Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DSpPfa2LINgSn4RWcauAPaZB7b0.roa
File: DSpPfa2LINgSn4RWcauAPaZB7b0.roa (raw, json)
Hash identifier: wojB04WWLh5GW0+3aZJmnkXoyFmBS/vwNcYkevXsFQo=
Subject key identifier: 0D:2A:4F:7D:AD:8B:20:D8:12:9F:84:56:71:AB:80:3D:A6:41:ED:BD
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1265CC21E196D0A1B7C978436EE5EBB9C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DSpPfa2LINgSn4RWcauAPaZB7b0.roa
Signing time: Sat 10 Oct 2026 15:09:35 +0000
ROA not before: Sat 10 Oct 2026 15:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:5c:c2:1e:19:6d:0a:1b:7c:97:84:36:ee:5e:bb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 10 15:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d2a4f7dad8b20d8129f845671ab803da641edbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:f8:24:38:97:33:73:48:67:ff:6d:2b:79:
ea:ca:a0:59:3d:d1:26:1f:1f:53:28:2a:49:a6:19:
b6:be:6b:68:f7:a0:00:02:5c:df:44:56:1f:94:c5:
f3:39:1a:09:d1:b7:de:ca:49:76:e1:68:f9:43:2b:
c2:97:b5:18:14:fe:6d:3a:d3:fc:6a:99:57:d7:3d:
5c:43:b6:75:27:45:56:b3:3e:9e:e3:a4:36:c5:05:
27:fa:d8:ce:82:7f:4a:c8:f6:db:cc:08:33:a8:ae:
9f:6f:5f:98:98:94:a5:fc:be:91:05:cd:c3:c2:80:
ac:08:34:00:d2:d1:c0:97:4b:07:27:41:10:a0:85:
6c:9f:98:75:24:e7:20:cf:39:ac:a0:69:ab:54:7c:
7e:da:f9:7c:53:96:ab:f4:35:6c:db:23:89:39:88:
99:11:78:e3:04:ae:31:cb:96:ff:4f:3c:f7:8a:de:
5d:dd:a4:00:b7:1d:ba:5f:8e:f2:7a:2a:ad:1c:fe:
bf:8b:6d:93:b6:88:98:76:d1:47:e8:50:d8:fc:48:
8b:37:6e:1a:64:f2:8c:d6:30:11:c7:f6:0a:3c:d0:
8c:2e:05:49:3d:c3:cb:95:92:d0:ee:b7:8e:4c:5c:
d0:2d:53:e3:42:f4:5b:9b:6e:32:63:bb:44:09:f7:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:4F:7D:AD:8B:20:D8:12:9F:84:56:71:AB:80:3D:A6:41:ED:BD
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DSpPfa2LINgSn4RWcauAPaZB7b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7e:0b:b0:fa:43:27:8f:92:7a:1f:20:f2:60:3b:de:71:68:
d7:cf:c6:5d:f3:38:cc:72:fe:6f:aa:b2:33:1f:51:b2:65:8c:
52:d7:36:c6:0c:d9:fa:12:0c:12:5e:e5:87:5e:b6:8b:39:9c:
fc:4d:b1:56:0e:3d:3f:f7:18:88:53:90:7a:d4:6f:61:15:07:
f5:69:01:eb:0e:6f:15:6d:b4:89:32:67:65:33:a0:9d:d5:74:
f3:34:0c:5b:54:d2:f5:e1:ad:93:ab:e7:93:68:08:4e:8b:0c:
ea:03:2d:0a:50:08:d1:15:a9:cf:3c:77:90:aa:29:58:c7:9f:
03:f9:00:74:e7:52:64:9c:12:a9:42:5c:5a:39:85:3f:b3:53:
11:a6:80:54:26:50:ea:44:1a:d2:99:af:45:3d:0c:9d:c0:c7:
0c:e8:e8:71:63:5d:9b:d1:38:e2:c1:b4:16:71:a1:f6:65:f0:
5f:fb:31:6c:91:f1:ff:61:0e:a9:22:c7:30:68:08:a1:30:66:
32:41:9f:af:2c:2f:26:fc:b9:5e:bf:5b:98:97:6c:af:cb:33:
7b:63:b4:59:02:8c:53:c9:3f:f5:ab:1c:4f:81:4f:73:96:a1:
e4:3b:ae:8f:b7:eb:b7:0e:cb:6e:4b:d8:6f:5f:b8:80:06:5c:
71:03:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:39 2026 by rpki-client