Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa
File: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (raw, json)
Hash identifier: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=
Subject key identifier: 75:9F:EF:DC:C7:3F:8D:A5:97:B8:17:B7:05:7B:D0:14:F2:C4:B9:05
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019EA62E90F7842FBE4D00299DBC2D186219
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa
Signing time: Mon 08 Jun 2026 07:42:09 +0000
ROA not before: Mon 08 Jun 2026 07:42:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12816
IP address blocks: 129.187.0.0/16 maxlen: 16
141.40.0.0/16 maxlen: 16
141.84.0.0/16 maxlen: 16
192.68.211.0/24 maxlen: 24
192.68.212.0/22 maxlen: 22
2001:4ca0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:2e:90:f7:84:2f:be:4d:00:29:9d:bc:2d:18:62:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Jun 8 07:42:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759fefdcc73f8da597b817b7057bd014f2c4b905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:9b:82:03:3f:01:b0:9f:4c:53:7b:9f:7c:
93:1c:2b:19:14:bb:8f:1f:ca:ac:b6:40:d6:87:77:
62:c1:f0:75:33:76:34:bb:ee:3e:46:3c:75:d9:42:
fa:40:86:6c:bd:bd:16:0a:e0:71:0e:cb:0a:46:1c:
d3:d1:d0:cd:a5:0c:7e:67:96:0c:04:4e:ec:91:1b:
b9:07:5f:45:40:49:49:ef:15:ef:52:e0:d8:52:4b:
b8:54:0a:a4:ad:d0:b8:6c:24:2b:48:a2:78:b1:43:
18:1a:eb:2c:a0:e0:a0:38:69:7a:79:4c:b3:05:60:
2f:1a:86:46:be:fe:d6:45:d8:6d:5d:f8:a4:7e:7d:
bf:cd:fe:d5:d7:38:ea:61:70:62:58:a5:6c:75:7c:
bc:af:02:5c:51:02:56:e2:87:19:5f:91:9c:c7:18:
04:b3:91:98:60:80:69:30:8c:86:77:86:f3:48:73:
3d:68:39:7d:a8:0c:0c:91:dd:c1:8e:64:ea:32:38:
40:8f:d8:dc:a0:66:65:df:83:e2:e4:96:28:00:3d:
a4:15:1a:2b:93:e4:bd:fc:95:8b:2e:09:5c:a6:46:
e1:aa:c2:37:e6:12:ed:a0:96:05:70:8a:e2:ee:74:
e5:a7:dd:e4:15:cf:0d:2a:d8:e1:51:c4:6f:95:bc:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:EF:DC:C7:3F:8D:A5:97:B8:17:B7:05:7B:D0:14:F2:C4:B9:05
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.187.0.0/16
141.40.0.0/16
141.84.0.0/16
192.68.211.0-192.68.215.255
IPv6:
2001:4ca0::/29
Signature Algorithm: sha256WithRSAEncryption
06:20:88:47:84:fc:0c:80:ec:6b:47:d0:69:c6:9b:c5:19:a4:
5a:df:44:73:a4:5c:db:eb:5a:e5:dc:b2:0c:5d:08:68:b9:4e:
73:96:25:98:d3:02:7d:17:66:c8:89:0d:d8:17:df:8c:da:39:
32:09:97:33:6c:42:3f:e6:88:b9:a8:75:0a:61:8f:2f:95:51:
ae:a7:f7:38:6d:4b:bd:e9:46:05:a7:94:03:a1:21:0a:09:26:
e6:76:f6:e0:dd:6d:45:52:04:4e:e9:f3:26:b3:3e:78:b6:fc:
53:37:6e:be:05:92:69:2f:ea:57:ec:d1:3a:79:3b:01:5a:3b:
8a:51:f4:97:fe:b3:86:7f:86:42:f9:97:41:9c:42:90:a4:61:
43:8a:9d:0a:90:18:5c:3d:b8:79:d6:e0:f3:e1:01:60:c8:de:
16:d4:35:59:13:f4:79:bb:79:bf:d3:7e:fa:70:93:2b:e9:00:
bf:73:28:77:af:10:a7:3b:be:42:0d:94:28:f5:13:0f:ff:10:
67:4a:5e:c9:75:0c:f7:52:7b:ba:15:60:20:4e:62:25:42:fe:
38:b6:2b:b3:42:c0:72:21:d0:13:74:94:32:d8:d3:e2:5f:fe:
d4:ec:2e:5d:36:d4:76:21:bb:7e:7c:64:ad:dc:8f:7c:a6:33:
06:8a:d5:38
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ6mLpD3hC++TQApnbwtGGIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE3OTljNmE2NjM0MzlkNzQ0NTBkZmIzODk5MzU3MWY5
OGUxNWQwHhcNMjYwNjA4MDc0MjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTlmZWZkY2M3M2Y4ZGE1OTdiODE3YjcwNTdiZDAxNGYyYzRiOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8GbggM/AbCfTFN7n3yTHCsZFLuP
H8qstkDWh3diwfB1M3Y0u+4+Rjx12UL6QIZsvb0WCuBxDssKRhzT0dDNpQx+Z5YM
BE7skRu5B19FQElJ7xXvUuDYUku4VAqkrdC4bCQrSKJ4sUMYGussoOCgOGl6eUyz
BWAvGoZGvv7WRdhtXfikfn2/zf7V1zjqYXBiWKVsdXy8rwJcUQJW4ocZX5GcxxgE
s5GYYIBpMIyGd4bzSHM9aDl9qAwMkd3BjmTqMjhAj9jcoGZl34Pi5JYoAD2kFRor
k+S9/JWLLglcpkbhqsI35hLtoJYFcIri7nTlp93kFc8NKtjhUcRvlby5MwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFHWf79zHP42ll7gXtwV70BTyxLkFMB8GA1UdIwQY
MBaAFJcaeZxqZjQ510RQ37OJk1cfmOFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMt
YTJlZmFlM2Y5Y2FiLzEvZFpfdjNNY19qYVdYdUJlM0JYdlFGUExFdVFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMtYTJlZmFlM2Y5Y2Fi
LzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwMAgbsDAwCN
KAMDAI1UMAwDBADARNMDBAPARNAwDQQCAAIwBwMFAyABTKAwDQYJKoZIhvcNAQEL
BQADggEBAAYgiEeE/AyA7GtH0GnGm8UZpFrfRHOkXNvrWuXcsgxdCGi5TnOWJZjT
An0XZsiJDdgX34zaOTIJlzNsQj/miLmodQphjy+VUa6n9zhtS73pRgWnlAOhIQoJ
JuZ29uDdbUVSBE7p8yazPni2/FM3br4Fkmkv6lfs0Tp5OwFaO4pR9Jf+s4Z/hkL5
l0GcQpCkYUOKnQqQGFw9uHnW4PPhAWDI3hbUNVkT9Hm7eb/TfvpwkyvpAL9zKHev
EKc7vkINlCj1Ew//EGdKXsl1DPdSe7oVYCBOYiVC/ji2K7NCwHIh0BN0lDLY0+Jf
/tTsLl021HYhu358ZK3cj3ymMwaK1Tg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:04 2026 by rpki-client