Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/zPUFg5A2pgY3xvfiW66iHa9hfNo.roa
File: zPUFg5A2pgY3xvfiW66iHa9hfNo.roa (raw, json)
Hash identifier: dW0Ad9wpeC3A+6anjTm7ZKCvlm/fcZL5HIUg22ew0Cw=
Subject key identifier: CC:F5:05:83:90:36:A6:06:37:C6:F7:E2:5B:AE:A2:1D:AF:61:7C:DA
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 019FEAB07AF20529A8DFD68BB397AEEA83EB
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/zPUFg5A2pgY3xvfiW66iHa9hfNo.roa
Signing time: Mon 10 Aug 2026 08:01:02 +0000
ROA not before: Mon 10 Aug 2026 08:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6658
IP address blocks: 194.1.128.0/24 maxlen: 24
194.1.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:b0:7a:f2:05:29:a8:df:d6:8b:b3:97:ae:ea:83:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Aug 10 08:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccf505839036a60637c6f7e25baea21daf617cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:12:34:84:55:d0:69:e4:89:cb:b5:ed:44:
96:8e:76:a3:fd:60:ad:2e:7f:b0:35:36:df:81:f7:
cb:92:09:83:33:a5:d5:5a:90:39:95:8d:a2:64:96:
10:59:8a:c1:8e:c1:94:3e:63:ff:36:74:b1:12:bf:
b4:b9:1b:dd:cb:db:14:4b:4c:da:a3:4c:94:4a:bd:
a2:75:58:3b:61:e2:ce:97:78:21:54:50:bc:79:63:
bd:6b:46:1e:6d:b7:fc:b3:7f:52:33:5f:fd:79:20:
3f:e7:cc:0a:60:70:94:f8:9e:e0:05:be:db:14:8b:
c3:dc:44:7a:fb:2b:39:ab:cd:7c:17:19:b4:0a:e3:
14:43:be:37:b2:b2:e7:7e:6b:0b:c3:79:c2:cf:70:
ac:33:ce:6e:4f:43:16:a6:82:59:c0:4f:1a:60:e1:
d3:9f:e3:8d:55:50:61:99:9a:59:ad:88:8a:f4:7e:
e7:e6:75:a6:ea:6e:79:8b:2e:85:c1:03:a0:3c:28:
86:9b:e4:de:82:28:9a:f6:3c:0c:a8:67:9a:b5:bd:
b3:ed:f3:d5:77:f2:54:a0:32:37:0b:5d:ca:7b:a4:
ad:17:17:7b:8b:95:30:5a:d4:d3:ac:2a:08:2f:0b:
b8:82:df:1f:6b:79:cd:c3:08:f0:b4:67:5d:b3:d6:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:05:83:90:36:A6:06:37:C6:F7:E2:5B:AE:A2:1D:AF:61:7C:DA
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/zPUFg5A2pgY3xvfiW66iHa9hfNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.128.0/23
Signature Algorithm: sha256WithRSAEncryption
66:6a:05:41:75:b3:15:41:e2:d8:0a:b0:3b:5b:2e:65:d0:f2:
37:62:ba:c4:2f:9a:83:a3:94:bc:52:ab:4e:f7:18:05:e0:d0:
90:a7:a7:c9:28:4a:f4:36:46:39:f3:78:8a:34:49:ba:f9:df:
f3:33:ae:99:91:14:36:cc:9a:b8:98:5b:de:bc:f6:73:7e:7b:
d6:6f:69:55:c2:e6:3a:63:c0:ee:1b:dc:da:ab:00:b4:0a:10:
6f:0f:56:95:50:6b:db:e4:9a:d3:f4:05:54:6e:f2:b6:64:84:
b4:ea:65:52:be:bd:d8:23:3b:1d:ba:ec:ce:b4:99:93:7c:f0:
8a:d8:b5:0b:22:03:8f:de:98:ad:6b:e6:75:b6:60:2c:8b:36:
04:70:c9:e0:03:00:78:02:a2:ed:94:6b:67:a5:78:7c:f7:f0:
88:1f:01:31:5b:11:17:76:f2:2a:e9:03:22:06:66:0d:a3:1c:
a0:c3:00:57:fd:1c:9d:aa:cd:4e:4a:78:37:e2:a8:95:3a:f1:
21:d7:25:c8:90:4a:65:6b:4a:4f:39:68:09:97:62:ed:6d:7e:
0c:95:9a:7b:34:ae:8c:83:42:4c:86:ef:a1:49:c1:e4:d0:b5:
e6:3f:6a:57:6e:d9:ae:49:f8:8a:d4:c3:5a:41:e9:c4:25:19:
8a:5e:2d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/qsHryBSmo39aLs5eu6oPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0
N2U4MzkwHhcNMjYwODEwMDgwMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2Y1MDU4MzkwMzZhNjA2MzdjNmY3ZTI1YmFlYTIxZGFmNjE3Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3QSNIRV0Gnkicu17USWjnaj/WCt
Ln+wNTbfgffLkgmDM6XVWpA5lY2iZJYQWYrBjsGUPmP/NnSxEr+0uRvdy9sUS0za
o0yUSr2idVg7YeLOl3ghVFC8eWO9a0Yebbf8s39SM1/9eSA/58wKYHCU+J7gBb7b
FIvD3ER6+ys5q818Fxm0CuMUQ743srLnfmsLw3nCz3CsM85uT0MWpoJZwE8aYOHT
n+ONVVBhmZpZrYiK9H7n5nWm6m55iy6FwQOgPCiGm+Tegiia9jwMqGeatb2z7fPV
d/JUoDI3C13Ke6StFxd7i5UwWtTTrCoILwu4gt8fa3nNwwjwtGdds9aHswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMz1BYOQNqYGN8b34luuoh2vYXzaMB8GA1UdIwQY
MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct
NTA0YzhmYzIyMGVhLzEvelBVRmc1QTJwZ1kzeHZmaVc2NmlIYTloZk5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh
LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwgGAMA0G
CSqGSIb3DQEBCwUAA4IBAQBmagVBdbMVQeLYCrA7Wy5l0PI3YrrEL5qDo5S8UqtO
9xgF4NCQp6fJKEr0NkY583iKNEm6+d/zM66ZkRQ2zJq4mFvevPZzfnvWb2lVwuY6
Y8DuG9zaqwC0ChBvD1aVUGvb5JrT9AVUbvK2ZIS06mVSvr3YIzsduuzOtJmTfPCK
2LULIgOP3pita+Z1tmAsizYEcMngAwB4AqLtlGtnpXh89/CIHwExWxEXdvIq6QMi
BmYNoxygwwBX/Rydqs1OSng34qiVOvEh1yXIkEpla0pPOWgJl2LtbX4MlZp7NK6M
g0JMhu+hScHk0LXmP2pXbtmuSfiK1MNaQenEJRmKXi0A
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:12:21 2026 by rpki-client