Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/vZK02KbzwVRGi2dC-9QkubqQgbM.roa
File: vZK02KbzwVRGi2dC-9QkubqQgbM.roa (raw, json)
Hash identifier: MBCgvZEuhKwH2+MDiEVq/rFuEUra8cPc3evnj5Tch+8=
Subject key identifier: BD:92:B4:D8:A6:F3:C1:54:46:8B:67:42:FB:D4:24:B9:BA:90:81:B3
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019ED1E0E253B28F858562E280E18CA06561
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/vZK02KbzwVRGi2dC-9QkubqQgbM.roa
Signing time: Tue 16 Jun 2026 19:20:36 +0000
ROA not before: Tue 16 Jun 2026 19:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210509
IP address blocks: 194.39.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:e0:e2:53:b2:8f:85:85:62:e2:80:e1:8c:a0:65:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jun 16 19:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd92b4d8a6f3c154468b6742fbd424b9ba9081b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:e0:8f:4c:75:30:a8:cd:4f:68:6f:08:45:
a2:03:51:e7:e8:97:b1:86:9c:3f:0d:dd:0c:3b:42:
e0:fd:f6:2b:05:8b:58:b4:e8:0b:be:7e:5a:2f:26:
75:06:27:8f:fa:4e:e1:31:22:c7:5a:ba:66:5a:ed:
be:ea:a3:43:2e:6f:5d:b6:fd:cc:1e:99:00:1d:4e:
49:ef:d0:34:fc:82:7f:68:e6:2e:72:9d:17:35:b3:
d5:ae:f3:b8:5b:1d:70:10:7c:a1:de:ae:b4:cc:d8:
cd:a1:d9:8d:2e:73:4e:06:5f:63:28:a5:bc:37:69:
c3:57:6a:a6:56:d5:4f:8b:6f:4e:7b:b2:bd:ec:59:
08:f9:ae:67:36:b3:69:17:c1:ae:71:c8:04:13:4a:
07:a0:f1:45:1c:93:ea:49:c3:ce:ad:33:d6:0a:67:
43:65:49:8c:70:58:46:4e:e8:5e:84:ca:40:4a:ad:
01:af:8d:c0:da:6a:55:92:c8:19:f6:3d:d9:1b:40:
39:c7:82:1d:c4:3d:50:d2:98:b8:e7:01:5a:89:d0:
cb:85:b3:28:7c:ad:70:9c:40:5a:11:13:5a:39:92:
e8:55:e7:b6:1a:fa:16:1a:4a:95:d5:30:9a:f8:79:
da:f3:7a:39:ec:a5:2c:9e:ce:2c:40:20:51:ac:e1:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:B4:D8:A6:F3:C1:54:46:8B:67:42:FB:D4:24:B9:BA:90:81:B3
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/vZK02KbzwVRGi2dC-9QkubqQgbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.230.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7a:02:2b:c8:87:37:d3:f9:29:84:97:d2:05:12:58:e5:ae:
3b:f6:34:94:0d:b6:7e:c4:32:a6:14:4d:bc:26:39:55:ee:73:
2e:c0:0d:9c:e7:4a:55:dd:2e:ff:21:b5:50:63:50:5e:0b:e9:
ce:b2:3a:e4:6a:8a:ee:4a:0d:e2:b3:59:8c:b2:1c:c0:2d:7c:
35:b1:9a:2c:b4:e6:35:01:74:38:19:87:38:9e:8a:37:42:d4:
15:b2:09:ea:cb:2e:53:a6:7f:2a:c5:72:b8:f8:0d:4c:7e:a3:
b4:1e:a5:7f:11:15:e3:c4:f7:41:70:4f:d8:9d:e7:35:15:17:
e5:b5:d2:c5:9c:27:39:4c:06:27:76:20:e1:92:8d:c7:b1:3b:
bc:e5:98:6b:85:15:f9:6f:aa:88:93:ad:29:11:db:96:fc:4c:
08:7f:5a:74:b6:27:e2:48:96:29:6b:93:f8:d7:77:1d:d3:3a:
39:ad:c5:60:21:37:bb:32:6f:06:fa:99:86:7f:bb:8f:4d:7d:
56:b9:ac:b2:bb:b5:db:21:4e:d1:d3:8b:15:3e:81:ab:07:6c:
e6:3d:6c:18:ec:c2:06:64:b4:39:f2:4c:0b:f9:ff:6e:f5:0c:
be:28:6d:68:cf:5d:ab:50:7e:36:65:2e:df:ad:2c:cf:da:8b:
ab:f6:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:25:11 2026 by rpki-client