Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/v_sjZEWKqFNaPolplPEIVetQcjo.roa
File: v_sjZEWKqFNaPolplPEIVetQcjo.roa (raw, json)
Hash identifier: 97bQo1K+GuO88OfR1uv4isecfgOKEhMoas5WXx3EMiE=
Subject key identifier: BF:FB:23:64:45:8A:A8:53:5A:3E:89:69:94:F1:08:55:EB:50:72:3A
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 019DCB03A3FAB47563799033F6666D962A7D
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/v_sjZEWKqFNaPolplPEIVetQcjo.roa
Signing time: Sun 26 Apr 2026 18:18:26 +0000
ROA not before: Sun 26 Apr 2026 18:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 213.179.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:03:a3:fa:b4:75:63:79:90:33:f6:66:6d:96:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Apr 26 18:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bffb2364458aa8535a3e896994f10855eb50723a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:33:af:ca:10:47:4c:a3:e0:92:09:a1:9c:
89:2f:4c:3d:a7:95:b4:a5:52:39:fa:43:2a:d1:41:
67:f7:2c:39:bc:9d:09:40:b3:3e:ca:00:01:ef:b7:
c4:74:eb:b2:de:e1:9d:4c:a9:f0:ea:b5:d5:e9:8c:
d0:a7:6e:65:a6:61:e5:d1:8f:c4:45:71:9c:06:e7:
fb:95:78:54:12:69:18:96:12:cc:20:5b:85:01:66:
a9:69:e4:2a:e7:a9:b7:3b:b0:44:ff:9b:21:7f:70:
b2:17:6f:c2:cd:8e:51:52:6a:da:b4:af:9b:c1:13:
ab:89:5d:1f:13:19:c7:52:7e:75:8a:17:a2:b2:d5:
81:77:07:ef:e2:f8:10:ab:b5:9f:5a:f6:dd:f0:00:
91:5c:e3:22:c4:3c:b7:84:7b:15:79:2f:81:90:f6:
f0:ec:f5:28:8d:1e:1e:f4:f6:49:28:c3:82:3f:40:
27:77:59:df:64:23:c5:eb:45:df:6e:b9:82:88:07:
d2:35:bb:17:38:cc:d7:60:b1:72:c4:7a:a7:85:4d:
ee:c4:6a:8b:b6:dc:ba:06:c8:76:20:c3:34:0f:a8:
a7:3e:b7:3e:f2:91:87:dd:be:4a:f9:65:40:77:c8:
af:f8:ee:d5:c5:e2:c7:0b:a6:7b:55:06:12:da:0c:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FB:23:64:45:8A:A8:53:5A:3E:89:69:94:F1:08:55:EB:50:72:3A
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/v_sjZEWKqFNaPolplPEIVetQcjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.179.70.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ea:43:21:22:9e:02:20:ae:c6:bd:3d:5e:b7:ae:94:c8:2b:
41:04:bc:7c:89:a9:81:28:18:d3:4a:b9:0e:99:59:99:61:c7:
4b:b1:c0:1f:af:1c:33:72:66:2c:e5:fb:81:84:a5:87:bd:e2:
2a:90:a8:a1:07:db:88:53:ab:b1:f8:2d:fc:a0:c8:8a:a5:49:
50:6c:0f:38:ba:5f:76:c5:85:50:81:26:09:bd:3e:03:18:e5:
67:ba:ea:2c:cc:cc:94:a8:4a:b7:f5:90:02:3f:8b:d5:aa:b6:
66:e5:2f:1e:f4:d4:5c:46:86:b5:c0:ea:3e:86:86:f1:56:7e:
4f:47:e2:87:d3:76:19:67:d5:c5:ed:d8:82:34:82:15:9f:f5:
04:cc:41:8e:ac:36:e5:e6:33:b3:b8:42:59:ee:34:ee:cb:f1:
16:89:d3:7c:0e:51:e7:14:ab:f3:53:77:01:ee:20:2e:85:55:
fd:06:d8:28:b9:2c:97:fb:1c:ba:55:8b:d6:18:06:fe:38:8e:
aa:4b:9e:1e:f9:86:66:ce:86:42:d4:b3:00:1c:ee:07:55:ac:
36:91:2f:4d:19:3e:97:48:3f:47:ae:2e:cc:6a:9a:d5:44:b6:
76:f1:a1:7e:98:d5:4a:08:7b:e6:8d:a4:c7:da:7b:3b:3f:75:
fc:15:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:25 2026 by rpki-client