Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/DhcFXZ6jMW_ZqkOv151bguX3i0I.roa
File: DhcFXZ6jMW_ZqkOv151bguX3i0I.roa (raw, json)
Hash identifier: cM3wDGiyN6kWav0oguQAqHZtevePQDWeyk5utIPq1I4=
Subject key identifier: 0E:17:05:5D:9E:A3:31:6F:D9:AA:43:AF:D7:9D:5B:82:E5:F7:8B:42
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 01A08A0571DE772E5600C9330009FD27F9BF
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/DhcFXZ6jMW_ZqkOv151bguX3i0I.roa
Signing time: Thu 10 Sep 2026 06:33:27 +0000
ROA not before: Thu 10 Sep 2026 06:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197033
IP address blocks: 5.183.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:05:71:de:77:2e:56:00:c9:33:00:09:fd:27:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Sep 10 06:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e17055d9ea3316fd9aa43afd79d5b82e5f78b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:15:cf:53:6b:7d:82:2a:6c:20:f5:6d:35:
fa:a6:50:29:23:fa:b4:be:bd:56:d1:2c:f7:7c:75:
8c:ca:01:cb:8a:05:b4:a9:6d:d7:f5:3c:9a:fb:05:
9d:6c:d5:ca:70:a0:4b:f2:7d:65:e5:5b:55:6d:c3:
d5:29:de:1e:0d:2c:b6:37:16:80:fb:c7:6d:44:26:
f2:e9:4b:15:5e:1a:92:30:df:3a:93:7d:bc:12:da:
ec:74:2e:8f:a3:6c:da:4e:17:4a:7c:97:5e:48:7d:
d8:d0:76:8d:c1:e2:e8:fc:92:f3:7a:30:8d:ac:b8:
8b:ac:d1:ea:e1:65:1c:c7:10:07:da:88:b2:50:0a:
b3:f2:47:71:4b:f3:cb:6f:f3:90:aa:b9:d6:9d:cd:
9b:a7:b1:29:b7:96:4a:77:f8:09:05:3d:b1:e0:03:
ad:5c:53:7a:dd:2a:43:da:c3:62:e7:31:5e:cb:44:
19:ad:b7:d5:b0:22:dd:2a:19:04:73:4a:2c:1e:98:
80:31:38:f0:eb:7d:89:d2:9f:cd:86:16:56:3c:22:
29:5c:91:08:53:b5:e7:16:f3:33:2c:53:55:e2:c7:
c4:93:7d:e8:83:ed:e4:99:8d:80:52:bc:e2:30:f1:
7d:fb:25:f2:cd:87:43:c2:c5:dc:e0:33:9b:26:3a:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:05:5D:9E:A3:31:6F:D9:AA:43:AF:D7:9D:5B:82:E5:F7:8B:42
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/DhcFXZ6jMW_ZqkOv151bguX3i0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:b2:1b:c4:97:a1:88:19:43:27:65:10:ce:72:ee:6f:fb:1e:
03:b4:2b:01:c2:7e:c7:17:b1:96:38:3d:36:80:53:1e:66:59:
c9:32:c8:46:83:5a:ab:35:7c:b2:9c:5a:ff:c5:2a:fa:9f:8f:
0c:fd:11:67:ee:c9:3e:c1:e3:c5:94:25:f6:63:f4:d9:f1:59:
6a:34:c0:99:e2:bd:66:20:0e:28:57:6a:e8:34:3f:68:56:f5:
75:39:4e:ac:33:94:d6:b2:dd:ba:36:98:1c:7a:60:ad:76:9b:
e4:82:35:46:0f:97:92:e4:ab:13:bf:ce:58:17:eb:2f:eb:95:
d0:0f:f1:d1:f7:71:c8:ea:4b:ac:98:64:68:3b:1f:54:a4:7c:
6b:58:03:32:a5:4a:fa:14:80:b3:ba:5b:08:14:59:96:c9:f5:
9e:d9:21:26:39:e3:ec:55:d6:1b:d3:a6:d3:d3:5a:75:64:aa:
bb:22:81:be:ca:bb:d4:66:fd:64:29:c2:10:b3:50:19:1e:88:
20:1b:d2:18:60:54:be:5e:0f:0d:9c:4b:31:89:6d:a9:d8:39:
c1:de:11:cf:2e:c6:f3:09:fd:27:80:f9:cc:c9:ed:15:d1:ad:
a3:b2:00:1e:03:57:62:85:a7:a0:77:5a:2c:de:d4:50:c5:41:
9f:30:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:20:29 2026 by rpki-client