Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/blYZox4f4_vM6K9fFkD2iJsHjIQ.roa
File: blYZox4f4_vM6K9fFkD2iJsHjIQ.roa (raw, json)
Hash identifier: esJo/q3B8cKAs15RB4pxpLJXfULrwErmAwOgAdqCBIQ=
Subject key identifier: 6E:56:19:A3:1E:1F:E3:FB:CC:E8:AF:5F:16:40:F6:88:9B:07:8C:84
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A0AA344564A08A2DA4AA1202E4905A3E7C
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/blYZox4f4_vM6K9fFkD2iJsHjIQ.roa
Signing time: Wed 16 Sep 2026 12:32:27 +0000
ROA not before: Wed 16 Sep 2026 12:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 2.57.70.0/24 maxlen: 24
2.57.71.0/24 maxlen: 24
212.80.222.0/24 maxlen: 24
213.139.196.0/24 maxlen: 24
213.139.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:34:45:64:a0:8a:2d:a4:aa:12:02:e4:90:5a:3e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Sep 16 12:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e5619a31e1fe3fbcce8af5f1640f6889b078c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:6c:ec:85:a2:0a:f2:54:e5:b6:80:cf:8d:
45:f9:42:fc:e6:69:1f:5f:01:41:f9:8b:0d:66:18:
2f:e0:80:ba:7d:0c:6c:07:65:0b:a4:93:f4:e6:e4:
e7:98:70:af:d5:c5:ae:23:c5:cb:e2:1e:e9:19:e9:
59:c8:ac:41:2e:14:bf:21:3f:cd:cc:54:0f:de:c4:
ac:e7:7d:39:5f:c2:7c:96:08:68:63:60:ef:06:6b:
b0:3f:da:83:cd:75:5d:9e:d5:f3:e8:50:43:ef:b8:
03:d6:c1:5f:ec:75:76:23:4c:06:9c:8d:fb:2a:4b:
20:b0:bf:03:c7:17:e3:c2:ad:cb:e0:4e:cb:c9:9d:
66:ea:69:a5:4b:8a:73:31:2d:0f:48:1d:7a:8d:37:
0e:41:08:15:63:0d:81:2e:bb:e3:43:43:48:8b:26:
ec:a9:5e:5d:43:22:1e:69:11:b5:5d:12:2d:58:cd:
b7:0c:cc:5e:95:ec:c1:d5:fb:b7:d2:f0:7d:02:7f:
e1:4c:1e:93:ad:2a:8a:05:57:d6:8d:cb:33:7e:4a:
b5:66:c7:08:35:26:1a:c9:11:b5:e3:b1:46:65:38:
d0:3f:ed:61:2c:f9:28:1f:a7:67:93:f7:06:a3:27:
88:3d:75:23:b8:b3:1f:aa:37:55:be:30:5e:b2:58:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:19:A3:1E:1F:E3:FB:CC:E8:AF:5F:16:40:F6:88:9B:07:8C:84
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/blYZox4f4_vM6K9fFkD2iJsHjIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.70.0/23
212.80.222.0/24
213.139.196.0/23
Signature Algorithm: sha256WithRSAEncryption
68:19:af:0d:a2:2f:94:83:01:1f:77:c3:72:46:46:c3:80:3b:
17:79:30:e5:5b:88:f9:6f:fb:39:65:80:4c:72:c9:54:04:86:
71:5c:f5:55:ac:6e:52:8b:64:fa:81:2b:22:ba:04:cf:78:7e:
64:6c:55:cc:48:aa:21:1a:b5:63:bd:1f:69:65:e2:01:a6:df:
ec:77:58:49:24:fd:95:6c:dd:a3:22:9a:41:d5:0c:d3:60:ac:
14:cf:c8:37:0e:5e:60:cb:25:91:5c:b0:67:a9:6f:23:6b:b3:
c7:26:03:e3:5c:f6:d2:13:97:eb:ee:c3:1b:64:dc:c8:11:2c:
c8:4f:da:60:46:7c:ab:31:8e:92:72:25:39:d6:f7:cd:5c:b5:
2d:f6:ca:f6:e1:34:b1:58:24:ba:ee:9c:3c:2b:d3:33:48:f1:
2d:17:0a:65:44:2f:9e:88:9d:75:f0:8d:bd:9a:0e:e5:ce:ad:
e4:18:0a:3b:9d:e2:ea:94:d9:d8:30:97:87:e5:a0:b6:49:b6:
56:54:d9:ba:f3:81:f8:06:90:89:32:ac:46:a1:2c:89:d5:0c:
26:d0:0f:40:b2:c6:9c:01:80:6b:63:d1:54:af:72:4b:1c:64:
4d:35:9e:84:7d:3d:d4:d8:a8:bb:3a:53:56:9b:27:c1:45:34:
a1:92:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:56 2026 by rpki-client