Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/DhPaCGROVzc_RyLkimAXvuteooA.roa
File: DhPaCGROVzc_RyLkimAXvuteooA.roa (raw, json)
Hash identifier: 7GJwuhnVTvbxl3b1/oKcnOg3a/h9WeQA7faf/qH9pFA=
Subject key identifier: 0E:13:DA:08:64:4E:57:37:3F:47:22:E4:8A:60:17:BE:EB:5E:A2:80
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019A0B1C6AD420720538650FA6BEC66F65D6
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/DhPaCGROVzc_RyLkimAXvuteooA.roa
Signing time: Wed 22 Oct 2025 08:50:03 +0000
ROA not before: Wed 22 Oct 2025 08:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 195.24.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:1c:6a:d4:20:72:05:38:65:0f:a6:be:c6:6f:65:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Oct 22 08:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e13da08644e57373f4722e48a6017beeb5ea280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:84:52:17:f4:3d:8f:85:d7:10:18:81:1d:
72:24:70:91:80:57:03:2e:47:d1:70:29:2b:2c:81:
d5:01:09:f9:0d:28:0f:66:b7:e6:8a:f4:7e:79:bb:
7b:ae:d9:5a:fd:6a:43:32:2d:c8:13:a2:65:85:39:
ed:ac:60:c2:9a:ad:f2:13:79:76:8c:19:a4:0d:89:
66:8d:e2:de:95:7b:fb:83:bc:a2:50:55:b4:c4:e8:
e4:69:e7:dc:6b:ca:60:73:63:c8:20:c1:5e:93:93:
32:08:37:54:81:2f:a4:6a:56:48:8e:76:8d:eb:c4:
f1:b5:2a:a7:eb:6b:e8:cc:8c:1a:d7:5e:4d:b0:40:
fa:da:f1:62:08:59:8b:f5:0e:e0:69:07:db:86:2f:
9f:cf:56:42:41:b1:45:1c:97:9b:94:9a:f3:ab:b5:
74:dd:7c:b1:57:7e:f9:d0:d7:35:1c:d3:93:1f:e8:
1f:b4:35:e5:ac:32:a8:51:ee:4d:ce:21:82:07:7d:
38:b7:2d:d9:0f:bf:e8:9a:f9:31:55:19:85:ce:eb:
8b:bb:dc:3e:ec:3b:21:87:a6:19:79:f3:43:64:10:
b4:07:b9:28:d9:83:be:46:b1:d6:84:b4:d8:a2:17:
a7:e8:2b:38:d7:08:e9:0c:89:b6:70:c3:71:cc:ba:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:DA:08:64:4E:57:37:3F:47:22:E4:8A:60:17:BE:EB:5E:A2:80
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/DhPaCGROVzc_RyLkimAXvuteooA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.237.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8c:0b:d2:cc:4f:03:23:74:f3:a8:44:9e:ac:5f:22:b2:2b:
89:f9:45:8c:e8:ce:64:de:4d:42:0c:11:d7:5a:40:09:06:bf:
3d:d9:bd:5a:b9:99:e5:49:f6:57:59:66:52:06:ba:0a:e0:a9:
6d:80:a7:0a:7d:8f:49:51:10:78:8d:ad:db:bd:05:e1:9b:64:
52:99:40:6b:75:06:bf:a5:16:af:04:1a:81:91:6d:90:40:97:
ea:51:66:98:11:b9:a0:ce:9c:ea:23:4b:e5:97:71:9a:df:9a:
7e:28:fd:61:6b:50:35:48:19:fa:67:c2:68:c4:72:94:da:2e:
6a:22:34:3f:d9:79:00:48:a0:50:c5:72:cc:e7:c2:10:6f:b0:
89:00:5f:1c:9b:e9:d8:ae:06:ce:8d:4d:d4:6a:d2:ee:a3:c7:
98:0e:83:44:ae:07:48:88:70:d7:7f:cc:db:5c:28:88:cf:41:
9b:d3:2b:08:88:f9:d1:c1:3c:03:f0:84:01:07:70:68:83:1d:
1b:3f:e0:38:0e:b6:ce:bd:3e:b0:c7:90:d9:f8:e5:fe:8f:2a:
ce:b8:cc:a2:f3:8a:3a:ce:9b:3e:82:62:91:03:e1:97:ce:96:
ec:73:6c:51:84:7e:de:b9:8e:0d:12:4a:68:36:2f:87:40:f1:
34:3b:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:46:53 2025 by rpki-client