:74:22
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1zLCS8lFdKkzLKvcdA8pCBoudCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.44.0/23
Signature Algorithm: sha256WithRSAEncryption
96:30:d2:51:29:25:5d:2d:0d:45:f7:7c:b7:ab:dc:b1:22:7a:
c2:7b:37:c0:fe:29:b6:22:0f:ec:a3:16:34:09:e5:bc:b5:93:
55:f7:1b:b6:12:b3:c2:16:c9:fc:f1:a3:8c:6a:8b:75:fe:3a:
18:c1:81:f3:db:e2:dc:f8:e5:7a:ef:b6:c8:a0:fa:3d:8c:3f:
10:20:76:12:f2:d6:01:97:ee:65:f8:7c:a5:b3:52:94:fa:71:
b4:81:e6:96:9c:39:a3:f6:5d:47:86:d4:58:1e:5b:87:6a:4b:
a2:ff:69:e6:68:00:83:5d:fa:06:7f:22:4d:0c:8e:e2:f7:74:
ca:97:1e:ff:c2:bd:46:ed:8b:f8:b3:6e:83:1e:07:be:b0:08:
4c:a4:ef:1b:83:fd:e7:17:e2:fb:36:5a:a2:8b:bc:2c:96:0e:
23:c5:e6:e3:aa:94:63:a8:81:00:a1:78:b9:6e:20:b4:27:a7:
69:81:e1:32:de:77:9d:61:c2:d8:35:7d:cd:d8:e6:2b:38:67:
86:90:f7:20:e4:e4:5e:d8:e7:22:ba:94:b8:82:55:1e:f1:f8:
13:e6:62:39:01:7d:17:82:46:9c:7a:2e:11:5d:57:a8:68:70:
59:ff:8f:26:ad:3e:ca:85:2a:2d:a1:3f:c5:b1:79:09:b9:44:
59:49:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:38 2026 by rpki-client