Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/DzaoAe0Ldq7YFyatR4nkANrsPa4.roa
File: DzaoAe0Ldq7YFyatR4nkANrsPa4.roa (raw, json)
Hash identifier: 1woYEwjhUkUNIwLrNgA2K8mwVHnNgjIv1sOTQUJc6W8=
Subject key identifier: 0F:36:A8:01:ED:0B:76:AE:D8:17:26:AD:47:89:E4:00:DA:EC:3D:AE
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 01A0D30C0100CA1782E3F377E15563CB8895
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/DzaoAe0Ldq7YFyatR4nkANrsPa4.roa
Signing time: Thu 24 Sep 2026 10:52:54 +0000
ROA not before: Thu 24 Sep 2026 10:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213320
IP address blocks: 85.27.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:0c:01:00:ca:17:82:e3:f3:77:e1:55:63:cb:88:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Sep 24 10:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f36a801ed0b76aed81726ad4789e400daec3dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:26:a0:3e:a3:03:f4:c1:b9:c0:99:7b:b8:
35:c7:69:80:a9:c5:08:96:e8:b7:2d:2e:ce:00:aa:
93:80:8b:65:30:d3:3a:c4:9f:af:e1:ed:da:b7:92:
dd:09:a4:96:92:25:fb:0c:70:2f:59:cc:48:47:3c:
56:23:39:83:75:0e:44:ac:02:dc:8b:2e:61:2c:92:
05:09:fb:ce:a9:c6:7c:7a:9a:93:07:75:70:46:32:
4f:c8:d3:b5:27:73:64:30:bf:a0:7b:33:85:8c:a9:
4a:8a:89:fc:69:e5:ba:0b:1a:7f:d6:17:aa:5b:06:
9c:07:10:ee:e6:6a:9a:09:57:f0:7f:59:04:33:62:
fc:50:8b:b3:c8:a5:a0:84:13:9f:25:c8:9a:4f:66:
39:f3:3c:38:3c:4d:9e:94:80:b4:fd:f3:9c:fe:40:
57:35:a7:65:75:28:72:34:05:e3:db:b2:f2:89:ac:
58:02:52:68:79:22:95:7c:45:5a:32:33:34:78:21:
22:9b:9c:4b:62:f5:8d:a9:e2:7b:bf:fe:ee:98:66:
6c:a3:64:78:cc:b0:86:67:78:b3:40:65:d1:e0:ab:
8e:67:64:a3:5f:0d:7a:ef:6d:18:d8:66:3f:20:69:
c5:a6:a8:52:29:52:b0:43:8d:ea:6e:90:52:32:fc:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:A8:01:ED:0B:76:AE:D8:17:26:AD:47:89:E4:00:DA:EC:3D:AE
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/DzaoAe0Ldq7YFyatR4nkANrsPa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.27.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1f:6a:bd:16:ba:dd:2b:19:93:f8:47:b5:09:26:65:bd:e8:28:
83:70:68:d9:ff:65:54:77:fc:3a:63:7b:b3:f1:fe:03:fb:d7:
4e:2b:50:7c:29:31:23:54:ed:4d:92:a2:c4:79:63:51:49:75:
bc:5d:d4:53:af:f7:bc:65:09:64:60:fa:13:31:78:b2:fc:2e:
1c:41:d3:46:a6:c6:58:d2:7c:18:85:02:61:2b:13:f1:00:27:
f6:5e:f6:29:ac:c3:75:7b:68:ec:d9:2d:f4:9f:5b:4a:00:b1:
f0:15:da:18:43:bd:a1:a9:22:a9:8a:54:14:ce:c3:1c:cd:d7:
25:e1:c1:0d:2c:39:f7:4f:7a:52:7a:93:93:6e:21:65:fa:c0:
df:e5:52:99:31:cb:0d:02:c2:05:54:c3:14:09:14:48:53:22:
bf:36:af:95:d0:5c:fb:48:9a:41:00:c0:78:b1:42:74:82:9e:
b9:e9:cb:41:9b:47:5c:eb:60:89:d2:b1:fe:26:79:40:bb:7b:
ff:cc:5f:12:2c:54:b3:d0:25:12:d9:3a:0d:34:cf:f5:ec:a6:
f1:63:dd:01:5f:83:cc:1d:1e:c6:c0:17:c2:79:05:56:10:c4:
11:5d:73:44:60:cd:af:6d:e1:ed:d1:36:27:ba:ae:22:76:3a:
cd:a1:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:38:01 2026 by rpki-client