Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/DgHq7702gPO0TTgEmkiefmf4EOU.roa
File: DgHq7702gPO0TTgEmkiefmf4EOU.roa (raw, json)
Hash identifier: V6OTSskB0p/4S0bZ6/704K0TtNz5fFItHvyb52CR0ks=
Subject key identifier: 0E:01:EA:EF:BD:36:80:F3:B4:4D:38:04:9A:48:9E:7E:67:F8:10:E5
Certificate issuer: /CN=ac14d9c6dbe4bb33dd4c419e636c0ecf50043ed8
Certificate serial: 019F236842D956ADF8B21C1466BB8857795B
Authority key identifier: AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/DgHq7702gPO0TTgEmkiefmf4EOU.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202367
IP address blocks: 194.107.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:42:d9:56:ad:f8:b2:1c:14:66:bb:88:57:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac14d9c6dbe4bb33dd4c419e636c0ecf50043ed8
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e01eaefbd3680f3b44d38049a489e7e67f810e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:4e:69:5b:8e:a8:bc:b9:97:0e:66:4c:4c:ae:
3f:71:b4:a5:60:ef:6d:3d:b2:87:d9:ea:0c:e9:e4:
30:0e:bc:c6:4e:7b:c3:2a:d0:82:ff:7e:35:af:0c:
63:54:71:af:73:35:71:17:28:66:66:23:48:60:f2:
d0:dd:2c:67:d6:60:84:7a:cf:a2:3d:78:19:5d:b9:
a9:67:43:e3:7a:61:f0:07:60:ac:1c:c8:66:5a:56:
ac:eb:c7:88:ad:24:d5:5a:21:3b:2f:f0:f1:80:ac:
0d:14:9b:7a:fd:76:d4:f6:64:9f:ea:5f:ce:f2:8f:
65:f7:d8:72:68:5e:a2:e3:54:ab:2e:c1:fc:37:58:
dc:d5:c6:ed:e3:45:c1:21:9d:77:f6:fe:2f:19:0f:
f7:92:60:7d:44:8f:b8:64:32:36:dc:20:7e:5a:a9:
ad:01:c5:c5:c7:32:c6:a3:59:ad:fd:c1:c9:d2:50:
cc:ff:7a:be:c7:5c:17:72:a9:59:41:1b:6a:07:fb:
13:b7:89:00:db:ff:b6:69:7e:76:62:31:9e:84:10:
e2:9e:94:b7:94:0d:52:8d:83:53:13:34:01:f2:fc:
58:a9:a1:7a:6a:7c:63:15:6a:89:d2:37:82:a8:f6:
b2:fb:46:03:e2:18:d7:2f:e3:42:6f:66:96:b3:9a:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:EA:EF:BD:36:80:F3:B4:4D:38:04:9A:48:9E:7E:67:F8:10:E5
X509v3 Authority Key Identifier:
keyid:AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/DgHq7702gPO0TTgEmkiefmf4EOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.136.0/22
Signature Algorithm: sha256WithRSAEncryption
85:5d:9a:cc:63:04:ce:a7:e7:9f:6b:3d:eb:60:02:ce:c9:2e:
91:0f:d3:3c:f5:28:b7:fc:05:af:23:71:9e:b2:1f:12:ea:be:
d4:cb:93:aa:45:44:e4:52:83:5b:c2:a9:bc:04:ac:8b:5a:5e:
50:8c:3c:f9:b5:ec:59:9e:15:16:16:9d:1a:6d:4e:6b:bd:5d:
17:02:1c:ed:68:d8:be:06:90:b2:59:3d:ea:21:61:f1:97:f7:
1c:89:df:64:0a:3a:f4:92:40:bb:19:e1:c3:32:07:00:92:d5:
d2:43:1b:1f:35:23:e8:37:0e:1b:cc:d5:cf:49:8d:15:f8:67:
36:e2:01:2f:98:ce:e3:e5:e7:78:6f:6d:a0:c0:34:cf:1f:5a:
7d:21:c9:18:f4:bb:c5:26:ce:13:78:1f:3d:61:c4:5e:11:35:
f8:2d:11:36:d2:71:3f:12:c3:3f:9e:12:45:34:89:04:a7:13:
fc:9b:1a:29:b9:1b:f1:ce:b2:cd:5f:ee:f6:6c:21:64:fa:b8:
e0:74:a5:85:81:e3:44:ee:c6:a0:2b:d3:43:10:28:3a:89:0c:
05:9f:d8:ba:53:b0:77:f8:dc:35:12:0e:41:7b:cc:90:33:69:
16:76:00:73:2e:48:40:7b:66:8b:fd:27:f4:e3:2f:5e:a1:f2:
ee:b1:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:01 2026 by rpki-client