Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DNixYNCfOx-3pVzNrpIjVDu3-bM.roa
File: DNixYNCfOx-3pVzNrpIjVDu3-bM.roa (raw, json)
Hash identifier: 8RDkaqODnshrgOrJsbzCFmxnXNivbhGSmZclcOklkTM=
Subject key identifier: 0C:D8:B1:60:D0:9F:3B:1F:B7:A5:5C:CD:AE:92:23:54:3B:B7:F9:B3
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FCD60B810DE1A25134EFB1D4B829D57E7
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DNixYNCfOx-3pVzNrpIjVDu3-bM.roa
Signing time: Tue 04 Aug 2026 15:24:55 +0000
ROA not before: Tue 04 Aug 2026 15:24:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203499
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.109.0/24 maxlen: 24
2.59.110.0/24 maxlen: 24
2.59.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:60:b8:10:de:1a:25:13:4e:fb:1d:4b:82:9d:57:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 4 15:24:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd8b160d09f3b1fb7a55ccdae9223543bb7f9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:a2:09:90:d0:9c:4a:5d:c7:fe:c5:25:80:
48:b0:82:19:85:3a:f0:f8:01:d5:2c:60:58:a1:78:
8f:65:97:bb:81:40:23:bf:b4:dc:12:cf:3f:d8:a4:
40:86:93:3b:f9:98:2d:13:52:e5:0c:e7:14:09:f8:
3e:93:35:fb:4a:09:bf:80:78:5b:a0:d1:5e:00:ac:
4c:45:6d:9e:86:d3:3b:2e:d3:fe:ee:f7:c3:14:70:
46:e4:85:22:70:83:b2:6a:dc:b7:2c:60:47:c8:8d:
72:df:9b:f0:53:d2:d0:d0:53:d7:55:df:b4:09:20:
54:4f:e6:45:c6:47:95:46:90:43:2c:9e:02:22:45:
49:37:23:c6:76:8d:1c:3a:a9:e3:e8:2d:76:8c:e9:
95:3e:53:8d:20:63:53:48:35:3f:85:5d:75:46:34:
25:9a:9c:6f:a5:1c:2b:d7:f2:62:e5:fa:9e:4a:8d:
a1:7a:b9:a8:ce:26:48:21:5f:fd:da:40:7e:d7:e0:
8a:7b:44:80:84:e2:30:15:83:74:ca:cb:1b:4a:50:
be:15:50:de:dc:3d:d8:75:7d:54:25:31:ee:f7:e1:
e7:46:c8:19:75:25:18:d0:8e:81:ae:e7:d6:41:8e:
18:09:38:fe:19:d7:bc:72:e3:64:f8:8f:00:36:ab:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:B1:60:D0:9F:3B:1F:B7:A5:5C:CD:AE:92:23:54:3B:B7:F9:B3
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DNixYNCfOx-3pVzNrpIjVDu3-bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
43:f8:0e:3f:49:48:03:2d:87:6e:a4:c0:7a:3c:f3:f6:9d:73:
4e:ac:05:b9:db:47:7f:e7:c0:9a:71:b8:04:65:b2:09:d9:87:
f4:71:f2:5a:c4:e7:9f:32:dd:1a:cf:f2:be:83:41:37:92:53:
41:af:ab:19:fc:d6:0c:37:2c:f9:35:cf:ee:d6:65:52:e8:8f:
f1:82:b6:f5:17:34:62:38:6d:38:fe:15:5e:1e:16:9e:bd:cf:
1f:de:00:78:aa:7b:0d:37:65:6a:4d:93:ed:c7:fd:3f:da:d6:
f4:67:bb:e7:d5:45:23:a0:83:3b:0a:4b:b1:a8:4f:c2:ac:4d:
03:bc:6b:9c:aa:7f:7f:11:7e:b6:42:8f:3f:fe:47:44:4a:4a:
16:32:d0:e6:cf:15:5e:7a:ab:2c:32:60:c9:b2:a4:ab:b4:a8:
d1:39:01:48:90:d6:0b:4a:37:35:82:90:dc:9b:1a:bb:69:66:
94:c2:0e:f1:0c:23:2a:34:69:3e:68:5a:6e:06:3f:a5:d5:d8:
86:88:0d:78:97:a8:0b:d3:b4:7d:c1:0f:97:a5:f1:2e:15:df:
df:b2:fb:77:ac:59:db:3e:88:fc:3a:d2:eb:46:69:e9:dc:f7:
e2:4f:ec:19:78:9f:cb:f2:37:73:12:ff:b5:b1:75:b4:62:1c:
93:f6:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:43:55 2026 by rpki-client