Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/DoJ58pE0QIMXC05xRfbVGGg7LaY.roa
File: DoJ58pE0QIMXC05xRfbVGGg7LaY.roa (raw, json)
Hash identifier: PKgahVgw21SJvhsptZJmaWRLmw5Lyssf02litjMZ8FQ=
Subject key identifier: 0E:82:79:F2:91:34:40:83:17:0B:4E:71:45:F6:D5:18:68:3B:2D:A6
Certificate issuer: /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial: 019FC6EE0485B0D448C1BFB15788D641A1B6
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/DoJ58pE0QIMXC05xRfbVGGg7LaY.roa
Signing time: Mon 03 Aug 2026 09:21:55 +0000
ROA not before: Mon 03 Aug 2026 09:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34177
IP address blocks: 145.242.0.0/21 maxlen: 21
145.242.1.0/24 maxlen: 24
145.242.2.0/24 maxlen: 24
145.242.6.0/24 maxlen: 24
145.242.11.0/24 maxlen: 24
145.242.17.0/24 maxlen: 24
145.242.20.0/24 maxlen: 24
145.242.28.0/22 maxlen: 22
145.242.31.0/24 maxlen: 24
145.242.36.0/22 maxlen: 22
145.242.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:ee:04:85:b0:d4:48:c1:bf:b1:57:88:d6:41:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Validity
Not Before: Aug 3 09:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e8279f291344083170b4e7145f6d518683b2da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:cc:4d:3b:fa:c1:9e:6a:10:53:14:f0:68:
fb:1e:bb:3b:ec:7a:6c:96:87:f2:f8:7b:9c:85:48:
83:12:c1:3d:69:87:94:d9:05:ec:31:91:51:31:f7:
2f:3a:ea:30:06:19:40:2d:04:86:1d:bc:0b:b1:7b:
06:b9:1c:aa:0f:8f:3f:6d:1a:64:45:85:d1:15:27:
d4:b9:15:15:cd:a4:98:be:f9:b6:e8:2c:a6:6f:33:
ac:b9:ea:55:c8:12:ab:2a:a5:d7:13:04:48:c5:93:
38:bb:9a:1f:9d:7d:1b:0e:f4:42:7d:fc:56:02:76:
ee:ad:80:c7:c6:1b:24:fc:d2:d5:a7:20:a4:3f:16:
ff:b6:33:46:66:18:b6:50:78:86:d5:e1:db:c4:1f:
bd:11:74:7b:53:52:00:1d:f4:dd:2a:bf:f5:61:17:
54:70:24:7d:99:7b:73:ff:ff:38:50:16:d7:6a:8f:
c9:58:3b:fd:53:23:93:4a:f7:43:7a:e2:34:bc:23:
e4:16:36:0c:c6:0d:ad:0e:7b:6c:df:dd:39:33:3b:
08:43:0d:9a:46:a9:8c:4c:11:7f:ad:dc:f3:bc:db:
72:63:5c:11:fa:6c:be:de:d8:f6:2c:9e:9c:70:3a:
ee:7c:81:b1:20:9f:10:b9:d3:58:c6:ab:a4:ba:52:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:79:F2:91:34:40:83:17:0B:4E:71:45:F6:D5:18:68:3B:2D:A6
X509v3 Authority Key Identifier:
keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/DoJ58pE0QIMXC05xRfbVGGg7LaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.242.0.0/21
145.242.11.0/24
145.242.17.0/24
145.242.20.0/24
145.242.28.0/22
145.242.36.0/22
Signature Algorithm: sha256WithRSAEncryption
92:f8:74:0e:4a:0f:9a:20:d7:e4:05:89:c6:91:9d:66:c3:3c:
4b:1a:4f:02:58:be:78:2d:f2:c1:ec:96:e4:82:af:a9:9c:d8:
6c:c0:29:c2:8a:24:73:44:91:9a:dc:22:1d:30:d5:6b:cf:de:
39:ab:a5:d3:7c:f4:56:7e:31:7f:ac:36:f9:b3:ba:6f:58:f3:
ef:9e:ab:55:3c:d5:d2:97:0e:0f:78:b1:a5:7a:bd:38:08:15:
75:f3:78:7d:d9:1c:32:84:d9:37:ff:df:75:81:df:30:de:c4:
1a:18:3a:5f:a1:ca:7c:e7:5d:1a:37:b1:c2:8d:e7:f0:2a:2e:
72:ab:68:a0:32:da:98:e1:d9:1c:0a:ed:1a:a9:83:a1:f3:a4:
08:1c:5e:e7:5d:23:85:5e:1f:87:5f:07:49:72:70:6b:78:97:
00:6f:75:bb:1d:f8:3a:55:62:e1:76:e3:d0:e2:f5:99:2c:b6:
11:e1:98:6b:82:74:e8:1f:4e:bc:bf:b4:24:66:7d:5d:05:e9:
3f:d9:e0:a7:ca:4a:ae:f5:85:4e:b7:45:fe:b3:97:6b:d3:d8:
44:b4:54:1c:62:3a:a5:6d:96:e7:9f:26:f2:0b:89:b4:dc:29:
1d:22:52:e9:71:2b:dd:b2:c2:97:ec:6f:a0:9c:e3:c0:1c:a1:
6f:0b:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:41:46 2026 by rpki-client