Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/dvXRkjs-45zB5XW29YCyKf1ztCg.roa
File: dvXRkjs-45zB5XW29YCyKf1ztCg.roa (raw, json)
Hash identifier: aEvTO527goc2fGvDjuX652xQ1MJZNYgikCVMkI8HG+U=
Subject key identifier: 76:F5:D1:92:3B:3E:E3:9C:C1:E5:75:B6:F5:80:B2:29:FD:73:B4:28
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019FC6D3784065B9A364AFDDDE751034AD38
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/dvXRkjs-45zB5XW29YCyKf1ztCg.roa
Signing time: Mon 03 Aug 2026 08:52:55 +0000
ROA not before: Mon 03 Aug 2026 08:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 189.13.246.0/24 maxlen: 24
189.13.247.0/24 maxlen: 24
189.13.248.0/24 maxlen: 24
189.13.249.0/24 maxlen: 24
189.13.250.0/24 maxlen: 24
189.13.251.0/24 maxlen: 24
189.13.252.0/24 maxlen: 24
189.13.253.0/24 maxlen: 24
189.13.254.0/24 maxlen: 24
189.13.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:d3:78:40:65:b9:a3:64:af:dd:de:75:10:34:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Aug 3 08:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76f5d1923b3ee39cc1e575b6f580b229fd73b428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:25:3b:aa:74:c1:f0:61:80:25:8e:a4:11:
57:5f:af:ef:11:77:10:95:14:95:96:ab:74:f3:c8:
ad:f1:d1:65:47:ca:ba:61:59:29:42:3f:0a:99:f7:
6a:18:8e:80:dc:d4:78:e9:97:f0:9a:d3:70:a5:06:
94:eb:0c:11:02:ce:4e:18:02:33:9c:e7:dc:79:3c:
b1:32:ba:34:e1:59:47:9e:ed:8a:9f:b8:bb:e2:58:
b0:a4:86:e6:77:4c:95:9e:9a:c4:7e:f9:54:d0:2e:
1b:3c:dd:07:72:d3:d8:b0:a8:0c:33:79:65:84:c7:
46:1d:89:fd:25:13:00:ca:1a:9c:50:05:f6:d4:d5:
64:a8:3b:7c:a4:bb:08:1c:96:e0:e6:18:7a:21:95:
79:0b:e3:97:05:5c:43:8a:80:4e:be:0d:e4:28:49:
0d:54:a6:d0:48:d0:2a:10:97:a1:a6:4a:a4:84:5f:
66:7f:56:e1:17:0e:a4:a1:60:13:f0:22:bb:58:e9:
66:4b:82:6f:49:43:99:f5:c9:e5:1b:95:85:7e:13:
f8:3a:62:c6:83:e4:20:b9:b3:ad:74:6d:2e:73:c4:
21:77:fc:04:25:2c:88:fa:89:9b:3d:a9:6a:6b:a1:
dd:ea:07:df:53:9d:9f:a2:dc:0e:cd:cb:ff:1d:83:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:D1:92:3B:3E:E3:9C:C1:E5:75:B6:F5:80:B2:29:FD:73:B4:28
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/dvXRkjs-45zB5XW29YCyKf1ztCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.246.0-189.13.255.255
Signature Algorithm: sha256WithRSAEncryption
43:17:4c:d9:45:cd:53:d7:dc:09:1d:9d:91:b4:51:d7:fb:27:
6a:58:61:b4:57:10:e3:62:87:5b:42:d2:c9:5c:88:b0:dc:87:
83:fa:49:91:d0:39:f3:64:a6:4c:ad:bf:99:f1:07:70:b6:c5:
47:ef:2c:2e:7b:5c:b5:0d:98:1a:47:4d:c6:fb:80:5b:1c:b5:
51:dc:24:aa:74:47:dc:67:5d:8e:a3:22:69:97:1a:f4:d0:19:
3b:eb:08:dd:0d:10:38:b2:16:9b:57:74:fc:9f:e2:9f:b7:f0:
f3:dd:aa:e9:69:9d:bb:83:93:5d:43:d7:02:ed:96:45:45:27:
19:1e:9e:f7:03:a5:7b:c9:c4:41:5d:81:6c:63:16:30:cd:d9:
93:34:85:0e:7a:fb:51:52:2d:f0:08:ad:1b:db:0d:44:89:6f:
e5:ac:9a:2b:b7:91:00:e1:28:e1:f0:48:4a:b6:9e:dc:8a:57:
e3:aa:65:3c:ba:3b:ba:61:1b:ee:3a:29:b4:21:2d:d8:7a:f7:
f6:76:02:39:6b:e5:0a:24:30:8a:ff:d8:e1:2b:64:1b:f9:32:
8b:ea:48:ad:c2:50:ca:95:a2:d7:bf:35:6d:85:06:79:4b:0b:
86:a8:44:dc:8a:51:57:4b:dd:44:65:82:e9:43:70:0b:43:5b:
1e:7c:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 16:20:44 2026 by rpki-client