Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Dn5Ju9mY-JbyX-Q8fI_jqxWtY4s.roa
File: Dn5Ju9mY-JbyX-Q8fI_jqxWtY4s.roa (raw, json)
Hash identifier: btyNbS5onS6X6FReG36oyncT1EBV6dlsTs/f33/pBmI=
Subject key identifier: 0E:7E:49:BB:D9:98:F8:96:F2:5F:E4:3C:7C:8F:E3:AB:15:AD:63:8B
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0ED1B8875655F524790978EB46D85D68F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Dn5Ju9mY-JbyX-Q8fI_jqxWtY4s.roa
Signing time: Tue 29 Sep 2026 12:19:59 +0000
ROA not before: Tue 29 Sep 2026 12:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4637
IP address blocks: 45.141.130.0/24 maxlen: 24
193.56.21.0/24 maxlen: 24
212.87.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:1b:88:75:65:5f:52:47:90:97:8e:b4:6d:85:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 29 12:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e7e49bbd998f896f25fe43c7c8fe3ab15ad638b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:80:ce:35:52:f3:2c:97:fd:71:ed:81:de:
04:21:11:ba:2d:35:9a:ff:52:46:cb:b6:9c:93:dc:
a0:64:dc:cf:4a:e5:7e:8f:6c:40:7c:11:75:59:ac:
42:73:17:40:76:cd:0b:87:71:3b:b0:93:72:5f:b4:
7b:fd:a8:be:50:42:da:20:81:33:85:7f:09:50:75:
b2:da:ed:73:b1:91:fc:0c:b1:40:eb:66:63:f5:58:
b6:9b:72:f9:74:74:66:06:3b:9d:de:85:94:63:62:
b4:05:c0:99:f7:7a:22:ce:72:04:44:84:dc:b2:6d:
e6:eb:28:78:0d:4c:b1:0a:90:c7:dc:64:b6:47:21:
7e:8e:90:69:5c:c4:dd:34:79:89:64:6d:d6:42:e2:
6f:a6:30:58:29:2b:05:ec:04:cd:1b:2a:46:14:95:
d3:09:ef:51:f5:f0:91:3c:01:8e:5d:b8:ff:96:7a:
38:79:a1:81:be:41:36:af:62:b9:e4:b1:6c:08:11:
40:36:9c:65:82:7d:66:46:bf:1a:46:88:09:d1:3e:
65:bf:4b:43:ee:c5:10:05:63:66:b3:ac:7c:9b:bd:
84:7c:71:3e:20:f8:70:35:5d:cc:11:e8:9c:f1:43:
d0:64:08:34:f5:10:7a:96:37:c7:2a:04:1c:8d:e9:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:49:BB:D9:98:F8:96:F2:5F:E4:3C:7C:8F:E3:AB:15:AD:63:8B
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Dn5Ju9mY-JbyX-Q8fI_jqxWtY4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.130.0/24
193.56.21.0/24
212.87.217.0/24
Signature Algorithm: sha256WithRSAEncryption
23:73:4f:a5:d0:2c:40:d1:5a:75:7f:d8:ab:bd:56:d5:65:ed:
ca:7d:d6:56:81:a8:65:f1:97:77:21:45:83:8d:b3:06:2a:6e:
13:df:2d:9f:b5:cb:25:36:e8:52:a4:ff:86:51:11:18:93:e0:
1c:31:2f:65:75:20:6e:7c:f6:81:af:33:5c:16:20:24:7f:91:
d8:27:3a:97:2e:d4:fd:20:72:a6:fd:b7:7c:10:b9:88:41:2b:
0a:23:9a:fd:7d:cf:54:64:23:19:9d:ab:70:35:dc:6b:6a:36:
92:a0:be:44:5e:53:7f:f2:ae:19:1a:0e:b6:b1:8a:cc:03:60:
fa:9f:b9:87:59:81:2e:28:25:a1:22:35:3a:2b:02:9c:55:a8:
74:ce:5b:18:19:6b:ae:01:e1:6d:6a:01:e8:bf:1d:ff:34:df:
4d:ad:2e:7d:3d:70:3c:4e:f6:ac:09:85:66:f9:35:b3:aa:c1:
6c:89:e9:3a:58:be:88:23:cc:3c:3a:91:dd:04:89:f2:e3:88:
32:cb:9a:11:83:e4:16:82:cb:93:01:34:97:87:56:3e:d4:73:
1c:f0:44:42:49:1f:51:36:c9:0d:98:d0:19:c0:7a:6b:01:d8:
c9:48:54:16:e6:1e:1d:7d:a2:82:52:be:5c:69:78:4d:a7:25:
ca:a2:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:16 2026 by rpki-client