Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/DwcDJC-CJaGVWf9qHcY4vwfNCUA.roa
File: DwcDJC-CJaGVWf9qHcY4vwfNCUA.roa (raw, json)
Hash identifier: kA9UN61i21C9VPza4E7NFLe7xs0KibzhsYhJ5co5Az4=
Subject key identifier: 0F:07:03:24:2F:82:25:A1:95:59:FF:6A:1D:C6:38:BF:07:CD:09:40
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A07A82FEC455BFEE36FD57E1B53A812BF9
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/DwcDJC-CJaGVWf9qHcY4vwfNCUA.roa
Signing time: Mon 07 Sep 2026 06:16:40 +0000
ROA not before: Mon 07 Sep 2026 06:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 194.163.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:82:fe:c4:55:bf:ee:36:fd:57:e1:b5:3a:81:2b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 7 06:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f0703242f8225a19559ff6a1dc638bf07cd0940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:65:e3:b3:e3:b7:e4:11:d9:42:6c:02:b7:
96:ce:1f:c5:d7:5f:cf:2d:bb:89:e7:49:d4:d9:dc:
84:4c:0f:e8:25:3b:7c:ff:c1:c4:15:4d:34:24:f0:
c0:d0:49:78:94:b4:35:2c:2a:53:95:c2:46:f1:31:
e3:d9:6d:ed:19:59:24:46:fe:e4:bc:81:53:58:6f:
d1:64:c1:2a:39:be:39:3c:02:6e:52:7e:85:5f:b9:
67:05:77:66:1b:bd:8b:fe:41:15:ff:e7:8a:35:35:
59:a5:d8:e9:b7:04:f5:72:f1:6a:1b:52:0c:46:ac:
d6:d1:c3:67:5f:c7:40:76:7b:51:46:3b:a8:84:0c:
14:97:8f:0d:a1:3b:09:73:50:63:f8:a6:1c:7c:98:
4b:a2:52:bf:94:d2:25:26:95:66:10:3c:de:cf:7d:
99:e6:f7:f4:ba:41:ac:2b:ae:ad:1b:e1:0f:2b:80:
b6:64:1d:93:ad:6d:f6:c2:95:ad:d8:f8:3d:97:80:
7f:b2:25:36:30:04:62:f6:63:d0:08:0c:91:f7:5b:
08:fc:0f:d0:2f:13:ac:c8:61:ff:c0:1d:60:a3:69:
e8:4c:19:1a:74:e0:53:3b:08:0b:3c:32:35:5e:13:
5f:e4:ca:f1:f7:d2:52:4b:b7:67:4e:35:82:2e:3e:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:03:24:2F:82:25:A1:95:59:FF:6A:1D:C6:38:BF:07:CD:09:40
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/DwcDJC-CJaGVWf9qHcY4vwfNCUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.93.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e7:a8:f9:da:f1:39:f2:54:c7:44:21:40:d4:d2:d7:5e:68:
d3:bd:2f:6a:9b:35:7c:7f:96:5a:19:6c:7c:e7:1c:24:50:57:
7b:31:db:aa:95:01:8a:54:5f:09:1e:88:77:dd:77:6a:3c:1d:
61:92:37:01:e0:9d:84:f6:52:8d:8f:65:70:c0:1f:bd:d8:fe:
11:04:b2:6c:b4:df:bd:7b:2b:e9:4b:26:da:cd:49:ca:62:ec:
15:5e:05:cb:ee:3c:06:75:05:53:2f:a9:88:e3:fc:45:c2:7f:
51:a1:d0:fc:c5:8f:ef:bd:1b:fc:d9:34:62:f2:30:61:7c:73:
4f:d1:f5:d3:46:82:35:32:fd:15:02:05:48:8d:08:6e:8f:85:
c8:bb:56:b8:f3:37:f1:ac:cf:5f:5b:6b:61:65:69:67:60:ff:
6d:58:5d:7d:b4:ac:9c:08:93:2b:b4:74:6c:5f:8e:96:dc:25:
73:de:04:14:38:15:8c:d2:22:64:62:c3:e0:9c:90:44:65:29:
d3:12:db:ff:44:4d:b5:48:c8:99:c2:b6:4d:af:20:f1:1a:ea:
ac:a0:e8:63:93:88:92:f3:ae:73:d1:29:59:b6:fb:11:5a:e0:
c1:cb:19:66:b3:e4:25:a4:d5:d0:80:c9:96:0d:01:cb:b2:3d:
48:3e:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:28:21 2026 by rpki-client