Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/djEdq_IyqlZxFGQ5LAUHJATt1-U.roa
File: djEdq_IyqlZxFGQ5LAUHJATt1-U.roa (raw, json)
Hash identifier: lgvpCOomSarWZ6KVtAD88mpaPVpYu+f3+0KyOEVzSog=
Subject key identifier: 76:31:1D:AB:F2:32:AA:56:71:14:64:39:2C:05:07:24:04:ED:D7:E5
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 019F23693D48E5B0AC09770C66E3DAC7FB61
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/djEdq_IyqlZxFGQ5LAUHJATt1-U.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203602
IP address blocks: 185.255.244.0/22 maxlen: 22
2a0c:61c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3d:48:e5:b0:ac:09:77:0c:66:e3:da:c7:fb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76311dabf232aa56711464392c05072404edd7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:47:f4:c5:21:2b:72:7d:b0:70:6f:71:7b:
ea:5e:51:9e:b4:13:ab:a4:40:6c:11:c7:85:d4:74:
5a:6b:66:1c:b6:46:83:41:9e:8b:12:14:95:06:91:
73:ff:a6:7a:26:0c:9f:05:ab:24:4e:3d:a9:55:c2:
dc:a1:31:1f:dd:98:50:e4:93:d4:2d:c9:31:c1:d4:
9b:50:0c:2e:01:7c:32:c7:31:13:1b:37:fa:aa:43:
3c:51:13:c1:71:4d:be:ea:f1:e2:d2:b6:a6:ed:20:
96:ca:7b:ff:ed:c8:46:97:04:a4:5e:3b:93:99:51:
ad:be:73:a1:e5:36:b9:0c:cc:f7:8d:97:71:f5:75:
51:7f:e7:35:62:75:e9:73:ce:ac:12:ce:7a:33:42:
89:c6:6e:e1:06:f0:6e:8b:36:08:b6:dc:b3:26:29:
82:36:36:19:5b:f7:be:6c:f2:37:0f:35:25:84:41:
00:b9:c7:03:74:9a:b3:cf:cf:a0:cd:0f:d5:dc:99:
62:30:99:f2:6a:4e:68:8e:d4:f6:92:5f:23:94:bf:
2d:11:66:58:b2:25:ff:46:ef:1e:12:97:06:c4:a2:
17:42:8d:a5:ee:1a:7d:8f:56:d6:5b:bc:c3:90:3f:
9a:bf:a7:b7:8b:4c:7f:1b:a6:58:63:b4:ba:50:a0:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:1D:AB:F2:32:AA:56:71:14:64:39:2C:05:07:24:04:ED:D7:E5
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/djEdq_IyqlZxFGQ5LAUHJATt1-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.244.0/22
IPv6:
2a0c:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
75:47:d6:ba:9a:e6:3e:7d:4a:f1:b7:4b:e5:f5:f0:48:94:36:
f5:57:66:2c:5d:35:a8:96:9c:84:80:43:77:bf:a6:39:13:58:
5e:51:e7:1a:6e:37:10:c1:ec:17:61:33:44:72:ce:d4:a8:1e:
39:c4:1c:81:52:e3:74:41:5d:a4:5f:94:3d:92:f0:63:0e:19:
94:47:87:7d:d1:89:17:79:67:d4:99:6f:28:e6:48:24:73:3c:
cd:21:01:7c:30:0a:63:78:92:3e:8b:cc:0b:fe:4f:1c:da:67:
5f:f8:fd:2a:e1:d9:2a:9b:66:01:21:13:c3:8c:36:c5:77:7d:
d8:85:05:58:28:5c:ff:61:5b:37:68:de:8a:b4:8e:be:bd:43:
f3:76:e8:3a:9f:9a:c6:df:6c:91:a6:93:db:75:88:47:44:eb:
03:83:0c:36:76:83:ad:9f:5e:3a:87:ac:99:1a:d7:bd:f0:00:
44:05:9e:52:6c:70:64:5c:01:0a:78:0d:30:ca:65:ae:89:e1:
60:ec:02:36:c5:41:46:05:06:d7:15:fd:72:bf:dd:98:f9:8b:
f1:b2:56:af:0f:f0:5e:5e:0b:ac:26:6a:00:12:fe:ef:33:2b:
89:2a:a7:51:46:4a:78:4b:fa:1f:40:08:32:5a:a6:9b:58:13:
65:47:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:15:34 2026 by rpki-client