Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dJT1GLGkPAwci8TpULkSkUnbvAc.roa
File: dJT1GLGkPAwci8TpULkSkUnbvAc.roa (raw, json)
Hash identifier: K1qkHr8h+1Jnrr8iNu9/I9KkDQY89inAWVW5dK9bbpo=
Subject key identifier: 74:94:F5:18:B1:A4:3C:0C:1C:8B:C4:E9:50:B9:12:91:49:DB:BC:07
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A08C3C28B6C3F22F9F277B7ACC8EED1FEA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dJT1GLGkPAwci8TpULkSkUnbvAc.roa
Signing time: Thu 10 Sep 2026 16:52:27 +0000
ROA not before: Thu 10 Sep 2026 16:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 94.103.189.0/24 maxlen: 24
94.103.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:3c:28:b6:c3:f2:2f:9f:27:7b:7a:cc:8e:ed:1f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 10 16:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7494f518b1a43c0c1c8bc4e950b9129149dbbc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:04:63:1e:e9:4e:27:0c:ea:cb:8d:12:9c:
d4:98:77:56:cd:3f:56:49:7f:ba:38:ee:89:ee:ae:
3f:13:61:de:64:46:4b:8c:d7:7a:cf:63:a8:50:ac:
f7:41:4f:11:75:12:89:1b:9c:00:45:6e:0a:09:4d:
49:31:92:22:42:d9:f7:42:11:10:96:85:2e:d9:13:
6c:e2:e0:1e:b1:72:0a:4b:c0:f3:1f:4d:c4:52:7e:
f3:2b:aa:43:3f:40:72:70:ee:74:b1:3c:38:91:36:
08:86:c5:cb:2e:61:b4:41:d6:b5:4f:61:02:f9:9d:
c2:f3:b4:d3:3f:81:de:06:2d:c1:b4:09:84:04:46:
ea:aa:44:c8:b4:c1:f2:0c:3f:f2:d5:b0:f0:29:6e:
31:57:ef:15:a8:21:79:85:4d:9f:a5:8d:e3:85:2d:
a1:53:24:17:b7:81:01:ac:dd:1f:fc:b5:82:d6:16:
8f:35:b4:5a:f0:d3:ba:0e:27:80:58:a1:b4:1b:d6:
88:e1:54:14:12:7a:d2:d0:63:a7:29:49:b1:7e:ef:
01:ed:9f:94:7a:7c:69:2d:e9:cf:5f:a2:fe:02:8a:
3a:cd:4e:b8:5d:69:49:d1:6e:5a:96:7d:07:81:47:
b4:54:95:bb:33:48:78:df:66:27:14:b5:1a:61:77:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:94:F5:18:B1:A4:3C:0C:1C:8B:C4:E9:50:B9:12:91:49:DB:BC:07
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dJT1GLGkPAwci8TpULkSkUnbvAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.189.0/24
94.103.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:78:93:28:c2:1a:28:aa:96:d1:30:2f:76:6f:07:87:f3:27:
d5:d1:d1:de:81:f7:a1:4e:b6:ba:88:81:30:d7:54:91:df:9b:
02:1e:b9:b9:8d:dd:a3:d8:a5:e4:98:9e:19:13:5e:03:6b:bf:
ff:c5:b8:c8:9c:46:7c:e7:4e:93:6a:a7:41:e1:82:6b:62:7a:
65:1a:ff:f7:0a:2f:a8:60:70:b0:99:f1:8a:cb:01:61:dd:63:
33:87:32:86:a7:6f:10:4a:57:02:b6:47:d6:89:fc:f5:5e:5c:
1a:f5:0e:57:09:72:19:68:aa:8d:63:06:a9:d1:70:6f:18:81:
7e:ae:56:87:23:b4:c0:c1:47:a3:14:e7:d5:58:97:51:a8:33:
bb:38:f7:1b:c1:55:41:1c:b1:cf:d9:1b:94:83:15:7b:89:8b:
c5:52:a6:8b:9d:11:16:80:12:be:11:0e:e9:6c:c2:92:4f:ed:
1e:9a:d6:bf:47:f6:5a:01:9b:f9:af:80:c1:09:00:e9:fd:2c:
92:30:65:b5:9a:bf:3e:c4:0c:86:69:3e:a6:97:5a:a3:ab:32:
35:2c:4d:e8:ee:ee:8f:cc:0b:5b:69:fe:d7:dd:77:92:46:a0:
47:dc:f6:14:9d:49:13:d6:c2:a1:c5:63:b2:e1:62:2e:2d:ce:
56:a6:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:04 2026 by rpki-client