Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/fbDzpva5QPPmUMwTw415ySp9CiI.roa
File: fbDzpva5QPPmUMwTw415ySp9CiI.roa (raw, json)
Hash identifier: P8jqZqu6kzbZ3aLVmZys2OTCIU/hcpk5PrX6lFSeous=
Subject key identifier: 7D:B0:F3:A6:F6:B9:40:F3:E6:50:CC:13:C3:8D:79:C9:2A:7D:0A:22
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01A06C40C96F36D30C778D8EE0C2CAE4CA3C
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/fbDzpva5QPPmUMwTw415ySp9CiI.roa
Signing time: Fri 04 Sep 2026 11:49:40 +0000
ROA not before: Fri 04 Sep 2026 11:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.203.0/24 maxlen: 24
89.249.205.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
89.249.206.0/24 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:40:c9:6f:36:d3:0c:77:8d:8e:e0:c2:ca:e4:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 4 11:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7db0f3a6f6b940f3e650cc13c38d79c92a7d0a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:56:b1:38:61:0d:76:eb:d8:bd:f5:20:48:
da:2b:70:0b:1f:9d:85:e9:5d:2a:6a:23:40:ca:3a:
95:68:a8:89:ad:ce:7d:26:1e:7b:18:a4:66:b6:7e:
c4:8c:53:1f:db:8c:05:03:9c:e8:07:a8:37:6d:e2:
8d:1c:37:96:76:c1:5c:71:4a:91:91:72:c9:0c:2b:
51:fc:ab:8d:80:5e:8d:d7:3e:7b:5c:96:db:99:e1:
a8:37:9f:8c:9a:e9:f6:e9:12:c4:8c:e1:35:5e:66:
35:9a:81:30:0c:13:23:65:dd:e2:45:0f:59:05:aa:
4c:e5:bf:40:8f:57:e5:09:88:fe:42:eb:f0:be:d0:
5b:2d:e0:82:60:d2:13:7d:57:13:ec:91:41:dd:09:
29:68:a9:d7:a0:74:94:75:e0:91:8f:a7:34:d2:b7:
9c:12:26:c2:7a:74:be:df:63:e5:14:f2:a0:9f:15:
c3:ab:fc:09:a1:4a:5a:1c:0f:02:6d:15:5b:06:ed:
55:74:4a:71:a3:08:71:ab:a9:64:f5:e1:23:b7:85:
ea:9f:86:b0:c6:9c:91:93:d5:df:c7:c9:57:0f:43:
70:6f:ed:1c:df:3c:cc:05:1d:90:58:48:9c:04:7f:
bc:39:50:1c:c0:9b:f4:16:ed:29:4b:f4:99:89:de:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:F3:A6:F6:B9:40:F3:E6:50:CC:13:C3:8D:79:C9:2A:7D:0A:22
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/fbDzpva5QPPmUMwTw415ySp9CiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.203.0/24
89.249.205.0-89.249.207.255
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:76:82:30:9a:88:78:ab:7d:b6:74:05:fd:a4:96:b4:cb:82:
e5:36:21:72:d8:ac:b6:f9:6a:fc:44:44:81:a7:20:85:7d:69:
de:e1:a1:dc:34:ea:cf:33:92:91:b6:ca:35:fd:65:d6:20:2e:
8c:4d:79:6e:ce:6b:e3:2c:0e:b0:7c:b8:c9:40:02:c3:e0:43:
8d:ef:ef:21:3b:94:61:87:47:cb:07:7a:91:29:d4:d5:9f:60:
a8:64:a2:80:55:77:fe:44:09:a6:ab:bf:cc:c8:12:98:20:0c:
4f:e7:d8:fa:b1:57:f4:cc:4f:2c:9f:18:d6:40:78:ca:73:8e:
da:a0:b7:93:0f:b9:29:3a:b9:54:28:c3:f8:d5:66:ca:23:d1:
9a:78:fb:59:bc:16:a2:e0:bf:02:6c:53:85:7c:ce:98:a7:b8:
0f:d0:34:64:d8:34:34:69:3e:a7:3d:b5:c3:67:a2:c6:d8:47:
07:e0:29:65:3b:c0:6a:9d:ba:b5:6a:e2:19:b7:b3:1a:3c:17:
2c:67:ad:70:31:a0:d3:c7:69:00:88:57:80:cc:09:f4:c7:ce:
2f:74:e7:5e:48:17:16:fd:90:21:b7:2b:26:55:62:40:d0:60:
ee:42:3e:08:47:39:48:5f:ee:a8:87:27:48:b0:06:61:8a:f7:
9a:9c:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:38:24 2026 by rpki-client