Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Zd1Lvf1qb7gZEMBCBigtPmamRWA.roa
File: Zd1Lvf1qb7gZEMBCBigtPmamRWA.roa (raw, json)
Hash identifier: Vs79PJv/foTJ7vXYg3zfZI6IuYAeejVAZa9saeqATl4=
Subject key identifier: 65:DD:4B:BD:FD:6A:6F:B8:19:10:C0:42:06:28:2D:3E:66:A6:45:60
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A1154A80F60161F522F2970D308FF13063
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Zd1Lvf1qb7gZEMBCBigtPmamRWA.roa
Signing time: Wed 07 Oct 2026 07:36:06 +0000
ROA not before: Wed 07 Oct 2026 07:36:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 77.105.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:4a:80:f6:01:61:f5:22:f2:97:0d:30:8f:f1:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 7 07:36:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65dd4bbdfd6a6fb81910c04206282d3e66a64560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:27:99:11:19:bc:e6:fb:56:c9:c2:ba:73:
a5:59:8f:f7:bd:9c:d6:38:3d:74:13:e2:5d:ec:1f:
fa:ac:41:44:95:89:ec:1e:27:ee:dc:a9:c4:e2:36:
11:ac:f5:5f:60:7a:01:f2:c3:e7:5b:e5:66:11:b2:
b7:ec:16:ae:5c:ad:fe:d5:f4:db:ec:8c:dc:40:10:
0e:48:63:b4:61:0b:0e:f2:6f:f4:27:db:d1:8a:d9:
b8:89:7e:bf:d9:68:3a:a3:6a:e9:53:15:7a:ef:ab:
58:5c:00:c8:f1:cc:cd:f4:7c:86:a6:6c:6c:59:3b:
38:d3:40:da:1b:27:cf:8e:2a:69:3c:b1:df:6d:88:
0e:5f:ae:2d:cf:f9:d2:e3:ed:be:d7:bd:3f:ea:4d:
6e:3f:6a:c4:c5:df:0b:e6:80:4d:4d:72:e9:28:ef:
78:6e:28:18:c3:85:a8:c0:86:6e:fb:7d:28:c5:ca:
49:0e:96:7d:7d:4e:fa:0e:4b:72:4f:f9:c5:01:66:
84:4e:a0:f0:0e:1e:a3:62:2d:af:8d:82:a7:b2:2f:
bd:3e:9c:97:ae:e3:80:22:a8:26:0f:be:1f:f6:e5:
48:4f:da:e0:a9:da:62:df:a6:fc:6d:a3:94:87:d1:
71:e8:31:54:7e:93:66:c0:3d:46:ad:a7:fc:19:53:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:4B:BD:FD:6A:6F:B8:19:10:C0:42:06:28:2D:3E:66:A6:45:60
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Zd1Lvf1qb7gZEMBCBigtPmamRWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
84:da:19:ab:b0:85:25:c5:2e:be:8a:f2:ad:7f:c8:9a:18:9b:
22:3e:ed:49:62:8b:a9:59:52:ea:36:6c:71:b2:34:d4:59:38:
58:e9:cb:e4:3d:37:d1:21:0b:7b:5a:60:8f:9a:99:dd:ed:4f:
f5:cc:99:01:d4:e6:d6:f9:73:58:4e:03:2e:d8:98:3c:88:1f:
55:2f:69:ba:8e:95:b3:e4:a4:ab:d1:aa:ba:22:87:e2:05:7d:
ac:c3:da:b4:a6:f8:5c:ae:f5:38:c9:b8:17:dd:08:a8:a6:79:
0f:bc:d4:da:01:2e:ab:af:f0:39:a6:e8:ce:17:81:d4:5e:5f:
db:0c:ac:6b:a9:21:91:2b:df:46:47:e9:b5:eb:c4:03:2b:40:
bf:dd:b9:a5:f7:86:9d:1b:a7:0e:f5:52:49:0e:30:bb:37:7d:
9b:5b:f9:77:a8:2a:6b:e1:5c:d5:fb:4a:4c:9d:f5:f9:1e:61:
3c:7f:9c:33:5f:59:18:15:ad:15:76:30:3b:9f:17:92:65:78:
00:cf:9e:d0:c5:dd:f9:0e:19:b9:18:ad:e8:92:80:9f:6d:bc:
48:63:31:6c:5a:1d:6a:8f:bf:44:85:a2:3f:d4:30:0a:c9:e2:
10:54:13:87:b6:0f:d7:47:f5:a0:ab:ae:41:9b:de:cb:52:25:
5d:f4:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:26 2026 by rpki-client