Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/BKpDyhprbR3qOgI8XVdXG53_Xoc.roa
File: BKpDyhprbR3qOgI8XVdXG53_Xoc.roa (raw, json)
Hash identifier: plE0GQH5A+MXM6F8uLVbKyzdqxTFAnbM9Z+eYKUfzks=
Subject key identifier: 04:AA:43:CA:1A:6B:6D:1D:EA:3A:02:3C:5D:57:57:1B:9D:FF:5E:87
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 01A0B3B1C59C9063CB0E3517D3CC17C73E0B
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/BKpDyhprbR3qOgI8XVdXG53_Xoc.roa
Signing time: Fri 18 Sep 2026 08:46:07 +0000
ROA not before: Fri 18 Sep 2026 08:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35362
IP address blocks: 37.17.240.0/22 maxlen: 22
95.158.0.0/18 maxlen: 18
2a07:1080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:b1:c5:9c:90:63:cb:0e:35:17:d3:cc:17:c7:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Sep 18 08:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04aa43ca1a6b6d1dea3a023c5d57571b9dff5e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:c6:10:b4:b7:61:d3:6f:5c:27:cf:71:a6:
bf:b8:bb:2d:c7:86:b8:74:11:ce:39:d9:af:0a:d0:
a5:78:8c:76:36:d2:4d:f9:d0:73:36:6e:f3:27:c4:
b4:1e:51:38:d0:68:97:be:72:7f:72:76:b8:91:56:
d6:72:56:88:16:b1:66:56:a1:d5:ee:29:96:f9:de:
d5:71:e1:84:87:f9:4a:f1:ea:b6:05:64:4d:07:1c:
7c:09:5b:6c:73:ae:42:73:7a:36:20:e6:0f:b6:a4:
bd:7a:9c:84:23:d8:01:57:17:a6:d1:84:ba:9a:8b:
50:52:40:07:6f:63:e8:aa:57:b6:b4:21:86:31:12:
8e:37:aa:bd:52:26:19:4d:1b:3e:c3:75:67:d4:25:
b5:fd:ed:d6:d3:94:6e:7e:53:21:08:90:d2:c5:d2:
e4:ec:1c:61:d7:25:4e:0e:70:80:17:a3:86:99:15:
a2:ce:82:b5:e5:d9:c7:23:0c:eb:ea:26:3f:0c:cb:
dc:85:ac:8e:d3:46:19:98:c8:5a:4a:e5:4f:d8:57:
f8:8b:81:06:4d:ee:ce:86:bd:19:9a:08:92:ae:88:
0b:ba:bc:2e:df:4d:a5:42:e2:2e:62:61:8f:08:4c:
97:dc:68:ea:29:9f:bd:f5:a1:32:41:f2:46:d8:a1:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:43:CA:1A:6B:6D:1D:EA:3A:02:3C:5D:57:57:1B:9D:FF:5E:87
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/BKpDyhprbR3qOgI8XVdXG53_Xoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.240.0/22
95.158.0.0/18
IPv6:
2a07:1080::/29
Signature Algorithm: sha256WithRSAEncryption
86:f2:54:68:3d:32:53:e0:b3:b4:6b:cf:be:48:f1:54:fe:58:
ff:5d:9f:42:b2:b5:cf:38:e8:af:ce:f8:3b:9c:0d:7d:47:85:
05:b1:70:74:15:a5:bd:d4:6b:42:4f:1e:bc:4e:28:50:33:a2:
a8:82:01:da:e7:8d:83:ae:84:3f:33:12:fc:18:e5:f4:56:05:
74:28:c2:be:51:40:55:b7:a8:76:6f:53:33:03:3d:2f:e6:6d:
30:92:84:d9:96:15:09:b4:cb:83:17:28:4e:26:bd:28:fd:e7:
ca:d6:54:5b:66:f4:57:d9:0b:a6:26:8a:45:28:26:67:14:7e:
93:f1:b5:0d:a1:46:89:d4:8b:d8:2c:0c:3f:4c:e3:0b:43:ba:
01:8a:0b:2e:74:22:bd:61:7f:30:90:4b:23:59:c1:c8:85:f1:
23:31:85:f3:2b:61:cb:95:1b:35:c1:9f:41:cd:7e:c2:e5:ee:
51:f8:43:11:b2:c4:3a:ce:f7:11:09:d6:aa:f2:00:e8:8a:8a:
d0:91:9a:c7:e2:7e:28:cd:f1:75:f6:f0:d7:5c:2b:91:d7:cb:
ba:88:64:df:4b:97:86:a2:ff:84:a3:8b:34:39:65:34:77:e1:
10:84:5b:e8:86:5b:22:d6:45:d9:e9:f1:ad:d2:7d:97:34:d0:
99:29:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:58:30 2026 by rpki-client