Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/a_bZi_JF-htWi2WNdUEbarLHqjE.roa
File: a_bZi_JF-htWi2WNdUEbarLHqjE.roa (raw, json)
Hash identifier: 2XF8puYADeEdrWHojv63xz3QjBToR9sg7lU4Wxe4W+4=
Subject key identifier: 6B:F6:D9:8B:F2:45:FA:1B:56:8B:65:8D:75:41:1B:6A:B2:C7:AA:31
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 019CFA3B33FF2DDE8815634E762999E41B34
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/a_bZi_JF-htWi2WNdUEbarLHqjE.roa
Signing time: Tue 17 Mar 2026 05:18:29 +0000
ROA not before: Tue 17 Mar 2026 05:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 194.246.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:3b:33:ff:2d:de:88:15:63:4e:76:29:99:e4:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Mar 17 05:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bf6d98bf245fa1b568b658d75411b6ab2c7aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:14:c3:19:41:f3:a7:05:7a:6e:9d:f0:d3:
e2:fb:e9:8d:e0:81:22:68:b0:e3:b0:d7:9a:be:5d:
e1:16:4e:e2:68:95:56:f9:a2:cd:c7:5e:3b:d6:63:
53:a6:d6:b6:c8:1c:be:f5:64:a2:d7:12:9f:51:29:
de:4d:18:8b:8d:ce:12:84:0e:ca:b9:e4:29:49:e1:
47:3c:38:31:d0:0a:ac:51:3e:52:5f:51:59:c1:de:
3e:ca:88:61:03:19:84:28:08:69:bb:50:59:09:d6:
a8:4f:0f:30:87:e7:5a:d4:ec:e0:60:98:ab:51:8a:
6a:d6:72:66:38:19:06:b0:d2:f9:53:b0:5d:f8:8c:
dc:1c:ff:3e:12:a2:e5:54:4c:b8:be:e8:b6:47:9e:
11:f9:82:60:44:6e:c8:84:fe:bc:09:04:b1:07:58:
45:93:aa:6e:72:32:81:a5:ee:38:5e:1f:76:29:db:
54:58:d9:fd:fb:24:ab:f9:aa:60:68:49:93:7b:2c:
62:b7:a9:8f:3d:07:5f:69:de:fd:9a:b3:e2:13:77:
f6:f3:f0:24:7c:15:e5:32:ca:c3:96:cf:11:1c:e0:
87:e7:f6:a8:69:59:90:4a:2d:b7:79:92:6a:0b:dd:
8f:3a:32:ed:9f:58:ec:19:0a:37:6c:35:fc:96:dd:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F6:D9:8B:F2:45:FA:1B:56:8B:65:8D:75:41:1B:6A:B2:C7:AA:31
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/a_bZi_JF-htWi2WNdUEbarLHqjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.128.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e8:14:3b:0f:d2:d5:9d:41:95:c0:45:9e:d6:15:39:1b:9f:
c7:50:f3:a9:0d:0f:51:ee:96:8d:45:bc:ba:cc:5c:f2:ce:3e:
e1:d3:5b:29:6e:d8:45:2b:e8:70:bd:d8:f4:63:15:6a:fb:d0:
27:18:ad:2d:ff:74:72:48:2c:b2:c6:ba:01:aa:07:43:ed:6a:
bc:05:73:b1:21:51:6e:3d:7f:da:b5:6d:9e:82:4e:0c:ac:5c:
9b:c1:ea:24:60:49:3b:12:d2:5c:8c:f2:4b:f0:7f:b3:ae:3d:
56:a3:f1:1f:25:a4:04:81:70:47:9e:17:18:34:a6:5d:55:f1:
14:b6:10:12:35:69:f0:b1:a2:b3:e1:5a:ce:7f:ba:eb:fe:41:
8e:db:03:b9:a7:fa:f3:51:2b:87:1e:46:8e:df:93:2d:ca:e9:
32:bd:2d:76:a7:67:e7:75:be:15:ce:5f:f8:e1:63:df:f6:52:
b6:ec:f7:9c:a0:1e:2b:63:e0:2f:c7:51:df:17:4c:83:0a:43:
86:62:2f:6c:1b:ef:e2:60:c5:ab:d6:28:1c:a9:b7:5e:05:53:
4e:9d:2e:13:85:31:1c:66:e3:7e:ff:37:79:d9:0c:45:f7:d4:
98:74:ce:74:02:f3:c0:39:c5:b9:fc:31:75:0e:4e:5b:8f:51:
87:46:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:37 2026 by rpki-client