Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/dD53sJzzVQFTaAvueszbsFDLUTw.roa
File: dD53sJzzVQFTaAvueszbsFDLUTw.roa (raw, json)
Hash identifier: wIIr9cffPwMDI4diSS8ekiKkSszKnatKJvPAiutfvTc=
Subject key identifier: 74:3E:77:B0:9C:F3:55:01:53:68:0B:EE:7A:CC:DB:B0:50:CB:51:3C
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01A15E624F287A25EFB6F2E4E6CA4B38FC9B
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/dD53sJzzVQFTaAvueszbsFDLUTw.roa
Signing time: Wed 21 Oct 2026 12:14:23 +0000
ROA not before: Wed 21 Oct 2026 12:14:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 62.164.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:62:4f:28:7a:25:ef:b6:f2:e4:e6:ca:4b:38:fc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Oct 21 12:14:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=743e77b09cf3550153680bee7accdbb050cb513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:89:04:b5:2c:f8:9b:b5:80:81:3e:1e:1e:
41:76:e9:48:ef:c7:7d:40:65:79:97:94:5f:ec:7e:
25:57:f5:c7:77:72:dd:ee:2b:69:2d:f0:2b:fd:66:
38:c5:aa:a1:68:24:b3:5d:36:fa:af:c6:dd:a4:51:
f9:43:ad:84:64:e8:72:1f:ea:54:f2:93:4b:99:83:
53:4b:33:5c:2b:76:47:33:6c:39:1c:89:6d:2c:53:
31:59:5c:8e:12:8d:c6:ac:9e:57:dc:11:1f:97:e9:
cf:f5:e8:0d:3f:e9:cd:e3:ee:c7:9a:9d:6a:bc:c1:
e5:5e:e7:10:9e:f3:86:87:3b:26:78:b4:4a:f6:15:
b2:5c:c2:f7:fb:9b:8c:7e:6e:d1:c5:09:1f:44:70:
9e:9e:77:70:fc:c4:7e:a6:b7:9b:5a:7d:ec:7b:a4:
79:32:2d:9b:d0:f4:82:61:94:f3:1e:90:88:70:fa:
53:2e:e2:7a:d8:e8:4c:46:a6:b7:1d:b6:26:73:71:
6d:9a:bc:aa:ba:41:72:b8:74:f3:7d:b8:e9:99:ca:
62:97:a3:4a:c5:ed:44:11:40:69:9b:54:f5:50:03:
05:9d:cf:58:1d:a7:ba:8f:03:71:87:e4:14:8b:d7:
e2:c5:ea:e7:dc:b2:87:c8:83:7e:3a:06:28:2c:3a:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:77:B0:9C:F3:55:01:53:68:0B:EE:7A:CC:DB:B0:50:CB:51:3C
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/dD53sJzzVQFTaAvueszbsFDLUTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.195.0/24
Signature Algorithm: sha256WithRSAEncryption
46:45:8e:c4:81:ee:1b:83:10:e4:1b:0d:ec:87:06:cb:b3:bb:
7b:0b:d3:7f:5f:9a:f7:63:ca:77:c9:5d:15:0b:ed:f3:21:21:
d5:ea:78:82:e9:08:93:87:0c:3b:99:68:3a:48:bc:1b:31:15:
0d:cf:b4:70:ce:07:6d:14:34:d6:35:68:af:ad:46:e1:72:a4:
a1:df:1f:22:4d:42:2e:c2:75:79:a9:cf:3a:f5:4a:83:d8:45:
6b:65:e2:0a:6d:aa:f1:66:e5:6d:8e:9e:d4:be:58:1c:65:55:
b6:60:d9:5c:f3:81:7a:6a:f7:b6:bd:46:e0:79:4d:b4:8c:76:
35:45:4c:4c:a3:81:ce:9f:78:d9:09:94:ee:0d:98:ad:f1:26:
a9:0d:23:d8:65:9f:3f:42:6c:37:67:6f:72:bb:f4:87:d3:dc:
23:b1:19:fa:4f:a2:02:00:ae:3d:da:58:fc:18:8b:eb:ea:c5:
23:e9:47:40:26:8c:fd:5c:a0:a0:ec:04:51:9e:6e:47:de:ee:
c0:3a:1c:69:64:34:78:98:d7:db:20:f0:2c:fb:77:d6:c3:33:
45:75:02:25:b1:5b:b4:24:7f:0a:8f:2a:cb:5e:bf:0f:d9:f0:
cd:1a:8f:7d:ef:4b:79:eb:6c:b3:4e:62:e8:c1:33:4e:bb:c0:
ef:ed:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:14 2026 by rpki-client