Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Dbu_slXRgmRL8EqXNakiyeXzMBc.roa
File: Dbu_slXRgmRL8EqXNakiyeXzMBc.roa (raw, json)
Hash identifier: p4gAroIVp6UZmWChGZhAdXW5HkVus02m5HlLWEor5Dg=
Subject key identifier: 0D:BB:BF:B2:55:D1:82:64:4B:F0:4A:97:35:A9:22:C9:E5:F3:30:17
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019F475C119DFEC995A6755D66522E95BBE3
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Dbu_slXRgmRL8EqXNakiyeXzMBc.roa
Signing time: Thu 09 Jul 2026 14:50:43 +0000
ROA not before: Thu 09 Jul 2026 14:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.67.136.0/24 maxlen: 24
45.92.218.0/24 maxlen: 24
45.134.36.0/24 maxlen: 24
45.137.202.0/24 maxlen: 24
45.141.116.0/22 maxlen: 22
45.142.105.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:5c:11:9d:fe:c9:95:a6:75:5d:66:52:2e:95:bb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 9 14:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dbbbfb255d182644bf04a9735a922c9e5f33017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:a0:73:f5:f5:7f:5e:e8:b6:f3:eb:29:2d:
1b:ab:30:da:fe:19:7c:e0:44:d8:ef:ce:0b:9e:04:
2b:2e:d7:ad:ea:65:d2:fe:90:27:56:6e:b6:15:24:
28:cf:68:77:71:be:46:ef:54:aa:03:0a:eb:1f:0d:
47:3a:09:60:03:8a:4c:7c:dc:7d:61:52:ff:9b:c7:
48:ff:60:bf:9c:dc:8a:fd:89:5d:01:9b:75:e8:d4:
95:68:ce:85:d9:82:7b:e0:db:d5:9b:e7:86:aa:3b:
c8:a3:af:da:ad:f0:b9:00:fa:f7:ef:ba:d4:62:0f:
3e:93:bc:df:7d:c0:b4:8d:45:5a:6a:54:af:3f:f3:
a9:3a:55:1e:cc:ed:ac:b3:85:d5:a9:15:d6:d0:ff:
c3:6b:de:f0:2c:8d:a9:40:7b:8c:3f:ef:29:71:0a:
07:5b:19:e0:07:f5:e3:de:7f:42:53:fa:2e:ba:dd:
71:25:32:6c:be:79:e8:1d:e0:03:99:58:6a:0a:ba:
ee:2c:1f:2f:cb:02:f5:2b:91:1a:7a:94:05:61:9a:
20:f2:77:20:73:5b:9b:d3:68:93:41:00:96:b3:98:
29:67:e3:8b:cc:8c:e5:3a:0f:62:c9:07:e7:9a:ea:
4d:65:a8:72:3a:94:6d:dd:63:6c:75:cf:2f:4c:f1:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BB:BF:B2:55:D1:82:64:4B:F0:4A:97:35:A9:22:C9:E5:F3:30:17
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Dbu_slXRgmRL8EqXNakiyeXzMBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.136.0/24
45.92.218.0/24
45.134.36.0/24
45.137.202.0/24
45.141.116.0/22
45.142.105.0/24
45.151.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:36:9f:83:79:17:ca:78:35:5f:d7:45:86:4d:ab:37:23:da:
b1:e8:27:84:a2:5a:3e:a8:51:63:8a:7a:e7:99:f8:57:dd:02:
ff:a1:dd:cc:fc:f4:e9:be:ed:56:37:3b:2e:64:1c:51:41:d3:
3c:44:2d:b0:1c:29:1f:fd:12:7c:bc:82:79:4e:67:a4:26:af:
b6:0e:1e:8c:43:bd:d4:a8:21:24:49:3b:b6:71:99:5c:45:41:
af:a1:ba:9c:63:e0:f7:cc:b5:d1:a7:53:65:cc:f2:e5:5e:da:
f2:c6:8a:5e:0e:a4:0c:ce:21:8d:35:cb:89:2b:cd:0f:34:9c:
b3:bd:d4:47:4c:07:ca:e7:01:3f:7f:f2:81:44:8e:94:87:e6:
9f:b0:aa:1e:58:3f:a5:5d:95:fb:a5:11:9b:38:07:75:f5:64:
40:e2:a2:fc:ce:b3:4e:0a:93:51:58:92:02:d4:b9:b8:6c:b1:
e4:61:ca:25:09:c1:ed:17:68:d4:08:fb:61:03:67:e8:d4:08:
22:93:5f:3c:22:29:34:41:e1:0f:d2:d8:c5:68:05:79:97:fb:
ca:12:3b:28:d8:b1:2c:08:9f:cd:3b:fc:74:ae:da:85:82:0f:
38:b1:7c:46:4f:c7:27:dc:55:8f:ec:59:8e:77:45:ac:26:46:
0d:40:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:05 2026 by rpki-client