Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DgRXfU03npME4V1AwAX0ThBtZQ0.roa
File: DgRXfU03npME4V1AwAX0ThBtZQ0.roa (raw, json)
Hash identifier: 28zui3LwnRaze+dAHIDUkVVoknpCffM0WP9r0d8Uduw=
Subject key identifier: 0E:04:57:7D:4D:37:9E:93:04:E1:5D:40:C0:05:F4:4E:10:6D:65:0D
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019F228F4C386F078A3E88C6CEB20637C73D
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DgRXfU03npME4V1AwAX0ThBtZQ0.roa
Signing time: Thu 02 Jul 2026 11:20:44 +0000
ROA not before: Thu 02 Jul 2026 11:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6233
IP address blocks: 2a12:a300::/29 maxlen: 48
2a14:1f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8f:4c:38:6f:07:8a:3e:88:c6:ce:b2:06:37:c7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 2 11:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e04577d4d379e9304e15d40c005f44e106d650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:d7:9b:98:53:cb:1a:7e:36:de:8c:33:e5:
e0:cc:42:1c:de:85:65:78:ad:1b:04:4a:78:1a:4f:
09:ad:84:91:3d:e4:d5:93:e8:13:8d:8e:78:57:d9:
52:b0:45:06:9d:73:cf:e7:9c:91:cf:6e:50:9f:9c:
2f:f3:18:65:bb:b4:4a:9b:92:4a:c7:1e:fd:0a:52:
ec:5c:a2:3a:75:a0:ae:98:1d:8e:5c:b2:ec:d6:57:
9c:31:e5:18:7c:e1:35:69:d7:2c:87:40:65:09:81:
46:71:e5:9f:0c:80:89:fa:bc:7c:b7:37:6b:23:43:
60:e1:a7:21:86:a1:9e:a8:eb:ba:21:ba:0c:0c:eb:
36:f4:f0:05:a7:5d:05:d6:7c:59:9f:1a:8c:24:4c:
5a:1c:f0:d7:de:3a:c5:d7:e5:a3:bf:55:3d:18:c6:
2c:8c:fd:30:da:75:1a:32:a4:bf:cf:4b:be:7d:94:
23:34:2f:46:55:dc:b7:90:ef:d9:99:d1:36:95:18:
ef:f2:d8:27:11:f5:88:84:98:fb:d3:3d:e0:e6:e8:
82:0c:89:c2:a2:f5:f4:27:0f:8d:fa:01:fd:80:33:
9c:89:66:92:db:06:f4:ab:d2:11:3d:a1:9a:b3:7d:
3e:51:39:dc:ef:90:f7:dc:ff:63:04:cf:0b:fa:f0:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:57:7D:4D:37:9E:93:04:E1:5D:40:C0:05:F4:4E:10:6D:65:0D
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DgRXfU03npME4V1AwAX0ThBtZQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a300::/29
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
52:6b:8d:6a:0f:c1:21:78:e1:44:eb:2d:25:6d:2d:b2:a6:0f:
e4:22:78:91:38:47:8b:3b:0a:53:08:86:a3:0f:11:2c:3b:d6:
51:53:e7:58:09:2c:6b:02:62:71:57:48:ee:14:fa:63:12:9e:
6f:cd:ed:3f:e5:fd:75:68:27:60:51:99:db:d3:eb:95:7d:40:
8c:68:50:03:7f:c1:05:03:70:23:84:f8:61:8e:c9:a3:1d:9f:
95:02:d8:50:3f:fc:c5:8f:3c:d4:60:f9:c0:0b:bd:eb:cd:35:
1d:d1:62:a9:8f:2c:97:c5:99:14:ae:9b:4b:a7:90:a7:4e:fe:
a0:c0:3b:0d:98:7d:53:bd:04:67:56:2c:21:26:c9:dd:7e:c9:
c8:b0:a8:49:cf:86:6b:9d:51:a1:ed:d7:45:cd:ea:7b:21:42:
34:6b:69:d4:fc:29:28:15:c5:ac:a5:b1:68:3b:12:09:96:8b:
1e:d8:af:31:8a:0e:4c:2e:da:c6:a6:42:d8:f3:52:b2:bd:eb:
87:d3:78:a1:4f:89:89:3f:55:04:f1:93:d4:47:90:fb:62:31:
17:1b:81:43:2b:e0:65:6d:8b:a0:c1:bf:fe:3c:0e:8c:e2:64:
d6:8f:0b:0d:65:3e:fa:52:22:0e:8a:73:ff:a1:e2:e3:e6:df:
33:e8:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:22:42 2026 by rpki-client