Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/BAZ0FnaaVytQZOkZ4fspuOiPPCg.roa
File: BAZ0FnaaVytQZOkZ4fspuOiPPCg.roa (raw, json)
Hash identifier: FYuNFRgpem1nIyN04S6XqEZK2vzBKNkZv0k48zdRy0Y=
Subject key identifier: 04:06:74:16:76:9A:57:2B:50:64:E9:19:E1:FB:29:B8:E8:8F:3C:28
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A07C8B05484717B3BB73B2D64DF336D313
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/BAZ0FnaaVytQZOkZ4fspuOiPPCg.roa
Signing time: Mon 07 Sep 2026 15:44:40 +0000
ROA not before: Mon 07 Sep 2026 15:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 61.14.226.0/24 maxlen: 24
185.213.16.0/24 maxlen: 24
193.176.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:8b:05:48:47:17:b3:bb:73:b2:d6:4d:f3:36:d3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 7 15:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04067416769a572b5064e919e1fb29b8e88f3c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:04:f4:1f:ed:c1:87:e7:94:fb:d4:df:25:
31:52:31:fd:0d:01:a0:1e:03:99:18:b5:d7:4e:a0:
13:f6:a8:38:a2:d1:8b:44:26:78:70:ba:c5:bb:c1:
58:8b:7b:55:6f:d0:7d:66:69:75:b3:f5:07:5a:55:
b2:83:26:fe:b0:cb:a2:a5:89:ae:80:97:c5:28:d8:
6c:78:3e:c3:b5:c1:59:a0:f5:04:b3:c6:5d:ff:6c:
1b:8c:af:a2:dd:0f:1b:1e:ef:61:bd:a7:9e:08:c0:
aa:0a:0d:e8:ce:1e:97:ce:9f:e2:e7:71:fd:7a:2b:
b3:5c:35:a9:e0:16:c4:ca:46:05:3d:8b:7f:46:2b:
cf:fc:5a:d2:ab:0c:e1:12:22:ec:8d:58:37:45:01:
fd:e8:84:28:f2:a8:66:45:7b:1c:91:14:b3:f4:1b:
63:c2:e0:6f:fe:41:ac:6f:53:29:fd:cd:0e:c2:2c:
0f:a0:4c:43:0f:70:79:69:1a:1f:6d:29:ba:a0:d0:
7b:ca:7b:5b:82:ef:e9:51:0e:3f:70:60:0d:22:e6:
90:82:d7:fe:ca:1d:54:d9:3f:59:e2:d4:10:90:9c:
b1:db:01:d2:f5:e8:c0:ed:06:b8:a8:8a:8e:71:2c:
73:94:00:3d:4c:85:6b:22:87:3d:89:8f:52:6b:05:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:74:16:76:9A:57:2B:50:64:E9:19:E1:FB:29:B8:E8:8F:3C:28
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/BAZ0FnaaVytQZOkZ4fspuOiPPCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.226.0/24
185.213.16.0/24
193.176.117.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2c:21:ba:a6:3d:3d:b3:77:ab:00:36:60:46:20:af:3f:06:
eb:11:3f:2d:ef:74:6e:81:58:31:a1:ed:1d:fe:b6:b8:a7:12:
ac:75:d4:7d:7b:49:b2:7d:60:22:6d:e3:f7:fd:8a:29:00:dd:
65:5a:13:c6:04:93:48:47:a7:47:55:f5:e6:39:8f:6c:f0:93:
ba:96:ab:60:57:66:0c:75:1d:99:2f:c7:e3:7d:48:c6:3c:56:
f8:dd:2e:d2:fe:95:d2:db:30:44:95:3b:36:08:d1:14:7e:1b:
f8:c7:89:ef:c5:8b:6d:7a:27:15:6b:7f:ff:83:c6:72:16:9c:
aa:50:13:ad:0b:98:0c:67:d0:ad:72:b6:3c:0b:45:7f:1c:6f:
c0:08:21:52:22:99:ce:57:49:eb:6d:60:f0:29:5c:f8:26:e9:
fb:67:c0:47:4c:15:96:e7:45:6f:3e:99:86:42:f5:28:19:cf:
06:c4:24:b9:7c:81:57:a0:71:0a:84:f2:87:b2:be:90:a1:c5:
37:9f:8b:69:fb:7f:e9:24:ec:65:75:47:7c:bc:21:84:3f:27:
d0:8f:63:52:96:8e:bd:0f:c0:99:4b:90:cf:33:10:c3:76:b5:
45:74:5d:90:a0:d9:e0:bb:b5:a4:76:ff:57:12:a3:43:92:8b:
f2:33:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:59 2026 by rpki-client