Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DcBPQliVGpgzfwCDGXexMzqBz8I.roa
File: DcBPQliVGpgzfwCDGXexMzqBz8I.roa (raw, json)
Hash identifier: aucKTyMH3IbqElnj11qrGnzzeUJY8869YGJ4IkRC2WQ=
Subject key identifier: 0D:C0:4F:42:58:95:1A:98:33:7F:00:83:19:77:B1:33:3A:81:CF:C2
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019CA2F935E3F2F7E35811E82E9741FC7355
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DcBPQliVGpgzfwCDGXexMzqBz8I.roa
Signing time: Sat 28 Feb 2026 06:39:27 +0000
ROA not before: Sat 28 Feb 2026 06:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a2:f9:35:e3:f2:f7:e3:58:11:e8:2e:97:41:fc:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 28 06:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dc04f4258951a98337f00831977b1333a81cfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:df:11:02:0d:4d:00:6b:3b:76:47:f0:b5:
2f:e8:9c:98:83:9f:b7:bd:cf:f4:0e:ee:14:38:f6:
28:c6:1a:bc:ba:f7:97:57:54:cd:11:06:d3:ca:88:
77:bb:df:61:20:35:de:29:ea:1c:c7:b8:38:35:a7:
53:6d:c6:7f:fe:ac:88:cd:89:6e:90:62:ab:57:16:
80:a3:dc:61:de:68:41:b1:92:90:2e:c4:57:ea:c1:
3d:cc:1b:26:0b:92:33:71:9d:e0:0b:44:2c:9d:fd:
0b:e1:9e:57:2f:8e:ff:0c:4b:05:97:28:76:e5:c1:
09:c3:19:35:06:69:3f:4d:87:e2:21:dd:23:02:10:
b6:d7:83:64:8b:b6:43:3f:36:8b:0a:c7:c1:ae:06:
e4:24:9d:d2:d2:e3:6b:ef:a6:7d:5f:94:1d:11:e0:
57:48:75:e0:be:80:65:ef:10:9a:c2:03:af:78:1d:
5e:64:be:e9:4d:68:01:5c:f9:ca:7f:ab:7e:88:92:
85:6a:85:71:80:a9:d1:e5:ed:d8:97:15:aa:aa:cd:
ba:5b:78:23:05:dc:de:bb:b5:6f:ff:1f:16:b1:35:
92:cf:e2:d3:fa:85:1e:d4:15:03:1a:a7:1e:89:52:
99:98:13:1c:2d:7a:77:91:5a:2e:ca:be:c5:ca:77:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C0:4F:42:58:95:1A:98:33:7F:00:83:19:77:B1:33:3A:81:CF:C2
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DcBPQliVGpgzfwCDGXexMzqBz8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:83:7f:fe:54:8e:2c:48:ca:69:01:24:63:e6:b3:c8:a8:0d:
35:2d:b1:f8:f7:5d:4f:e9:52:b6:1b:36:0c:de:31:f1:14:be:
f4:25:e9:e0:8a:10:ba:b4:9b:1a:59:2d:9a:f6:60:0d:98:ed:
e3:61:89:28:8b:db:85:fb:dd:25:56:a3:cb:2f:86:aa:c0:13:
0c:f6:13:75:1b:17:16:b6:60:48:8d:04:3c:e9:c1:40:90:ff:
cf:d2:be:07:da:38:96:ad:26:fe:c9:e8:ce:cf:3f:d4:b2:1a:
7e:07:57:a6:19:53:43:45:5f:f1:b6:ab:0b:8f:2b:73:3b:61:
ca:ae:9a:01:c3:32:67:33:74:c7:b3:9b:87:9f:60:8f:75:14:
de:38:83:b1:b2:c3:6b:9d:0d:b5:55:63:16:9b:14:42:f4:e6:
bd:90:1f:f3:a7:ec:ff:5d:07:bd:9d:e3:f6:3a:fc:4d:88:56:
e8:e5:82:db:48:e4:29:c9:7f:d2:58:ed:ff:cf:62:1b:02:78:
cf:22:1e:a8:e0:d6:6a:75:ec:c3:44:46:5c:79:78:7d:6c:84:
69:01:c0:7b:74:50:be:da:9f:50:cc:4c:b2:99:d3:0d:a3:48:
24:2e:ea:76:1f:fb:7c:8d:5a:cd:0d:9f:34:10:ec:a3:03:4d:
87:14:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 23:34:04 2026 by rpki-client