Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/dgmHoNiuqjqiGsj7bwe8_eWWroY.roa
File: dgmHoNiuqjqiGsj7bwe8_eWWroY.roa (raw, json)
Hash identifier: VO0naFhixUwv2FL5oih55z8rsMN0ICEFpIJrweMi4Bc=
Subject key identifier: 76:09:87:A0:D8:AE:AA:3A:A2:1A:C8:FB:6F:07:BC:FD:E5:96:AE:86
Certificate issuer: /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial: 01A0E968CBA322032E7F9441CD3E500F46BA
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/dgmHoNiuqjqiGsj7bwe8_eWWroY.roa
Signing time: Mon 28 Sep 2026 19:05:54 +0000
ROA not before: Mon 28 Sep 2026 19:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41783
IP address blocks: 217.26.16.0/21 maxlen: 21
217.26.16.0/22 maxlen: 22
217.26.20.0/23 maxlen: 23
2a00:7c00::/32 maxlen: 39
2a00:7c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:68:cb:a3:22:03:2e:7f:94:41:cd:3e:50:0f:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Validity
Not Before: Sep 28 19:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=760987a0d8aeaa3aa21ac8fb6f07bcfde596ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:0a:52:8e:d3:a2:81:d5:2e:db:88:43:72:
86:1b:d7:07:d0:a6:4d:0f:9a:37:47:e5:c1:bf:28:
69:75:64:66:3c:24:e9:a7:11:3b:35:29:cf:5c:f7:
ec:b0:bd:2d:04:1f:0b:6a:a2:f8:15:59:b9:22:5f:
1f:ee:a2:7f:ec:4a:2b:61:88:8c:8f:f7:50:02:c5:
38:01:a6:f5:11:58:f6:3a:df:8b:0e:c1:9c:af:1b:
fd:42:30:41:bd:e7:a1:f4:a5:b0:b3:ba:cc:4e:19:
2f:6e:97:ce:5c:2c:3d:f0:25:1b:16:49:c9:fa:15:
70:3c:4d:8f:95:c4:d5:69:1a:e0:e9:f6:b4:2b:e5:
a2:2f:4a:4f:e8:13:e7:9c:8d:13:50:fa:a6:4b:b3:
73:69:8a:ae:2c:4c:c5:85:1e:c2:78:8f:5c:fd:b3:
a7:70:93:f9:95:ef:d4:79:43:8e:f8:55:e0:b6:7a:
ed:48:92:b7:7a:e8:90:b1:7c:cc:33:0b:1b:e2:82:
06:bc:2d:00:7e:32:12:31:6f:40:9d:10:24:fa:16:
8f:6a:a3:71:50:ff:5e:52:42:32:cb:a7:f2:7e:53:
f1:be:7b:c3:b0:48:7b:af:6b:56:a7:63:9d:dc:d4:
de:94:ef:60:6c:99:d1:f7:c3:b3:8d:48:d3:55:a9:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:87:A0:D8:AE:AA:3A:A2:1A:C8:FB:6F:07:BC:FD:E5:96:AE:86
X509v3 Authority Key Identifier:
keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/dgmHoNiuqjqiGsj7bwe8_eWWroY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.16.0/21
IPv6:
2a00:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
a1:d8:66:63:32:58:c4:37:53:de:8a:9c:f6:64:21:94:41:5d:
8c:5e:8a:fc:cf:5a:75:3a:2e:b0:20:91:4e:db:47:f8:12:1b:
d0:33:01:01:a3:16:34:6c:14:96:85:ba:fd:b2:1b:9f:36:f4:
3f:87:08:ae:dd:5a:9c:db:b7:50:82:ed:a8:fe:8e:7f:52:08:
c6:b4:32:c0:44:5d:2f:14:77:ed:56:87:4c:eb:a9:91:8e:e2:
03:66:78:0f:9b:72:c7:a2:b1:71:00:14:af:48:94:15:75:e5:
e1:86:4e:84:7d:50:88:a3:25:1f:b0:44:29:a5:98:34:fe:82:
72:c2:f1:8a:c7:5b:66:a4:cf:6c:ab:f2:2b:a3:94:1d:40:71:
ff:54:8c:c1:b0:0f:2c:2f:04:18:11:85:e0:5f:46:22:18:dd:
d3:8a:91:2f:7a:85:54:bb:38:a1:39:04:22:3c:a7:cc:d9:b9:
11:7b:6a:e7:8b:3b:1a:99:a7:a0:b5:b8:2f:9b:68:90:2e:40:
22:08:ca:43:73:ad:7a:c4:f7:11:8d:76:16:f5:c8:27:0f:de:
a9:a3:a0:97:ea:06:b3:b7:6b:f6:87:c8:ac:f7:11:98:2e:50:
0a:09:d8:83:ff:fc:a9:fd:6f:2a:c3:22:87:34:31:6d:7b:4d:
c1:2d:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:24 2026 by rpki-client