Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/DiLPG7q1eU0X4LStWu3Uat5ADzQ.roa
File: DiLPG7q1eU0X4LStWu3Uat5ADzQ.roa (raw, json)
Hash identifier: mOWC/7SO0jPS6L/HrZfmBRc6i28EYynuGw5at3t3qcI=
Subject key identifier: 0E:22:CF:1B:BA:B5:79:4D:17:E0:B4:AD:5A:ED:D4:6A:DE:40:0F:34
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F69D9AF7CCFC031A19AA1F7E6503CECD
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/DiLPG7q1eU0X4LStWu3Uat5ADzQ.roa
Signing time: Thu 01 Oct 2026 08:38:39 +0000
ROA not before: Thu 01 Oct 2026 08:38:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16015
IP address blocks: 213.253.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9d:9a:f7:cc:fc:03:1a:19:aa:1f:7e:65:03:ce:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:38:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e22cf1bbab5794d17e0b4ad5aedd46ade400f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:96:11:eb:80:d1:d1:b6:81:f2:71:d2:f3:
19:30:22:7d:92:37:99:d3:48:ad:94:01:21:a5:ce:
07:e2:83:1b:ca:d7:e8:9d:ef:52:56:8d:c2:ed:ce:
cc:91:b4:f4:e8:a0:a6:2f:80:db:66:6b:a3:22:82:
6f:09:62:34:d7:78:df:54:d0:f8:4b:c5:c9:d6:aa:
b4:0a:1a:2f:ea:fe:cf:4e:51:b2:51:9a:16:d3:79:
9e:f1:2d:fb:48:7d:9f:20:a1:c0:46:f3:0b:8e:12:
88:9c:24:e9:54:c8:d1:9e:fb:a1:fb:95:86:f7:bd:
36:6a:1f:9c:7b:15:07:7f:01:fe:75:ac:48:cd:2e:
08:28:36:ef:08:e0:2c:d5:09:69:a8:f4:b3:70:99:
42:d7:36:09:22:a1:d9:c2:b7:45:04:26:1e:94:2f:
37:39:ad:e1:bd:88:c3:57:2d:76:8a:30:f5:46:53:
a2:47:22:3e:57:0e:9e:27:8f:7b:84:5c:fa:5d:ff:
88:85:ff:c5:3f:b5:67:1d:71:b6:0c:56:06:c4:99:
63:b4:68:1a:e3:11:96:cb:21:29:af:a0:84:26:79:
e7:16:12:54:82:57:88:a8:cb:2e:76:ee:60:de:91:
36:a3:d7:ff:e2:00:8b:fc:2b:4e:ed:76:f5:25:a8:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:CF:1B:BA:B5:79:4D:17:E0:B4:AD:5A:ED:D4:6A:DE:40:0F:34
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/DiLPG7q1eU0X4LStWu3Uat5ADzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.194.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2f:fb:aa:3f:dc:b9:75:56:da:b7:17:a6:ee:2a:e4:48:7e:
c1:a3:83:9e:f3:31:8e:7a:2f:90:a8:e6:ba:04:21:a5:de:52:
d4:0c:d9:19:c9:6a:57:e7:75:6f:a3:22:dc:4e:e0:51:eb:b9:
4f:7e:e3:b8:cb:ef:8f:49:a6:a9:8b:99:7b:51:0e:fa:cf:6c:
e1:ad:79:5b:bf:5c:3e:72:01:1a:1b:fc:c9:56:2a:ad:a9:cd:
1c:c0:99:ce:8c:22:94:c6:23:99:ed:63:a6:af:96:22:4e:36:
b4:52:2b:32:9c:eb:83:75:a0:d7:40:e6:8d:46:ac:3e:60:25:
7c:70:cb:ba:53:7b:47:41:bf:10:82:8f:b8:92:9d:5c:58:45:
65:f8:cf:d0:b7:66:de:d4:19:9d:8e:9d:ae:68:ff:50:1a:0c:
69:30:d4:08:e0:c7:b6:ba:ed:58:3a:a7:0b:bb:5e:93:63:dd:
77:d2:b4:8c:61:81:5a:3f:b3:e1:b3:be:f2:80:9e:d3:09:6b:
c0:25:0e:5c:fe:36:34:93:e8:80:69:cc:d5:6f:98:86:4c:1d:
26:31:96:1b:f9:3b:04:dd:fd:20:e4:bb:20:99:8c:cf:3d:d7:
99:f5:90:81:ee:66:2a:35:28:c4:1e:94:13:c6:39:c4:84:44:
67:f9:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:57 2026 by rpki-client