Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/De10BA3lyb6wC65o9g_3Z3Rq9oE.roa
File: De10BA3lyb6wC65o9g_3Z3Rq9oE.roa (raw, json)
Hash identifier: n2SRcsi6LtLV6qCMUUDWO/sW9w7HRsZQAdCEZ81fiO8=
Subject key identifier: 0D:ED:74:04:0D:E5:C9:BE:B0:0B:AE:68:F6:0F:F7:67:74:6A:F6:81
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019FB29FA795216CC9144EAB37F1FD3DA986
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/De10BA3lyb6wC65o9g_3Z3Rq9oE.roa
Signing time: Thu 30 Jul 2026 10:43:55 +0000
ROA not before: Thu 30 Jul 2026 10:43:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 82.112.169.0/24 maxlen: 24
82.112.170.0/24 maxlen: 24
82.112.171.0/24 maxlen: 24
82.112.172.0/24 maxlen: 24
185.143.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:9f:a7:95:21:6c:c9:14:4e:ab:37:f1:fd:3d:a9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jul 30 10:43:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ded74040de5c9beb00bae68f60ff767746af681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:da:fc:bc:0a:5c:1f:c4:6e:e0:8e:20:e3:
f7:e5:aa:03:81:94:f9:48:5e:73:53:8d:8f:79:46:
1c:d9:3a:43:1b:55:44:01:a4:ad:12:19:b4:1e:ea:
5c:50:86:11:12:ae:d3:fa:b9:f6:5f:cb:35:12:05:
f1:70:7f:e4:8c:bf:d6:2d:b3:79:2c:a9:a9:00:cf:
42:7e:4b:60:d0:7e:10:be:de:74:9a:5c:15:28:84:
e3:ce:e9:47:77:3d:53:7a:14:df:ae:f7:1d:f7:d8:
33:8d:2a:e9:9e:f6:bf:11:c5:5d:93:a4:e9:3b:a3:
f9:8a:4f:b3:64:85:bf:54:31:32:c0:36:1f:0a:43:
c5:f9:be:e6:a5:8c:f2:7c:23:a0:05:79:5c:0a:cd:
88:6b:fa:50:a7:65:f5:e3:6d:de:f0:3e:68:5a:01:
7d:ed:01:0b:09:77:22:d4:a8:37:82:88:94:f2:18:
00:d7:b6:26:42:f8:78:7f:d5:43:3f:80:97:36:26:
5e:34:31:a9:9c:1e:a1:64:85:de:69:0b:b4:9a:1f:
b6:ff:70:1e:e8:39:b3:53:ca:90:a3:82:95:b5:fa:
21:18:2c:cf:69:93:f5:94:22:dc:9c:b7:55:fa:02:
72:d7:64:2e:00:53:b2:6f:01:f7:e0:57:46:31:69:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:74:04:0D:E5:C9:BE:B0:0B:AE:68:F6:0F:F7:67:74:6A:F6:81
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/De10BA3lyb6wC65o9g_3Z3Rq9oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.169.0-82.112.172.255
185.143.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:51:c0:ec:26:75:17:65:17:db:67:53:52:7b:44:90:51:c4:
06:8d:32:c1:98:10:da:c6:bf:42:71:63:37:27:ac:95:2f:de:
ac:95:d8:a5:6b:dd:68:d9:1e:26:b1:c4:82:fa:5c:6a:bd:cc:
99:a3:67:89:4d:ed:80:84:84:67:47:7a:64:0f:da:2e:d6:4c:
4d:7f:d5:d9:3c:16:84:6b:33:75:4f:54:5b:1f:39:54:60:7a:
a2:76:14:bf:19:60:98:f1:90:61:d6:12:d6:b7:8f:7c:e0:2e:
aa:fb:88:8e:ef:e4:99:bc:7b:dd:f4:f6:a3:c3:d6:40:d7:9a:
cd:11:0f:13:76:ea:da:e7:c5:78:55:02:a6:23:5f:ec:cb:c9:
c0:15:87:45:49:d3:8c:d4:c5:b5:4b:37:29:38:7b:c4:c3:95:
bf:8d:d4:29:b5:be:06:a0:83:3f:88:19:1b:a9:b0:b0:43:e6:
f0:34:ab:02:a3:44:5a:57:ee:9c:86:f0:7f:5d:a8:cc:43:d2:
2f:e4:18:45:ae:29:9f:6d:d8:e7:09:55:ac:6b:3d:ff:97:af:
34:82:80:53:04:7a:b3:32:06:b5:c7:3c:92:d9:89:d7:fd:4b:
e6:ed:cf:c9:c2:45:b8:7f:4b:18:eb:72:1b:ac:4a:0f:f1:34:
48:06:9b:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 13 03:47:58 2026 by rpki-client