Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DnQ7ttyDp-n0qH7kJOUMT7Ovd20.roa
File: DnQ7ttyDp-n0qH7kJOUMT7Ovd20.roa (raw, json)
Hash identifier: pJz32/L309cCRg1kd6bXr/IK1eG3h4nDSk2kO5saa98=
Subject key identifier: 0E:74:3B:B6:DC:83:A7:E9:F4:A8:7E:E4:24:E5:0C:4F:B3:AF:77:6D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A13F956C4880D65C54F365CAC73030931A
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DnQ7ttyDp-n0qH7kJOUMT7Ovd20.roa
Signing time: Thu 15 Oct 2026 12:41:59 +0000
ROA not before: Thu 15 Oct 2026 12:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 109.111.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:95:6c:48:80:d6:5c:54:f3:65:ca:c7:30:30:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 15 12:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e743bb6dc83a7e9f4a87ee424e50c4fb3af776d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:45:12:b7:d0:c4:6d:02:04:db:57:05:27:
65:9b:b5:e9:4d:d5:b6:c2:96:04:d8:8c:df:20:13:
bc:1c:a0:f2:7a:79:f2:2e:36:61:21:15:92:9f:ec:
4e:de:c6:0f:91:11:1f:c3:d8:e6:27:3e:dd:22:cd:
c7:d6:92:f5:a2:72:a9:4f:fb:a7:25:08:5a:a4:00:
8b:4f:e6:8f:7f:77:91:ac:14:79:41:a7:89:33:3e:
c6:bc:ce:7e:0f:8c:33:7b:b7:a1:80:39:23:1f:e1:
e7:2b:7a:dc:d1:0f:0e:4e:d1:fc:99:0c:bb:61:ce:
f2:5c:a2:5e:4d:4c:19:f6:87:2d:26:6c:9a:38:d1:
5f:26:4e:43:70:fd:4e:4c:26:6b:9c:ab:ea:08:68:
7a:00:dd:7c:17:2d:1c:aa:02:a6:79:48:13:9e:82:
4a:fc:af:dc:5c:2f:ab:07:60:05:dc:6f:b3:b1:4b:
68:24:24:02:ac:78:18:a4:30:ae:38:65:bc:e2:c9:
17:41:bb:54:49:f5:54:e6:50:86:42:f1:f0:c7:d3:
b3:f1:e6:c5:bc:f6:e5:a0:62:0f:04:13:cc:b8:f0:
ea:2c:c9:55:cc:56:a3:c8:3e:b8:b8:76:fa:3d:55:
6a:1e:88:33:76:42:37:50:cb:0e:62:98:2e:c6:5d:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:74:3B:B6:DC:83:A7:E9:F4:A8:7E:E4:24:E5:0C:4F:B3:AF:77:6D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DnQ7ttyDp-n0qH7kJOUMT7Ovd20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d8:d3:84:6a:3b:c8:4b:53:86:5c:a4:d8:d9:3d:99:0f:ec:
14:f8:d1:97:1c:6e:d1:1b:7c:81:65:8c:37:0a:aa:b1:fb:5e:
30:8d:56:77:8b:fe:55:04:76:43:13:b8:97:62:d2:05:15:dc:
db:2e:c2:98:f4:47:bf:74:d4:94:c9:6e:0c:2f:97:df:d4:ea:
08:59:8f:24:40:d9:74:af:fd:ad:d0:8c:98:6f:6d:f2:c8:90:
28:6e:81:df:80:a3:ef:d0:1a:11:db:8f:15:97:4f:b4:29:1d:
1a:61:89:b9:11:6c:f6:ad:e4:42:67:be:51:3d:02:c7:56:ab:
55:a3:50:82:22:4e:54:0d:2c:fa:85:48:05:4d:3f:ba:15:e8:
68:9e:a0:53:e0:e6:17:8f:6d:43:36:7b:b8:61:22:4a:af:d1:
82:76:60:c4:77:94:53:d2:75:ed:ec:74:32:6f:f5:92:2b:0a:
2f:4e:5f:1e:c9:19:a8:72:44:6c:16:81:65:86:69:11:14:01:
cd:df:fe:d3:3b:53:d6:25:ec:f7:fc:ad:d3:b1:ea:5e:9d:dc:
c8:99:f0:8d:60:31:7c:80:00:1f:da:22:ac:b4:23:99:2f:1d:
4f:c5:2b:54:ff:e4:14:c4:fc:b2:d4:45:66:07:c0:c7:2b:13:
3e:fe:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:16:34 2026 by rpki-client