Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/dpL5ZtEitf4atUPkEQBrdg3AXa4.roa
File: dpL5ZtEitf4atUPkEQBrdg3AXa4.roa (raw, json)
Hash identifier: rbxc/D01AOG8KldlHELzWOgJqjk9Wg1ayGFfbIWBJws=
Subject key identifier: 76:92:F9:66:D1:22:B5:FE:1A:B5:43:E4:11:00:6B:76:0D:C0:5D:AE
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019F291C88794D17A8494F785206885063EF
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/dpL5ZtEitf4atUPkEQBrdg3AXa4.roa
Signing time: Fri 03 Jul 2026 17:52:43 +0000
ROA not before: Fri 03 Jul 2026 17:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8126
IP address blocks: 152.175.0.0/17 maxlen: 24
152.175.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:1c:88:79:4d:17:a8:49:4f:78:52:06:88:50:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jul 3 17:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7692f966d122b5fe1ab543e411006b760dc05dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:4d:a5:64:3d:c0:1d:f3:f2:e1:8c:85:04:
6f:b3:79:57:54:65:b3:87:fb:86:98:28:41:52:40:
34:8f:ba:6f:11:ed:95:c3:87:78:91:a5:88:d6:a5:
4b:40:06:fc:cf:1b:c4:36:ac:64:a7:c9:ba:5c:ca:
2f:ed:40:22:16:fb:74:09:30:5a:d7:02:45:53:58:
17:5c:e0:05:20:a6:82:d8:f4:2b:00:bc:32:2e:26:
f7:8f:4c:c7:d3:51:75:e3:cc:b2:82:92:cc:73:5c:
ce:6e:aa:1d:80:39:b0:53:c7:ba:b4:61:50:b8:0c:
ca:2d:81:d9:37:7b:09:db:c1:23:bc:38:6e:c6:90:
12:f9:f0:2d:81:a0:17:85:b1:d2:5c:da:d3:ef:25:
a8:8e:3f:a7:91:23:f5:9e:a7:99:a4:9c:32:a2:28:
98:aa:11:d0:79:72:d0:7d:d3:3b:b6:36:7e:12:f2:
47:e1:b1:98:68:95:2a:45:ae:d4:f2:6a:64:6e:84:
74:bf:6b:ae:e5:2c:36:5c:47:42:c0:e0:71:96:7b:
97:da:6c:2e:62:e5:9d:19:05:cc:07:8b:79:00:7b:
da:d2:bf:a9:4e:25:6f:0d:94:79:09:17:80:2f:00:
18:23:c8:b7:0b:ca:69:dd:5e:05:7c:11:76:81:85:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:F9:66:D1:22:B5:FE:1A:B5:43:E4:11:00:6B:76:0D:C0:5D:AE
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/dpL5ZtEitf4atUPkEQBrdg3AXa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9e:b6:16:62:8c:74:54:d7:93:95:e1:ec:4c:29:ff:19:f9:9c:
60:6a:f9:1b:fb:5a:52:ad:a4:4b:31:ae:ae:a0:3f:78:9a:a4:
c0:27:bd:cc:a5:e7:aa:62:40:e9:b3:ae:c2:e0:d3:de:2f:b7:
e9:57:f5:59:0a:08:79:b7:94:98:2b:7c:b2:1f:a5:32:8f:c7:
b5:6c:3c:89:ee:d7:a3:72:a6:a1:03:70:46:b7:e6:80:d4:c1:
08:3d:03:84:7f:24:cd:ef:be:eb:5a:41:78:01:6c:3d:84:68:
f2:bc:fb:30:96:91:7e:8f:a7:53:41:18:e4:98:9a:f8:46:c9:
45:fd:91:6f:ad:d5:08:f8:d2:1e:f3:19:df:e5:0a:da:fc:61:
a0:5a:e0:af:15:80:00:8a:f4:e9:44:a8:66:16:70:df:58:22:
15:71:5a:dd:ff:be:e8:bc:d1:1d:22:6c:33:e6:af:be:b6:b7:
82:95:b3:60:42:50:30:00:0c:93:b8:97:6a:92:a4:d8:84:16:
f4:e6:ff:d0:94:37:0e:45:57:0a:d5:ce:74:f0:09:c9:28:69:
80:bc:a8:b1:54:8d:7a:e0:c2:9f:cf:ab:c0:38:18:a3:dd:be:
55:8d:9e:2c:a6:7d:16:38:b6:33:8e:a7:90:ef:99:81:8e:1d:
0b:7b:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:07 2026 by rpki-client