Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/0vww-Z4_zVXHcLMNjJsMQcHXTpc.roa
File: 0vww-Z4_zVXHcLMNjJsMQcHXTpc.roa (raw, json)
Hash identifier: dOMpJHCv+3Sv1nVkRTJLzmjEZf9LwutR2r+1CGv+lNY=
Subject key identifier: D2:FC:30:F9:9E:3F:CD:55:C7:70:B3:0D:8C:9B:0C:41:C1:D7:4E:97
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 019F4B160B1C9DFB47AA2E6376B65D9A4340
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/0vww-Z4_zVXHcLMNjJsMQcHXTpc.roa
Signing time: Fri 10 Jul 2026 08:12:43 +0000
ROA not before: Fri 10 Jul 2026 08:12:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39700
IP address blocks: 193.163.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:16:0b:1c:9d:fb:47:aa:2e:63:76:b6:5d:9a:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Jul 10 08:12:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2fc30f99e3fcd55c770b30d8c9b0c41c1d74e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:be:d7:e4:15:a9:a9:5c:91:e3:6c:76:a5:
48:96:99:1b:47:7e:ea:ca:8f:fb:7c:bb:83:30:e1:
24:41:21:6e:01:95:b2:16:44:44:a3:ec:04:58:5d:
35:00:a1:9c:fb:52:79:10:46:f0:05:85:e6:e3:ec:
c8:1a:64:96:1e:39:d4:bc:59:2e:43:d7:ab:db:6d:
af:19:e3:0f:40:4f:0e:38:f2:76:f3:ae:f2:11:bd:
a7:2d:c8:c0:d0:95:88:a1:b7:ba:3e:e4:64:f5:1a:
fa:25:84:17:80:67:3d:c3:a5:df:38:d4:d1:71:1f:
fe:d8:16:34:56:6b:8c:8a:68:eb:cc:37:06:3e:4b:
fb:f8:2d:56:87:73:6b:bd:dc:ca:8c:1c:d2:4c:49:
db:b6:bf:fe:78:26:21:c4:68:bd:4a:ce:d2:a5:f3:
b7:5a:d6:39:54:cc:90:b3:85:9c:72:37:b4:e5:b0:
34:5c:36:97:43:f7:ce:1a:4a:56:6c:cb:24:98:b4:
98:27:00:ea:01:e3:5a:19:39:33:50:68:ae:79:3f:
e5:2b:2b:9b:6c:45:67:95:17:24:d8:0a:81:8a:78:
21:de:3a:28:d4:45:ef:20:b1:72:92:22:e5:71:e9:
90:10:23:1c:c3:49:2f:d1:93:89:1c:2a:13:e6:08:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FC:30:F9:9E:3F:CD:55:C7:70:B3:0D:8C:9B:0C:41:C1:D7:4E:97
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/0vww-Z4_zVXHcLMNjJsMQcHXTpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.108.0/24
Signature Algorithm: sha256WithRSAEncryption
73:77:90:f1:f9:1a:65:a2:7b:62:f3:da:00:25:da:54:2b:b9:
10:e1:9e:4f:74:45:aa:95:48:dc:74:28:f2:53:da:da:82:7f:
70:7a:ad:82:54:48:dc:38:3a:96:c6:ef:3f:00:b1:11:17:bb:
b6:a3:72:ab:d3:67:fe:28:91:e2:67:aa:49:e8:7c:e0:f9:f7:
43:e4:10:a7:3c:61:e7:85:05:c0:76:f9:52:90:17:27:51:d4:
5d:d2:b6:32:cf:b9:14:8e:44:af:f4:be:92:a5:60:32:e5:2a:
dc:3e:4a:65:9d:9f:38:f5:03:59:d4:13:33:0c:a2:2a:24:d0:
39:3d:83:e8:e0:00:4b:f1:a5:13:f1:d3:d8:c5:ee:9e:59:12:
67:9e:5b:fb:82:18:90:88:8f:dd:4e:30:af:bc:e8:24:c3:c8:
63:23:0f:46:8a:41:24:44:13:80:11:82:bd:97:bc:66:e4:ea:
24:81:99:b4:80:cf:76:c1:c0:e3:0f:f1:29:b2:a4:3e:02:81:
11:58:60:06:c8:bf:55:3f:37:77:ef:59:6c:5f:b8:c5:3f:a4:
e0:ae:e5:4d:ee:36:59:3d:53:55:a3:a6:81:ba:e6:9f:a2:99:
74:b3:99:e5:05:b7:d9:7a:80:4b:db:a2:1d:08:9e:33:30:7e:
43:41:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:15 2026 by rpki-client