Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/bU3beGgV0nZVp7p7z8MN2g04ln0.roa
File: bU3beGgV0nZVp7p7z8MN2g04ln0.roa (raw, json)
Hash identifier: va4HbvsqhxTEI6Ls+Tgw6tvu2Xrv9KvXExgn7EJCncY=
Subject key identifier: 6D:4D:DB:78:68:15:D2:76:55:A7:BA:7B:CF:C3:0D:DA:0D:38:96:7D
Certificate issuer: /CN=06583395f4417ef43dc95d2f665f27d8a4df3bfd
Certificate serial: 01A0C369BD446D1C6D66C32B65E85981424E
Authority key identifier: 06:58:33:95:F4:41:7E:F4:3D:C9:5D:2F:66:5F:27:D8:A4:DF:3B:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/bU3beGgV0nZVp7p7z8MN2g04ln0.roa
Signing time: Mon 21 Sep 2026 10:01:21 +0000
ROA not before: Mon 21 Sep 2026 10:01:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 193.107.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:bd:44:6d:1c:6d:66:c3:2b:65:e8:59:81:42:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06583395f4417ef43dc95d2f665f27d8a4df3bfd
Validity
Not Before: Sep 21 10:01:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d4ddb786815d27655a7ba7bcfc30dda0d38967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:d8:ed:4e:37:01:61:aa:06:8b:74:f0:78:
0f:03:6b:04:78:d0:d0:76:85:7a:8b:6d:6d:be:34:
ca:f2:bb:6e:88:60:f0:5f:66:d3:25:24:12:7a:dc:
b4:56:32:4b:34:e2:2d:2f:b8:83:84:24:a9:ae:be:
84:89:6f:3e:94:17:05:fd:e1:63:d1:4f:7c:76:6f:
89:4d:4f:2e:e7:7d:35:b3:89:6d:d4:63:5c:b9:b5:
34:d0:84:dd:4c:7a:2a:42:79:aa:41:46:79:00:9a:
5d:6d:d7:7a:a4:49:31:92:98:72:df:bf:2d:f5:fe:
64:37:30:37:96:d6:ec:fb:74:b8:50:c6:a9:dc:ef:
bd:ef:e2:55:1b:a5:26:91:9f:20:02:9a:a9:e7:af:
82:81:9d:2b:eb:c3:23:60:ae:75:8f:6b:19:f4:71:
1f:4e:7b:b8:9f:fe:93:77:6d:b5:38:97:45:30:d2:
dc:f9:97:45:17:c8:a1:ef:6b:b9:a1:23:71:a6:57:
97:ad:42:3e:db:61:65:ff:5d:98:bc:ed:a5:d1:18:
cd:f2:93:4c:5c:90:ed:0c:de:1f:0c:f2:ea:bf:1a:
1e:bc:9a:f5:de:aa:df:27:01:c7:76:ad:20:a6:a0:
f0:9f:c2:9b:42:d4:db:fc:1c:80:62:2f:bf:67:f3:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4D:DB:78:68:15:D2:76:55:A7:BA:7B:CF:C3:0D:DA:0D:38:96:7D
X509v3 Authority Key Identifier:
keyid:06:58:33:95:F4:41:7E:F4:3D:C9:5D:2F:66:5F:27:D8:A4:DF:3B:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/bU3beGgV0nZVp7p7z8MN2g04ln0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.116.0/22
Signature Algorithm: sha256WithRSAEncryption
04:fb:77:a6:8c:ff:a9:d9:64:34:2b:19:8b:8e:df:77:c5:8e:
2c:61:73:e8:92:fa:5c:b9:dd:53:f5:73:11:26:58:55:6b:e6:
21:35:59:84:ad:67:6c:36:b2:4d:12:bb:df:2e:0f:a5:4e:ca:
bd:78:a4:08:2d:81:4a:1d:70:42:17:5d:90:3a:d9:42:94:b0:
56:c3:7c:53:e1:27:1e:bc:9f:c0:ea:35:66:37:79:f2:c7:3d:
10:1b:c9:ae:16:ce:1f:9f:3c:4d:fa:ac:71:51:38:70:48:ad:
00:f7:65:1b:eb:5d:6f:ab:6d:f8:9e:1d:e9:df:15:37:00:d3:
bb:5d:03:25:61:87:fc:1d:2b:53:f2:d5:67:a8:e3:1b:49:a9:
83:e6:24:0f:e6:26:ae:82:09:d5:98:5b:a2:f0:6f:d7:8f:07:
6b:d9:d5:46:f8:44:ee:cc:07:d6:12:a9:92:04:c7:95:b5:11:
6f:a0:e6:0d:3f:ee:3f:92:39:ee:c9:92:75:ee:9b:65:e4:7e:
12:db:68:41:6a:db:00:7b:1e:a4:df:c1:a1:95:38:df:bd:db:
0c:36:a9:21:80:6e:55:72:e3:93:17:71:74:3a:56:e7:cd:b4:
3e:ee:b5:bf:42:85:27:fc:c1:5c:05:ec:5d:48:f5:8c:3f:28:
0d:06:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:50 2026 by rpki-client