Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa
File: 1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa (raw, json)
Hash identifier: GrViIOEvWT4Zxt5MGwjrExDSBv8BFYP8ZQ7BXiEbrRA=
Subject key identifier: FA:36:7E:A9:82:EA:02:12:30:88:FA:61:E5:ED:E0:15:43:1B:E6:74
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019E11E84AF9A2022FE47D6782B420678E6A
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa
Signing time: Sun 10 May 2026 12:41:36 +0000
ROA not before: Sun 10 May 2026 12:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 185.255.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:e8:4a:f9:a2:02:2f:e4:7d:67:82:b4:20:67:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: May 10 12:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa367ea982ea02123088fa61e5ede015431be674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:7e:99:f4:9b:36:ae:ec:2c:19:90:1b:38:
4c:68:bb:b5:22:2f:b2:69:3f:ff:46:58:a3:8b:93:
e5:bb:db:9e:b8:9e:07:25:5b:b3:81:f7:6f:f2:f7:
b5:8c:37:34:07:8d:31:95:f9:54:ca:9b:32:87:8a:
96:d5:0e:08:a4:ff:2b:96:5a:86:4c:cb:34:9c:1d:
73:f2:26:4f:9b:9a:ca:8b:4d:d8:46:c5:5b:fa:78:
3a:69:46:c8:20:d3:fb:70:7f:70:41:aa:eb:7b:9d:
ce:c7:8a:7b:9c:bc:0f:87:c0:94:ec:07:de:2e:08:
b4:36:1c:01:ed:66:99:0e:a0:a1:4d:6b:e8:03:06:
0e:b5:a4:3c:3b:45:d0:7c:eb:a4:4e:9b:45:a7:31:
42:1b:18:f7:c8:69:90:5d:8a:6f:21:8c:98:1a:f2:
31:ed:c1:f9:2e:c9:7c:08:47:91:2f:13:b0:66:e8:
66:e5:4a:df:bf:d4:49:61:b5:2c:47:5f:00:47:6f:
f6:5c:9d:b5:b5:bc:e2:e2:ed:e3:45:26:f1:89:92:
b4:c1:d6:51:85:7a:97:c5:72:fc:8b:1c:e5:e8:29:
fe:19:c1:5c:5d:41:a1:71:15:8e:98:1f:f8:a3:b4:
43:07:1d:d2:56:59:ba:5c:6e:93:60:22:63:16:a2:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:7E:A9:82:EA:02:12:30:88:FA:61:E5:ED:E0:15:43:1B:E6:74
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:39:73:ef:e4:fd:06:bd:28:a7:00:fa:6c:dd:fb:40:8d:d6:
40:b3:1a:7f:74:a6:3d:28:4e:50:07:ce:49:87:5e:2b:34:6a:
2d:57:e8:df:f3:12:ed:f9:5f:22:e0:6b:bf:ff:5b:7e:85:bc:
2d:56:d1:c2:fe:25:c7:ae:e1:f3:7e:88:20:36:6f:d0:20:a1:
6c:15:05:ab:1b:1e:59:f9:5b:67:e5:66:31:8d:11:40:dc:b4:
28:03:f6:cc:07:39:77:b6:7d:06:78:49:a5:bb:64:24:33:92:
85:2d:05:91:c3:2b:87:14:90:ce:d6:d5:60:46:1f:a1:5e:4e:
29:9c:61:aa:c8:4b:4f:78:75:1a:01:30:fe:bd:46:54:dd:b5:
82:b0:80:d0:3f:71:cb:15:a2:dc:5a:d9:a3:e9:a2:b8:bf:59:
28:bd:6f:77:fc:51:a8:67:1c:f0:93:ea:69:e2:55:6c:ba:b2:
72:73:71:01:bb:b0:99:5d:28:fc:ce:64:58:2b:e5:17:ab:db:
59:db:dc:61:87:f3:d4:ea:8e:24:c8:4f:cc:c0:cf:f8:d4:b9:
64:ea:92:86:44:5a:9a:48:a0:be:ef:44:b2:8a:12:2c:9f:6c:
7c:df:cf:c4:67:63:f6:67:50:e8:af:3b:b8:71:f8:5b:c4:df:
8b:cf:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:20 2026 by rpki-client