Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/dawXrsUI5VoXEeeh_RVuGDv4Fz8.roa
File: dawXrsUI5VoXEeeh_RVuGDv4Fz8.roa (raw, json)
Hash identifier: jp98Wf7Qp6+Q0/2pZIoZVBb8LFPuRhDFQGbxotaXYXs=
Subject key identifier: 75:AC:17:AE:C5:08:E5:5A:17:11:E7:A1:FD:15:6E:18:3B:F8:17:3F
Certificate issuer: /CN=239c3277955d2129f37d95b3387af01f94285aba
Certificate serial: 019E119D38D5ED14DE284112525D7B4D7266
Authority key identifier: 23:9C:32:77:95:5D:21:29:F3:7D:95:B3:38:7A:F0:1F:94:28:5A:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/dawXrsUI5VoXEeeh_RVuGDv4Fz8.roa
Signing time: Sun 10 May 2026 11:19:36 +0000
ROA not before: Sun 10 May 2026 11:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47797
IP address blocks: 94.101.160.0/21 maxlen: 21
94.101.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:9d:38:d5:ed:14:de:28:41:12:52:5d:7b:4d:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c3277955d2129f37d95b3387af01f94285aba
Validity
Not Before: May 10 11:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75ac17aec508e55a1711e7a1fd156e183bf8173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:ff:6e:f8:70:60:b3:a1:12:12:6a:5f:a3:
8a:d0:21:49:ae:31:de:ba:5c:c9:11:a8:50:d9:aa:
af:a4:89:33:e0:a9:e7:35:64:40:55:db:81:66:58:
ec:11:8e:9c:f6:fa:ee:95:3f:df:81:a6:12:fe:8f:
9d:76:c0:b5:d6:52:ed:df:05:f6:a6:d0:29:fc:2e:
f0:1d:5c:19:dd:09:9c:99:a4:60:69:bb:02:f2:8d:
6b:94:45:6f:bf:f8:66:41:0e:09:69:ee:2a:08:46:
86:e0:1f:fd:61:d1:b3:02:f5:0c:83:f4:17:b0:b0:
69:03:8e:16:93:52:3c:4f:23:9b:64:9c:39:3a:2e:
87:4c:95:e3:34:ee:58:f9:ff:c8:0f:c1:cb:cc:6b:
73:31:eb:d4:f6:0f:61:de:d4:c4:08:be:f6:e3:9e:
99:41:97:c8:04:b5:1b:72:f2:26:cd:19:84:19:cd:
e9:88:0f:31:d4:77:05:80:48:87:3d:c2:ee:60:48:
2b:20:1a:09:47:09:90:16:ec:40:50:a8:ce:28:3b:
8e:ae:54:29:95:3a:6a:fc:04:21:22:2c:a0:b3:c7:
5c:c3:66:5c:b0:de:41:e5:8a:77:ac:ed:d4:c6:e1:
9d:81:9c:d9:cb:58:02:7b:57:ec:0f:ef:a3:29:c2:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:17:AE:C5:08:E5:5A:17:11:E7:A1:FD:15:6E:18:3B:F8:17:3F
X509v3 Authority Key Identifier:
keyid:23:9C:32:77:95:5D:21:29:F3:7D:95:B3:38:7A:F0:1F:94:28:5A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/dawXrsUI5VoXEeeh_RVuGDv4Fz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.160.0-94.101.169.255
Signature Algorithm: sha256WithRSAEncryption
82:4b:36:8b:0a:50:88:b3:29:1a:85:54:18:00:a0:aa:e2:7f:
76:be:a7:79:2d:f4:40:68:4e:ed:66:3e:e4:65:92:01:b4:7c:
7b:a3:16:bb:e0:8c:b2:18:8a:83:21:e7:82:18:48:fc:d8:5a:
7f:8d:33:81:91:f8:b9:2c:d7:0f:40:ed:4e:81:c0:b8:43:02:
81:7c:90:b7:3e:65:91:f2:09:18:29:fc:65:c9:41:f1:da:fb:
78:82:7e:dd:23:46:96:81:78:34:60:b2:f3:67:c8:c0:f3:6a:
e9:30:da:50:71:55:88:4f:d0:4c:5e:32:2d:96:47:1a:4e:b1:
d0:6d:55:8a:5f:ef:e7:f4:38:d3:54:95:01:04:39:a3:f9:d7:
d5:e2:6a:cb:14:b7:77:35:7e:c2:3d:95:db:e1:9c:19:48:1e:
8c:0c:91:8c:08:15:da:e5:52:64:bb:9a:02:76:d4:68:07:45:
cc:e4:80:57:38:98:53:3a:33:e5:3e:c0:f1:b3:2d:67:3a:4a:
6d:d7:c9:7f:d8:10:d8:70:d9:3f:4e:e6:56:55:46:87:6e:51:
9b:2c:e8:d9:d9:59:5e:8f:b1:22:69:b8:fd:14:2e:df:ff:c1:
df:09:18:c0:57:91:61:8e:31:c7:55:e7:3b:2d:c1:70:23:5f:
17:5c:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:26 2026 by rpki-client