Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/dpx3E6wicTHuvW_Jj3Hg_iG1Xso.roa
File: dpx3E6wicTHuvW_Jj3Hg_iG1Xso.roa (raw, json)
Hash identifier: 0sKuxPi/M8NOaenb/QR3bdMnX+yJukAyGT+fktwdqXQ=
Subject key identifier: 76:9C:77:13:AC:22:71:31:EE:BD:6F:C9:8F:71:E0:FE:21:B5:5E:CA
Certificate issuer: /CN=c90382751c4da66836a70b12e6f5f9f609037097
Certificate serial: 019F236836DD4375AE8610B8AEBD50604C4C
Authority key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/dpx3E6wicTHuvW_Jj3Hg_iG1Xso.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48901
IP address blocks: 81.90.128.0/20 maxlen: 24
81.90.131.0/28 maxlen: 28
81.90.134.0/24 maxlen: 24
81.90.136.0/23 maxlen: 24
2a00:e27::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:dd:43:75:ae:86:10:b8:ae:bd:50:60:4c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90382751c4da66836a70b12e6f5f9f609037097
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=769c7713ac227131eebd6fc98f71e0fe21b55eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:5b:b7:d5:8b:aa:71:20:40:20:df:0b:eb:
7f:89:05:d4:73:4b:89:b2:77:d6:e0:35:99:b9:23:
f8:59:e1:03:bf:7b:f1:7e:cd:04:b2:dc:78:8d:b3:
b8:37:bd:eb:89:d4:80:84:96:b9:17:d4:ca:ef:e2:
d3:22:a0:7d:c8:26:dd:85:ba:ab:c7:79:dd:06:5f:
cd:f0:00:d3:8f:06:94:82:2c:ec:5d:2c:66:c7:1f:
f3:82:6a:72:0b:cb:53:c1:4f:ea:3c:51:0e:59:80:
fa:83:9d:9f:87:d9:ae:38:7f:a9:4f:fa:13:60:8e:
0d:2e:1c:78:44:13:00:60:0f:b5:76:66:a5:f3:85:
32:12:ad:e2:8d:b4:50:36:c5:6f:db:b9:5a:76:05:
fe:b7:15:5d:7f:30:15:c7:9c:7f:9d:8d:f7:ea:38:
1b:42:26:58:46:5f:bb:69:b4:c8:14:c7:47:24:e4:
47:5a:9a:62:8d:fb:62:49:83:67:a8:10:0a:65:e7:
0f:ac:2d:66:55:3b:9a:b7:99:d4:6e:2c:4c:86:1d:
a9:31:9c:c0:04:5e:dc:88:bf:76:d6:8c:72:7e:0a:
ea:13:9d:d5:fb:14:10:01:e5:6a:30:54:33:94:56:
b2:96:da:4b:67:5c:99:ba:ad:69:ed:ea:4a:ac:38:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9C:77:13:AC:22:71:31:EE:BD:6F:C9:8F:71:E0:FE:21:B5:5E:CA
X509v3 Authority Key Identifier:
keyid:C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/dpx3E6wicTHuvW_Jj3Hg_iG1Xso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.128.0/20
IPv6:
2a00:e27::/32
Signature Algorithm: sha256WithRSAEncryption
8d:4d:20:db:e8:d0:0e:bb:5c:02:77:e2:c1:b0:f5:34:35:5f:
ee:5b:f2:b6:fb:57:b6:bb:82:07:ea:f5:00:25:8e:5f:c2:2f:
46:29:01:ff:fb:3a:7c:6b:bd:87:91:be:34:57:7f:42:29:f9:
cc:2f:bf:9a:f0:1c:52:63:5c:a2:88:1e:5c:44:08:d1:af:c8:
ee:ba:3a:a8:d4:05:fd:1c:01:62:25:d6:18:0e:6c:e5:0a:2b:
e0:c3:b4:d9:78:b8:5b:92:b8:e5:88:47:c2:aa:95:61:da:b7:
07:9e:44:3a:69:33:91:94:63:a8:fa:cf:4c:1f:40:f6:4b:bd:
37:02:68:a9:da:aa:79:23:2e:d8:e5:5a:d2:12:01:8e:bc:60:
7f:9a:79:51:b1:35:d6:ea:77:3e:07:ad:76:43:d4:c8:68:f7:
db:da:1f:44:14:2d:74:05:56:b2:cb:6f:a2:29:fc:83:7f:e6:
f7:82:4c:8e:01:03:0c:02:fc:82:0b:38:fe:a6:f8:5e:17:95:
d1:3b:5d:90:f9:6c:f0:a1:aa:7c:0b:c1:57:36:5f:91:0c:55:
8c:32:ca:4f:e8:7d:9d:86:58:b8:f5:70:24:2e:76:ee:67:b5:
20:c5:22:94:35:e3:aa:de:9c:82:d6:ff:30:01:5e:ab:51:02:
7c:e5:38:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:19 2026 by rpki-client