Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Dbxs0mnaJuFa8AKMggg6O1MrrXE.roa
File: Dbxs0mnaJuFa8AKMggg6O1MrrXE.roa (raw, json)
Hash identifier: LN821Zyu24IAfe3ygcJ5mxQ0TLPtb6Us7przgZxkobM=
Subject key identifier: 0D:BC:6C:D2:69:DA:26:E1:5A:F0:02:8C:82:08:3A:3B:53:2B:AD:71
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A13F7ADEAA2650A52FE142558606D63B13
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Dbxs0mnaJuFa8AKMggg6O1MrrXE.roa
Signing time: Thu 15 Oct 2026 12:12:59 +0000
ROA not before: Thu 15 Oct 2026 12:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 94.231.236.0/24 maxlen: 24
185.10.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:7a:de:aa:26:50:a5:2f:e1:42:55:86:06:d6:3b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 15 12:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dbc6cd269da26e15af0028c82083a3b532bad71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:17:07:57:58:52:d1:f9:f1:03:d6:af:09:
aa:ae:62:ed:19:09:48:77:d0:b3:94:98:22:7d:8a:
3f:70:3e:59:36:02:86:f8:e6:0a:52:fe:7c:d3:78:
de:64:bb:9d:6a:a6:a9:f4:04:3f:a9:3a:2d:b0:af:
31:ff:28:15:47:2c:9e:9e:48:38:57:2c:7a:f7:55:
98:fa:c6:6c:f9:5e:d9:25:7a:b2:37:94:8c:91:26:
9e:e9:79:13:45:22:52:84:2e:f5:25:5f:22:e1:9d:
92:d8:9b:88:4c:15:30:64:61:52:7c:3d:ca:26:29:
db:ab:b3:1a:28:57:c3:a9:b1:d2:66:a9:be:03:7f:
42:d1:22:0f:d0:ce:f0:2a:f3:25:3c:21:89:05:6e:
9f:34:7d:07:cc:5c:dd:1c:03:f1:f6:4d:08:b0:5a:
27:1b:53:cc:79:d6:ee:bb:b7:aa:a2:a1:be:f2:24:
8b:6a:ed:66:d4:55:36:64:3b:72:a8:44:68:b4:f0:
66:b8:fe:89:4c:d8:a7:1b:fe:a6:cc:2c:c5:82:d8:
69:55:09:22:9a:a1:61:f3:1c:13:4e:26:92:84:ce:
61:37:fe:11:b0:7f:7c:5a:29:d4:7b:53:8e:73:c5:
5f:77:ad:03:70:f9:ac:dd:68:6d:62:3d:6d:9d:d7:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:6C:D2:69:DA:26:E1:5A:F0:02:8C:82:08:3A:3B:53:2B:AD:71
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Dbxs0mnaJuFa8AKMggg6O1MrrXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.236.0/24
185.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:3b:69:38:35:4b:d9:ff:89:a1:4f:e3:b3:4e:de:39:a8:52:
8d:27:5b:61:9f:22:b1:b1:de:7e:01:37:82:f0:7a:3a:51:5d:
5b:63:ac:53:3d:30:f7:7f:0f:80:e3:9a:71:5e:a6:16:62:a8:
e3:14:a5:29:a5:1d:b5:da:07:b6:a3:fa:10:2b:ed:0f:18:75:
4f:2e:00:68:54:b4:cb:d8:30:56:3f:f1:64:db:50:9a:13:40:
24:e5:7f:03:9b:35:a9:32:86:ac:68:62:3c:c2:b7:c1:ca:cd:
38:14:b7:4e:4e:50:d4:bd:3f:e1:9a:3d:07:09:d4:e4:72:b4:
ea:6f:ef:9b:6e:4f:43:96:b9:a7:d0:8b:32:5e:5c:66:3e:20:
1d:9d:af:62:88:67:51:89:c6:9b:71:99:c0:1d:b8:68:5d:de:
eb:8f:6d:66:58:37:1b:a7:66:dd:0a:6e:62:15:c8:b2:c6:8c:
b5:8b:f5:e1:46:92:e7:35:de:56:14:9b:29:25:0a:a5:50:0f:
4b:0c:3c:a8:ad:00:99:5a:89:2f:ce:46:f3:84:b8:cc:c9:07:
45:5a:1f:13:c6:ba:1d:81:5c:a4:6f:68:24:61:a5:e9:99:97:
1b:62:44:c1:40:ce:57:6e:99:3a:20:61:61:89:40:31:bd:9f:
e5:8d:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:36 2026 by rpki-client