Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/Ddq6eIxTRtOHPnrY9jKZa9jPYXY.roa
File: Ddq6eIxTRtOHPnrY9jKZa9jPYXY.roa (raw, json)
Hash identifier: ISTOWS2kKT7+ljQNacRTBaCGoUfzHtIDb41gFNxg4G4=
Subject key identifier: 0D:DA:BA:78:8C:53:46:D3:87:3E:7A:D8:F6:32:99:6B:D8:CF:61:76
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019E7FBEBC5399741E367B8A58D4B92938C4
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/Ddq6eIxTRtOHPnrY9jKZa9jPYXY.roa
Signing time: Sun 31 May 2026 20:34:26 +0000
ROA not before: Sun 31 May 2026 20:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213644
IP address blocks: 45.89.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:be:bc:53:99:74:1e:36:7b:8a:58:d4:b9:29:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: May 31 20:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ddaba788c5346d3873e7ad8f632996bd8cf6176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:0d:0f:3c:3c:bf:1b:38:aa:e1:2a:e6:a8:
ec:30:b7:b5:e9:7d:db:a7:1e:aa:c1:f6:8b:2b:1f:
89:d5:0e:16:35:88:7b:58:dd:7c:a2:6c:c9:c6:cf:
0c:4e:08:3f:49:d4:44:f8:cf:8b:57:69:13:73:f2:
7d:e3:20:42:bf:05:db:0b:46:8c:5d:c4:b7:3e:e7:
04:3d:72:fa:20:14:ac:c4:75:e6:2a:c4:60:0a:b8:
4a:86:b0:3d:28:2f:d8:d0:dc:ae:cd:dd:e9:a3:bf:
f3:ea:21:37:3c:14:65:71:54:ce:13:99:4e:bf:b0:
df:fd:06:c2:e8:dd:97:54:e5:49:2d:c0:e0:f7:9d:
09:71:0a:5f:76:82:2d:97:2f:9a:9a:8f:07:13:99:
96:2d:4c:55:16:3a:56:60:aa:44:13:9b:bd:ef:c3:
80:45:5f:fd:4b:28:21:cb:20:a5:b0:97:85:b1:87:
79:bb:65:09:8f:b4:24:05:28:b4:cd:98:5d:2d:6c:
c2:5d:16:a6:52:8d:1d:b4:0b:7e:43:30:91:d7:89:
d3:ae:c2:93:8a:f1:e5:0b:2c:92:69:a6:7a:5c:c6:
cf:e1:64:86:a1:6b:8a:e3:d3:62:da:e4:23:4b:41:
f5:5f:66:28:4b:32:b6:ae:e5:9f:9f:d8:10:29:89:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:BA:78:8C:53:46:D3:87:3E:7A:D8:F6:32:99:6B:D8:CF:61:76
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/Ddq6eIxTRtOHPnrY9jKZa9jPYXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d9:9a:bb:56:a1:bd:55:4f:8f:d1:aa:f6:cf:5b:08:a8:1c:
0d:82:fc:e7:fd:6d:e8:27:d5:0a:7f:c7:9e:b4:7c:9c:e1:5f:
12:22:f7:47:79:d3:e1:c2:4b:94:d5:57:b3:89:3f:23:7d:ca:
e9:01:82:bb:df:ab:38:23:99:09:fb:d8:0f:e6:cf:c9:3c:b6:
5c:14:fc:62:bf:0a:ac:6e:a0:f3:32:2b:40:b6:a5:14:27:e0:
12:be:aa:22:4a:7f:36:fd:19:71:c4:2f:40:62:8c:ed:ad:d0:
d5:8a:c9:9b:a2:f5:52:29:12:a1:42:60:98:b8:c0:2d:63:08:
12:7f:5d:75:06:36:98:3f:82:e6:ad:2a:48:61:d6:20:53:58:
52:2a:06:41:83:57:28:ec:e2:54:e0:84:f0:f5:dd:90:ea:bc:
fe:8f:5e:47:83:6a:22:2e:6c:f8:8c:77:c7:90:ad:5b:45:9b:
1e:9c:df:d7:d1:8c:0c:cf:ff:10:49:86:c5:12:1b:06:a3:a1:
ad:1b:b3:89:8c:19:79:f1:97:cc:24:1d:c9:19:d5:3d:bf:53:
43:ab:e0:ec:c5:ed:27:8c:17:75:3c:e0:50:c0:46:f4:60:6d:
ff:12:b0:a0:ba:12:0a:e9:d3:90:9a:8b:a0:11:34:8d:4f:42:
5e:5e:b2:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5/vrxTmXQeNnuKWNS5KTjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjYwNTMxMjAzNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGRhYmE3ODhjNTM0NmQzODczZTdhZDhmNjMyOTk2YmQ4Y2Y2MTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C4NDzw8vxs4quEq5qjsMLe16X3b
px6qwfaLKx+J1Q4WNYh7WN18omzJxs8MTgg/SdRE+M+LV2kTc/J94yBCvwXbC0aM
XcS3PucEPXL6IBSsxHXmKsRgCrhKhrA9KC/Y0Nyuzd3po7/z6iE3PBRlcVTOE5lO
v7Df/QbC6N2XVOVJLcDg950JcQpfdoItly+amo8HE5mWLUxVFjpWYKpEE5u978OA
RV/9SyghyyClsJeFsYd5u2UJj7QkBSi0zZhdLWzCXRamUo0dtAt+QzCR14nTrsKT
ivHlCyySaaZ6XMbP4WSGoWuK49Ni2uQjS0H1X2YoSzK2ruWfn9gQKYmtIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3auniMU0bThz562PYymWvYz2F2MB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvRGRxNmVJeFRSdE9IUG5yWTlqS1phOWpQWVhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVnfMA0G
CSqGSIb3DQEBCwUAA4IBAQBH2Zq7VqG9VU+P0ar2z1sIqBwNgvzn/W3oJ9UKf8ee
tHyc4V8SIvdHedPhwkuU1VeziT8jfcrpAYK736s4I5kJ+9gP5s/JPLZcFPxivwqs
bqDzMitAtqUUJ+ASvqoiSn82/RlxxC9AYoztrdDVismbovVSKRKhQmCYuMAtYwgS
f111BjaYP4LmrSpIYdYgU1hSKgZBg1co7OJU4ITw9d2Q6rz+j15Hg2oiLmz4jHfH
kK1bRZsenN/X0YwMz/8QSYbFEhsGo6GtG7OJjBl58ZfMJB3JGdU9v1NDq+Dsxe0n
jBd1POBQwEb0YG3/ErCguhIK6dOQmougETSNT0JeXrI3
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:29:51 2026 by rpki-client