Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa
File: v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa (raw, json)
Hash identifier: iLCA29fFNiihWmOcKz9zvu1/0ED29J1vmWFbLXrkxSk=
Subject key identifier: BF:F4:8B:9F:AC:3A:97:69:A0:8E:B4:37:2D:A6:77:45:B2:F0:1F:7C
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 019CD8C9D2731F76108F4E36BEA7E57024B4
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa
Signing time: Tue 10 Mar 2026 17:27:11 +0000
ROA not before: Tue 10 Mar 2026 17:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60207
IP address blocks: 193.105.141.0/24 maxlen: 24
193.105.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:c9:d2:73:1f:76:10:8f:4e:36:be:a7:e5:70:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Mar 10 17:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bff48b9fac3a9769a08eb4372da67745b2f01f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:80:e7:a1:ae:cf:d6:08:bc:c0:19:10:49:
b6:d4:a6:51:20:11:e3:98:73:ec:eb:6e:15:93:ae:
7a:98:0c:62:ee:30:19:aa:fe:6e:f1:05:e6:1f:43:
44:bf:6d:77:22:76:60:2b:0f:c6:94:71:8f:c8:1c:
d0:59:50:3f:3c:69:ec:29:8f:d8:ef:20:bf:7d:12:
47:55:bd:a5:85:65:bf:4b:d1:95:af:02:b2:87:c8:
cc:c2:c9:04:6d:e8:be:87:c0:ad:8c:3c:77:57:09:
5f:c5:ee:10:0e:fb:a4:3c:15:6d:ea:2f:4e:8f:27:
48:8a:1f:e8:76:11:56:ed:fb:51:18:a6:d2:27:d5:
b2:9b:76:d2:6a:f0:fc:fb:67:10:4d:d2:45:fd:87:
e9:db:7f:fd:31:9b:cf:5e:3f:44:50:46:89:9b:35:
e4:98:22:95:3e:e8:88:95:e0:fc:77:4c:b5:1f:4c:
02:cd:ff:a9:38:61:6a:df:17:22:dd:7c:e6:a7:66:
ce:6e:7a:a1:93:cd:b8:2b:5c:d8:63:49:0d:39:e7:
46:20:ca:41:e8:2e:5a:5b:7f:b6:a2:ad:0b:1d:42:
59:8b:a7:47:c9:7a:94:37:44:7e:41:f7:cc:ce:4e:
43:c6:4c:67:41:b1:28:39:c4:79:f7:9f:ab:cf:b4:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F4:8B:9F:AC:3A:97:69:A0:8E:B4:37:2D:A6:77:45:B2:F0:1F:7C
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.141.0/24
193.105.151.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f5:62:f5:6e:f2:e5:4d:d5:1a:ae:61:79:70:01:fc:c4:7e:
6e:27:2d:4a:33:aa:9e:db:0a:12:ea:ae:62:95:fc:63:a4:cc:
23:fe:cd:e8:18:d7:53:28:30:2e:e2:2a:a8:08:1a:1b:f6:28:
3d:e3:e8:bb:09:b6:4f:43:d9:d3:78:50:f2:18:5c:03:24:87:
4c:87:d0:48:55:08:67:55:5f:27:61:b1:82:a8:78:61:ad:76:
55:b2:35:ae:c1:cc:bf:98:b9:c7:aa:58:b8:68:cb:0b:99:f6:
41:fb:49:2b:59:62:3d:d8:d8:17:66:fc:ef:a6:16:2b:2e:7f:
0a:f7:3c:19:d8:25:1c:ba:9d:e2:b0:68:82:ea:1d:d8:a5:14:
27:4e:bd:c4:5d:33:24:49:ec:c9:d5:71:9c:4d:bd:67:91:ad:
95:5a:d8:25:7c:d2:9b:b1:30:c3:65:a0:5f:f6:ef:bd:cf:34:
6e:b4:57:d2:6e:d7:f6:0c:79:65:54:ee:2e:0a:51:ee:d7:d8:
e6:bb:23:92:55:2b:a2:f3:d6:fe:de:78:96:3b:7a:2c:4d:74:
91:f9:ac:b0:eb:59:a4:fb:fb:a1:53:43:58:af:c9:4b:39:69:
97:8f:b6:8b:f0:6d:0d:9c:4d:ba:d5:c9:e6:21:1e:88:51:d8:
b3:c4:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:34:03 2026 by rpki-client