Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/dvkk0AF8tQcZnUPQCg9wGxPygAk.roa
File: dvkk0AF8tQcZnUPQCg9wGxPygAk.roa (raw, json)
Hash identifier: rFoeKgkf83K3sPDF/5ELGk/RlwiuIW6RTOiVohUUKGA=
Subject key identifier: 76:F9:24:D0:01:7C:B5:07:19:9D:43:D0:0A:0F:70:1B:13:F2:80:09
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019E5DEDA8567EFFA843A42AEEA74131E3E1
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/dvkk0AF8tQcZnUPQCg9wGxPygAk.roa
Signing time: Mon 25 May 2026 06:58:36 +0000
ROA not before: Mon 25 May 2026 06:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216383
IP address blocks: 2a13:3e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:ed:a8:56:7e:ff:a8:43:a4:2a:ee:a7:41:31:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: May 25 06:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76f924d0017cb507199d43d00a0f701b13f28009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:f2:8b:8e:76:9a:c7:77:ca:ee:d4:00:24:
aa:06:db:ff:74:c0:e5:ed:9d:64:9e:73:f8:ed:1e:
00:ed:40:6e:77:d4:b1:8a:31:a9:77:81:43:97:84:
d2:7a:3b:6d:8f:a4:b2:68:dd:96:ac:01:02:fe:06:
4b:7a:02:ed:12:00:a7:e3:06:c3:b1:7d:3a:a0:b8:
1a:e5:5b:c5:ea:13:6a:78:f6:a2:c3:7c:b6:cf:58:
e1:1d:7c:50:d2:0e:e5:a4:33:06:92:19:44:93:3d:
ae:e0:e8:37:e3:95:99:a6:69:75:6d:0a:cc:8e:10:
22:93:cb:4f:cf:3d:08:d6:a2:b7:1c:63:e7:84:50:
ca:ab:f6:b8:2d:61:25:cf:8c:e4:9b:54:0e:7b:10:
0e:e0:37:3e:65:24:5e:46:da:63:ea:88:42:14:ab:
bc:d6:2d:e2:78:e1:b7:1d:3a:58:71:32:2e:80:94:
2c:e5:d1:35:c6:1b:00:a7:0c:af:ec:c3:b2:b9:84:
35:11:2c:53:5a:86:a4:1c:97:3a:5d:e0:54:39:f3:
ed:58:c4:04:50:8b:f5:fc:d3:5c:4a:82:23:be:c4:
c5:2f:60:22:c3:1f:94:5b:11:85:94:28:d3:3d:8e:
22:5f:69:3a:f8:4f:bc:16:fa:7f:21:50:67:c7:f6:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F9:24:D0:01:7C:B5:07:19:9D:43:D0:0A:0F:70:1B:13:F2:80:09
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/dvkk0AF8tQcZnUPQCg9wGxPygAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:e8:12:c5:19:6e:a1:e5:c3:b4:27:28:68:29:43:20:ac:c2:
23:f4:e6:49:ab:7d:0c:cd:31:52:f4:25:98:a7:3c:20:72:08:
b9:ce:15:14:94:d1:80:ae:35:fe:a9:53:94:35:5e:45:b7:62:
da:a4:dd:cc:c2:ff:d6:c0:10:25:08:7a:28:2f:30:50:03:48:
c2:17:ee:88:30:23:a3:b2:ae:5e:d4:1f:58:37:c1:38:74:6a:
83:6f:30:9e:11:a0:9d:5a:4e:a3:61:55:0a:4b:37:5d:cf:46:
24:fb:ee:9a:dc:27:03:0a:8f:db:23:d9:77:d0:66:f1:b7:c7:
89:29:d0:c5:89:cd:be:62:37:4d:c7:77:6b:2f:7a:80:8f:cc:
29:65:32:e6:c7:aa:64:d7:c6:3e:73:9b:36:d9:87:37:5c:b6:
96:6f:2a:9b:90:cb:a0:80:04:69:b1:81:cc:45:30:e6:9c:bc:
36:a8:58:d8:bc:07:59:3d:cb:cc:c5:a6:25:e5:0e:6b:57:2d:
0e:f0:de:3a:cd:6d:35:a1:b2:22:54:81:73:aa:b3:7a:8e:72:
45:7c:e4:e2:93:62:db:b9:89:59:d4:45:16:15:e1:c6:71:e6:
62:36:c5:eb:d8:53:69:f7:7e:7f:19:7a:e6:91:b6:7d:4d:c8:
d2:dd:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:21:01 2026 by rpki-client