Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/DOzgdPzODjDX1Ql-hTykAK7psLs.roa
File: DOzgdPzODjDX1Ql-hTykAK7psLs.roa (raw, json)
Hash identifier: mYengSshg8va1KT9JslIYiakS9Az+FP585Uc0+emJdk=
Subject key identifier: 0C:EC:E0:74:FC:CE:0E:30:D7:D5:09:7E:85:3C:A4:00:AE:E9:B0:BB
Certificate issuer: /CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Certificate serial: 019FACC623EE8731DDC965E3A80D1093A865
Authority key identifier: 9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/DOzgdPzODjDX1Ql-hTykAK7psLs.roa
Signing time: Wed 29 Jul 2026 07:28:14 +0000
ROA not before: Wed 29 Jul 2026 07:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 94.177.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:c6:23:ee:87:31:dd:c9:65:e3:a8:0d:10:93:a8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Validity
Not Before: Jul 29 07:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cece074fcce0e30d7d5097e853ca400aee9b0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:d9:cc:9c:7e:95:0d:94:d7:bb:e5:3b:82:
16:7e:48:41:a6:d1:e6:31:34:77:57:ec:d2:5b:64:
6f:e8:52:83:91:00:f3:29:1b:a1:a9:50:1a:4b:17:
85:7f:78:06:d2:3e:f0:70:14:19:2a:ae:57:69:fd:
71:be:97:78:76:de:7b:3d:14:00:f1:9c:db:90:71:
28:3b:79:e2:bb:25:fe:d4:01:4f:6f:76:2e:32:29:
07:da:9d:3c:2c:31:58:82:69:8f:08:72:6b:9e:9b:
32:ca:a0:a6:3c:77:ab:7b:38:19:ee:4c:30:49:16:
9f:e7:ae:26:3e:00:fa:6c:0e:85:ab:ed:61:37:e1:
bd:00:24:91:fc:02:37:2b:39:6c:f0:68:ed:e7:4f:
d9:95:ce:48:dd:b4:fa:7b:a0:db:cb:b6:0b:ea:b3:
64:e5:94:c2:0e:72:81:67:eb:02:d6:48:99:2b:ac:
02:82:18:81:d6:c2:56:db:5f:1e:85:7c:8a:02:35:
b6:56:47:11:99:aa:b5:74:de:5e:0b:8f:63:bf:0f:
45:2e:f2:ee:b3:11:a4:f2:7a:a4:4d:fd:cd:77:de:
2e:b3:75:7c:56:d3:2a:2f:f6:c1:38:1e:a3:e0:88:
47:22:79:2d:10:23:ca:2b:a5:ae:12:9e:bc:bc:76:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:E0:74:FC:CE:0E:30:D7:D5:09:7E:85:3C:A4:00:AE:E9:B0:BB
X509v3 Authority Key Identifier:
keyid:9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/DOzgdPzODjDX1Ql-hTykAK7psLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:40:76:32:e1:33:66:76:6a:90:f1:2d:fb:27:1c:a9:ba:d9:
87:42:d2:43:ce:5c:9a:c1:82:9a:52:f2:8e:92:0a:31:2d:f1:
26:5f:e3:54:a8:20:9b:7b:ba:94:f3:06:da:03:05:4f:36:70:
e0:87:6b:71:ec:4d:91:7e:63:ff:be:fc:2e:6c:6e:89:77:96:
00:0f:2b:54:90:03:1e:26:23:e2:05:94:4f:98:fb:cf:63:0e:
ae:d2:be:d2:13:15:64:ca:12:71:f0:6e:97:f8:17:ca:b9:53:
7f:71:d2:15:f3:56:8b:65:f0:f2:8e:f4:6e:f4:4e:58:e6:55:
01:6c:66:d4:97:e0:a3:82:60:48:df:d7:34:e1:04:dc:7c:9a:
eb:12:45:2b:11:99:9c:ae:8e:d3:f5:13:6d:86:24:16:92:9f:
6e:53:f8:09:08:ec:04:ca:3b:db:93:b2:45:6c:8e:a1:34:33:
4b:3e:94:dd:7f:7d:94:f2:d8:9c:d9:98:b9:1a:70:81:d8:ca:
bf:9c:eb:48:24:07:64:24:ea:03:74:1e:81:cc:86:18:c4:87:
25:40:25:e5:7c:99:81:e5:a2:4d:88:19:46:9f:bc:e0:9b:ee:
22:b7:ac:97:cf:ca:15:46:34:1d:b2:37:ce:f3:e7:70:a7:ec:
ff:ac:8c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:35 2026 by rpki-client