Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BZdiPbZIvRkhOyBrhgFFD4rYy30.roa
File: BZdiPbZIvRkhOyBrhgFFD4rYy30.roa (raw, json)
Hash identifier: oXNRLYBKiiOsSvBL74truAanXmHITipObnCQmUcD5N4=
Subject key identifier: 05:97:62:3D:B6:48:BD:19:21:3B:20:6B:86:01:45:0F:8A:D8:CB:7D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019D3D09FDFC7E465CC12D5F099C2297CA24
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BZdiPbZIvRkhOyBrhgFFD4rYy30.roa
Signing time: Mon 30 Mar 2026 04:39:18 +0000
ROA not before: Mon 30 Mar 2026 04:39:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12685
IP address blocks: 2a02:5a60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:09:fd:fc:7e:46:5c:c1:2d:5f:09:9c:22:97:ca:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 30 04:39:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0597623db648bd19213b206b8601450f8ad8cb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:90:b4:fa:7b:9c:24:69:3f:30:f8:e1:fa:
8b:33:51:9f:c2:3c:d3:65:e1:8a:db:61:c3:52:a8:
ba:f6:a1:ca:84:2b:5b:60:a8:39:f7:97:01:6a:1c:
39:1e:ad:14:67:c8:c0:66:bd:36:68:2d:77:dc:76:
53:6a:e2:0f:39:8f:8c:73:58:ed:4b:3f:81:3b:41:
88:18:8a:5c:9b:de:0e:5b:c4:e2:ab:74:c9:d2:fc:
9a:a5:aa:5d:5d:df:98:dc:94:9b:71:6b:0d:75:1f:
e1:dd:ed:4e:64:9b:9e:e2:58:58:6c:70:f7:24:ad:
a6:20:ac:95:ab:13:56:c5:b4:21:21:1c:cd:cf:49:
a6:12:ab:7a:09:bf:7a:38:4b:f1:a1:52:6f:35:50:
f2:c1:24:71:86:1a:eb:bc:cb:d2:49:78:8c:8e:a2:
c2:58:eb:31:97:9c:45:59:79:99:14:66:28:90:99:
79:50:f6:b6:89:99:2b:11:2f:3e:f7:46:3f:1b:e4:
7c:7b:cb:75:41:d3:54:95:76:64:c9:7a:76:4e:29:
31:62:17:db:a0:9a:29:e9:b7:51:9a:f8:66:ca:a7:
b9:53:f7:3f:79:f5:d7:ce:90:40:0f:31:07:17:c1:
03:e1:ac:0d:a7:ac:76:59:05:e6:02:5d:fa:d5:07:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:62:3D:B6:48:BD:19:21:3B:20:6B:86:01:45:0F:8A:D8:CB:7D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BZdiPbZIvRkhOyBrhgFFD4rYy30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5a60::/32
Signature Algorithm: sha256WithRSAEncryption
83:50:05:e1:54:50:fb:86:83:ec:30:a9:f2:de:a1:19:a7:27:
8d:58:44:d8:10:0f:81:92:6f:0d:4f:46:0d:a6:47:c8:f8:71:
44:c7:75:08:ff:a1:69:f9:da:89:3d:bc:fe:ff:48:03:a5:c2:
e7:0f:38:cf:bb:40:5c:ad:fb:93:76:3d:eb:8f:bd:03:89:7f:
85:74:d0:d1:3a:b9:ff:ad:1e:68:2f:83:90:e4:27:15:e9:0e:
2e:16:db:08:a5:54:68:34:1b:df:f0:2f:ec:2c:68:62:b7:08:
c3:8d:b3:d9:2e:bf:70:09:80:e3:14:fd:a3:65:54:4e:76:78:
bb:ce:d2:99:a8:de:0e:ba:00:e7:37:d2:91:b1:d3:4b:9e:cf:
2d:a3:bf:7e:3f:9f:c3:da:1e:c8:4d:87:b9:c4:48:0e:49:c5:
25:09:ed:17:de:54:08:a8:a5:c3:9a:97:0e:f5:9e:8b:bc:2d:
b6:d7:33:15:b0:f6:e7:42:73:f4:1c:14:1e:53:46:26:bb:e7:
fc:85:a4:e5:1f:a3:ae:cb:fd:fc:e8:d2:6a:38:bd:c8:76:31:
42:43:15:b4:4d:8f:22:6f:2c:7a:30:3f:97:22:cb:18:6c:7f:
46:3c:77:ec:f9:1b:85:df:63:2d:d8:17:43:a7:f3:8f:8c:34:
13:b0:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:55 2026 by rpki-client