Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/DM-pFRR9LpWRIpvf-2h5y8_0fsg.roa
File: DM-pFRR9LpWRIpvf-2h5y8_0fsg.roa (raw, json)
Hash identifier: OKUcDnP6WYswr/5CqsQAiDROKhZGes/nlC9qde6uU4Y=
Subject key identifier: 0C:CF:A9:15:14:7D:2E:95:91:22:9B:DF:FB:68:79:CB:CF:F4:7E:C8
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A14BC09476433856767A9424B4BDD646D8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/DM-pFRR9LpWRIpvf-2h5y8_0fsg.roa
Signing time: Sat 17 Oct 2026 21:24:34 +0000
ROA not before: Sat 17 Oct 2026 21:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 146.19.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:c0:94:76:43:38:56:76:7a:94:24:b4:bd:d6:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 17 21:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ccfa915147d2e9591229bdffb6879cbcff47ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:70:03:9b:d7:35:2a:04:f1:b2:53:92:d5:
30:4b:d5:aa:13:0d:5d:8f:6b:25:41:b0:49:ea:b5:
7c:e2:4e:ac:fd:07:05:a1:99:25:53:f6:7a:84:36:
46:39:4a:09:43:84:3e:d2:e1:92:ca:74:45:9b:d3:
0a:53:aa:fe:d8:0e:c9:5c:20:8c:eb:37:35:ff:3c:
63:c7:2e:ba:5f:4f:dd:c0:85:63:e2:14:e9:11:69:
06:ed:f7:0f:bd:42:6e:32:5d:85:3f:2e:42:f4:cb:
c5:42:30:ef:77:e0:53:7f:af:8f:30:69:88:f2:53:
8f:98:68:8c:ae:dd:74:d8:71:d4:27:38:f8:84:32:
92:08:fb:97:90:16:4f:f1:04:d0:36:e8:89:bd:af:
12:9f:7e:a1:bf:e6:ac:87:e5:2e:ce:ac:52:dd:3c:
d0:8a:57:78:52:a9:8b:48:8b:c2:ae:d5:e1:0b:a9:
47:88:c9:c2:61:fd:34:da:87:c6:9c:1d:e6:98:3f:
37:ef:da:ae:b0:91:5f:21:70:5c:d3:1f:38:55:e6:
b8:d6:7b:62:72:78:99:1d:7a:af:fe:ee:52:f5:9a:
cf:bf:b2:a8:17:cd:77:8e:74:dd:22:31:1d:13:42:
a8:91:17:a6:5d:b2:11:a1:5e:d5:67:02:8c:0d:2a:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:A9:15:14:7D:2E:95:91:22:9B:DF:FB:68:79:CB:CF:F4:7E:C8
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/DM-pFRR9LpWRIpvf-2h5y8_0fsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5d:97:73:aa:be:19:57:9b:39:30:35:42:dd:fa:16:68:e8:
56:2b:dd:24:43:71:72:2f:b6:64:af:04:c0:be:70:ee:1e:5b:
c0:df:b8:d1:bd:99:ec:3c:f9:26:7f:94:ba:db:fa:17:84:41:
d5:bd:fc:dc:30:8b:c1:8c:7c:ba:a2:e1:da:d5:12:ba:a6:cc:
3c:fe:98:bf:6f:e1:fa:22:c4:c8:10:4c:e6:17:dc:46:b6:cb:
92:ef:8a:c4:e3:9f:c1:ea:56:1d:ff:eb:db:6f:b0:e0:cf:72:
e2:a6:94:9f:e7:cb:49:4e:13:a4:42:ee:85:e9:5c:86:1b:4e:
af:11:85:a6:d9:0b:fb:af:ab:e0:d9:e8:1c:9a:e6:05:b0:69:
5e:a5:7b:f5:d3:88:04:76:1f:83:cb:4a:8d:6e:6d:96:54:2e:
64:b4:ee:9b:33:2a:a8:3d:c5:56:7f:c6:b5:8c:6d:ff:af:82:
f7:ec:f4:e0:87:8e:3c:ed:70:0a:16:f1:f8:bb:f1:d3:01:ae:
74:ae:6c:73:3f:de:d2:5d:ca:fa:0d:9c:d1:05:9f:9e:58:c5:
89:c7:d4:4a:d1:df:7b:65:e2:52:a8:dc:46:4f:94:f3:18:21:
8a:41:0e:97:26:f0:85:90:0b:c4:fe:2a:c7:e3:08:89:e0:49:
ab:b1:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:11:15 2026 by rpki-client