Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa
File: FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa (raw, json)
Hash identifier: RDwp0/0oDMXql1jT9ebav+hZj67VDM98AjOHB7oE64Y=
Subject key identifier: 16:53:A3:0A:DE:0B:25:F4:3C:22:A3:75:A5:E0:9A:06:FA:80:07:64
Certificate issuer: /CN=61dac0aa861f7d72c6f25d656f031da167eda955
Certificate serial: 019E323814E585653B259707EC7E1B0F5CE9
Authority key identifier: 61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa
Signing time: Sat 16 May 2026 19:16:36 +0000
ROA not before: Sat 16 May 2026 19:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212067
IP address blocks: 83.97.72.0/24 maxlen: 24
2a13:5380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:38:14:e5:85:65:3b:25:97:07:ec:7e:1b:0f:5c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dac0aa861f7d72c6f25d656f031da167eda955
Validity
Not Before: May 16 19:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1653a30ade0b25f43c22a375a5e09a06fa800764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:fe:a1:db:68:51:12:27:05:9d:5b:26:eb:
a3:fc:05:57:e8:4e:be:1a:66:32:47:85:ef:ae:99:
ea:44:02:fe:e8:62:86:b9:37:fb:a3:d7:e3:75:8b:
58:1c:9e:cc:9f:bb:f9:9e:82:e3:ef:e8:10:87:f3:
85:19:df:ca:de:91:9f:17:f4:a6:50:36:4c:50:5f:
6e:ed:fb:f0:15:1c:21:cf:74:dd:fb:94:c4:87:44:
5c:e7:06:a6:e7:e3:8a:81:2e:cc:d6:76:b0:ec:11:
47:0b:cc:ef:23:f7:c0:19:fd:4f:66:8c:de:4a:aa:
66:a8:ae:e2:40:9d:23:fb:4d:39:df:a8:43:36:fa:
60:16:cb:0f:63:8c:f1:fe:9f:1f:50:7b:58:4e:f8:
38:45:4e:e1:b2:e4:9c:f2:32:b6:ed:83:cf:ee:a8:
bd:dc:e6:3e:53:c1:90:8f:ac:6e:b3:ac:73:6a:56:
fd:72:26:ca:76:3d:bb:3f:c6:9f:4b:db:8f:54:0f:
df:04:d3:d1:7f:86:d8:c9:20:21:02:cb:7b:41:db:
fe:a8:f2:4f:27:1d:bb:22:dc:fb:75:f0:46:2c:ea:
59:a1:30:82:de:47:c7:9d:5d:09:9a:cc:96:c2:82:
e1:47:81:0b:1b:1a:49:7e:e0:9c:49:1c:bd:2e:c2:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:53:A3:0A:DE:0B:25:F4:3C:22:A3:75:A5:E0:9A:06:FA:80:07:64
X509v3 Authority Key Identifier:
keyid:61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.72.0/24
IPv6:
2a13:5380::/29
Signature Algorithm: sha256WithRSAEncryption
51:14:f3:2e:6c:67:ed:fb:d3:7f:db:92:c8:19:db:88:9d:26:
fe:e3:90:9b:9c:78:b8:8f:56:ff:da:a6:79:14:13:8b:13:55:
a2:f5:56:6b:7e:17:e8:22:20:b2:7f:ff:12:45:77:32:8a:06:
f0:17:0b:9a:47:fa:d8:22:ff:7e:d3:4f:7d:36:ca:ca:c5:5e:
19:d0:b5:20:1f:4c:96:4a:39:24:80:ca:f9:a8:c0:3e:81:96:
e1:36:d7:0e:68:92:08:cc:96:74:4f:f3:67:47:a3:8b:0c:93:
4c:ac:e1:bd:04:7f:69:ab:e2:94:62:27:85:ef:b4:01:95:67:
ee:cd:eb:a6:ca:24:5c:80:6a:67:f7:2f:a1:2f:34:b0:72:0d:
fa:53:ab:a8:36:a6:68:c8:02:57:c1:27:6b:9b:85:ce:7d:7b:
14:60:4a:8e:82:f4:60:ea:2a:5c:b1:e6:73:39:19:63:09:48:
6d:cf:e7:f0:9b:aa:40:3d:e1:6e:82:04:27:02:c8:52:7d:51:
67:ae:1e:9a:4a:c5:d3:07:0b:2c:ad:28:6e:b6:ac:90:03:75:
d1:94:18:2c:06:e3:d9:3a:c6:08:73:24:b3:37:92:d2:7b:00:
d4:ed:56:c5:70:e6:37:9a:48:4d:b1:42:89:43:1f:91:e9:73:
c9:31:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:38 2026 by rpki-client