Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa
File: dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa (raw, json)
Hash identifier: G49JKof/PjJ/pDTjMFk4RiR1s/uu+QqKOQDfL/6PwFg=
Subject key identifier: 74:99:7C:AF:82:3D:70:A4:1F:0C:00:BA:EC:5C:DA:9A:BE:80:E0:DB
Certificate issuer: /CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Certificate serial: 019F2368493118BA6F3034EBAF8E7BB968EB
Authority key identifier: E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393262
IP address blocks: 45.10.131.0/24 maxlen: 24
77.81.141.0/24 maxlen: 24
78.159.151.0/24 maxlen: 24
89.44.34.0/24 maxlen: 24
91.92.32.0/24 maxlen: 24
91.92.36.0/24 maxlen: 24
91.92.37.0/24 maxlen: 24
91.231.3.0/24 maxlen: 24
95.214.76.0/24 maxlen: 24
95.214.77.0/24 maxlen: 24
95.214.78.0/24 maxlen: 24
95.214.79.0/24 maxlen: 24
194.147.64.0/24 maxlen: 24
194.147.65.0/24 maxlen: 24
212.11.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:49:31:18:ba:6f:30:34:eb:af:8e:7b:b9:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74997caf823d70a41f0c00baec5cda9abe80e0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:ea:5e:de:60:25:2e:f0:05:6d:fb:7f:76:
25:96:b9:5d:61:c6:2a:70:8c:92:43:03:c7:be:1c:
5d:e4:2e:80:bf:1b:a2:4e:2c:80:1a:96:90:aa:14:
ab:ee:91:4a:70:e2:c0:9e:d3:38:68:74:f6:1c:40:
0e:1b:4d:40:ba:36:d7:8c:9f:df:a0:6c:43:43:15:
c8:71:fb:8e:eb:c6:c0:8a:de:26:3a:98:40:ab:07:
a4:b5:45:92:da:b9:04:1c:c3:ec:2d:62:9e:40:50:
5e:94:43:4e:c9:0a:93:36:1f:c7:ce:92:a4:23:82:
7c:b4:a4:48:81:68:bc:d7:ed:3a:eb:e9:86:68:b4:
8a:6a:e2:cd:4d:75:c1:14:ec:fa:fb:a1:5f:be:47:
2a:43:64:76:45:1e:2b:89:4e:95:22:98:23:f9:86:
b5:0c:ec:8b:42:44:b6:c5:1e:48:ad:6d:5c:a9:c2:
2c:cf:43:fe:89:98:32:f1:ac:8f:0a:1b:fe:84:7b:
89:61:02:75:38:b5:24:15:7b:d1:49:b3:c4:07:9c:
4b:22:e4:5a:08:1a:ab:5b:52:4a:57:66:f9:04:8e:
66:42:40:44:4e:01:27:67:34:92:45:a2:21:99:d6:
b3:8a:0c:80:de:84:bf:92:9a:92:eb:1e:3c:d6:8b:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:7C:AF:82:3D:70:A4:1F:0C:00:BA:EC:5C:DA:9A:BE:80:E0:DB
X509v3 Authority Key Identifier:
keyid:E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.131.0/24
77.81.141.0/24
78.159.151.0/24
89.44.34.0/24
91.92.32.0/24
91.92.36.0/23
91.231.3.0/24
95.214.76.0/22
194.147.64.0/23
212.11.95.0/24
Signature Algorithm: sha256WithRSAEncryption
11:15:a0:c6:4b:fd:12:40:4f:9d:c9:f6:8c:54:91:14:46:25:
2e:ce:49:ae:dd:c0:38:f0:b6:fb:fc:8a:a2:6b:e7:4d:0f:6b:
47:1e:ee:20:7c:74:76:c5:b9:78:3f:d0:76:78:c8:b0:c8:8e:
9b:d5:a7:ff:fc:61:00:c3:95:fc:03:8a:e6:27:91:98:1b:86:
a3:bc:b0:a3:4c:43:26:c1:03:95:5a:22:02:2b:e3:ed:cc:4e:
7d:52:9e:4e:c0:b0:50:a4:a6:2e:9f:cd:23:6e:03:33:03:a1:
6e:e8:df:a3:e8:c7:42:18:56:8d:3e:14:7c:1c:6d:dd:5d:1f:
a5:3b:b5:4d:fb:7f:cc:d2:8e:42:21:e7:01:9f:90:e8:ea:71:
b7:4a:02:0b:2b:e1:fd:ea:2d:6e:fe:79:f6:23:82:83:b8:06:
84:fb:cb:4e:48:b7:44:91:4a:69:20:9f:75:18:c7:5d:d8:77:
03:9a:84:d8:fa:d0:33:f0:f6:d5:36:41:57:01:01:52:b9:9d:
89:4a:77:1c:0c:4c:e0:35:23:e8:b8:ff:f6:0b:0e:97:5c:19:
1b:f7:40:5b:f4:84:84:59:34:ca:6e:81:4d:88:28:ac:14:d7:
15:7a:65:45:8e:52:55:01:0e:a5:6f:96:9e:92:e9:f9:08:63:
40:03:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:48 2026 by rpki-client