Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/DmH5gRDpFfiT_eE74zyVFAM6RvE.roa
File: DmH5gRDpFfiT_eE74zyVFAM6RvE.roa (raw, json)
Hash identifier: Ln0A2hJEipplcNI/2hrqaUeztAp4seGSTDWnqMRb1zE=
Subject key identifier: 0E:61:F9:81:10:E9:15:F8:93:FD:E1:3B:E3:3C:95:14:03:3A:46:F1
Certificate issuer: /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial: 019FF1D75E30C8903C09D112ABFC9F0B700B
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/DmH5gRDpFfiT_eE74zyVFAM6RvE.roa
Signing time: Tue 11 Aug 2026 17:20:51 +0000
ROA not before: Tue 11 Aug 2026 17:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32613
IP address blocks: 188.116.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:d7:5e:30:c8:90:3c:09:d1:12:ab:fc:9f:0b:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Validity
Not Before: Aug 11 17:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e61f98110e915f893fde13be33c9514033a46f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c1:72:07:4e:cf:12:b1:62:34:6c:35:82:0d:
08:1d:f6:23:2d:1d:66:c9:23:15:a2:fc:32:e4:21:
56:5e:f5:c4:96:c6:c6:d1:50:92:3d:51:80:08:14:
db:ae:44:1d:f5:66:62:7e:ae:10:06:45:e2:f1:79:
a9:9b:8c:ee:bc:26:1d:b8:ca:a7:35:c0:ba:7a:98:
7f:43:d6:b0:db:8e:65:23:d2:84:31:75:b0:8d:ef:
cf:08:a8:24:23:d0:5e:1f:5e:88:d5:d5:a2:1a:a7:
88:55:d6:4d:95:ce:f1:f8:45:e3:6e:9e:59:5c:f3:
66:73:5a:eb:ee:27:07:3c:41:17:02:ab:44:e3:62:
61:86:0d:85:ca:6c:57:e1:fe:0c:dd:4e:ec:ce:c0:
7d:71:72:15:3d:b3:ae:84:10:cf:b5:30:99:26:0f:
14:48:cb:df:05:c8:91:43:d5:3a:ab:76:98:89:6c:
dc:30:eb:11:50:7d:13:7a:f9:e3:13:d5:78:66:01:
df:12:46:d1:4e:e7:e6:c9:07:1d:34:48:5e:44:85:
f7:06:b9:9c:99:b3:59:fd:37:96:74:84:f4:74:8a:
f8:e5:bc:44:5a:dd:d3:de:05:14:9e:7f:75:28:39:
e3:4d:24:bf:10:f9:1d:3a:df:72:72:32:8b:d6:3f:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:F9:81:10:E9:15:F8:93:FD:E1:3B:E3:3C:95:14:03:3A:46:F1
X509v3 Authority Key Identifier:
keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/DmH5gRDpFfiT_eE74zyVFAM6RvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.4.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:52:ca:9a:68:a8:ef:17:5e:62:52:19:a8:d8:8f:51:8b:df:
9e:a0:2e:f2:41:ab:05:e2:ec:66:9c:26:9d:69:44:a0:48:09:
f9:a6:1c:1a:c0:4e:03:83:6e:1d:dc:c3:77:29:99:87:4e:d0:
fa:c5:15:84:30:9d:ca:4f:8d:5a:4b:f5:b1:4f:7d:aa:e8:29:
6f:88:9b:33:c7:0a:92:d6:b8:69:97:20:b2:26:4d:83:f6:6d:
d7:d3:3f:8c:bd:9d:34:3b:bc:85:ae:f4:55:26:e9:39:df:f7:
d5:9d:06:15:69:0d:e2:56:8d:4f:7b:47:dd:8e:8b:e0:f0:93:
45:19:e8:05:54:a9:b3:2a:8c:76:48:13:2d:75:d5:1d:3a:83:
18:99:fa:28:e5:48:8d:8b:c2:e9:51:66:eb:a0:fa:45:cb:57:
da:7b:92:ba:f3:12:91:b4:3a:30:b6:ca:e0:cc:aa:4d:30:f1:
d9:26:20:a0:ad:6b:ec:c8:48:6e:79:6a:18:19:fe:f8:74:99:
f0:df:b0:f6:47:30:f7:f0:0d:85:d3:d4:2b:f7:af:39:2c:19:
71:32:d0:a4:3e:8c:c3:8e:58:98:1d:24:d0:b1:42:80:c3:ec:
48:b6:17:a6:03:aa:47:0e:00:1f:a6:c9:35:8e:de:0c:80:2b:
ef:21:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:10:52 2026 by rpki-client