Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa
File: DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa (raw, json)
Hash identifier: uYInFYzDeRAdWcAcrc9tbS0qrMrDwJVw7F9l4//iM4o=
Subject key identifier: 0C:EF:4A:DC:20:D7:FB:40:CC:B7:FB:B9:7D:E8:47:D1:64:1C:A8:9D
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FEC3829090704BFE7A4F50BA57F6C102E
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa
Signing time: Mon 10 Aug 2026 15:08:51 +0000
ROA not before: Mon 10 Aug 2026 15:08:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199482
IP address blocks: 185.153.18.0/24 maxlen: 24
194.156.73.0/24 maxlen: 24
194.156.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:38:29:09:07:04:bf:e7:a4:f5:0b:a5:7f:6c:10:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 10 15:08:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cef4adc20d7fb40ccb7fbb97de847d1641ca89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:04:f8:00:f4:47:c6:0c:06:81:6e:71:07:
88:20:53:6b:92:94:7f:84:22:56:9c:5e:39:58:3d:
ac:37:f8:8e:b3:8a:67:9d:c9:43:f3:64:ab:bc:75:
fd:c0:ad:ae:80:f2:37:96:c9:62:60:b8:95:16:a7:
23:0b:0a:1b:df:c9:31:86:64:51:70:84:c3:99:d0:
b8:f0:dc:20:7e:05:2d:0f:c1:56:68:67:b8:26:12:
32:b0:1b:a7:99:c5:47:4d:b8:c4:a2:e7:6c:79:4d:
b6:75:87:88:b2:35:a1:91:95:33:d2:49:34:ea:c3:
8f:42:6b:2b:95:4d:29:ea:e6:c8:b0:e7:1e:43:66:
df:41:0b:11:f4:d8:9c:d1:30:2c:e3:91:74:4d:49:
02:70:8f:78:df:61:9a:2b:9b:f3:0e:0c:1a:98:c5:
d1:5c:c5:dc:1f:6b:09:f4:04:40:02:64:89:db:95:
92:f7:2a:8c:82:79:a5:bc:65:32:b4:8e:45:a5:e7:
84:a3:6c:42:cd:bf:b8:0f:cf:1f:69:14:3a:62:aa:
1d:23:31:da:46:c4:36:8d:e7:a1:ca:25:43:58:67:
59:54:18:b6:44:bf:86:e5:46:10:9a:d0:a5:87:56:
7e:52:b5:f6:b8:33:a2:29:46:b6:dd:14:1f:99:62:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EF:4A:DC:20:D7:FB:40:CC:B7:FB:B9:7D:E8:47:D1:64:1C:A8:9D
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.18.0/24
194.156.73.0/24
194.156.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8c:a9:e5:fc:a8:25:bd:9a:34:7a:55:c1:4f:95:f7:7b:dd:
d4:c7:20:39:48:b7:00:23:51:1c:88:66:96:d1:00:2f:95:ed:
db:03:ff:f6:cd:23:fc:d7:8c:c8:a6:60:0c:35:da:8e:0f:77:
2d:cd:b1:5b:e5:51:1e:04:cb:08:9b:e1:fd:ce:10:26:f7:b5:
b7:80:df:0e:b0:82:71:77:e0:78:04:50:f1:4e:76:76:b8:c3:
5e:e1:18:2f:7f:ec:2c:e5:fd:04:ef:a3:d8:25:6f:61:83:e3:
3a:7d:39:d5:59:cf:c0:b2:08:3d:c2:a4:01:2f:4d:57:aa:47:
2b:af:44:99:a5:fd:9e:af:72:c2:4d:0c:f0:96:e4:36:ac:a2:
86:a5:de:03:8b:37:4d:60:21:6b:7e:ac:59:1b:e5:20:49:27:
79:1d:c5:4c:75:19:81:f6:fc:cd:5b:7f:62:04:19:04:4d:e6:
e7:96:89:68:86:db:fd:d1:38:6f:2f:8d:97:36:09:ba:80:5e:
1f:1f:c6:f9:db:0d:6c:ed:a5:38:6d:3f:e7:ba:4b:d1:9e:fc:
a0:82:1d:b1:7f:15:56:53:76:80:ea:df:52:3e:43:f2:0a:a6:
30:fb:d8:0f:58:40:4e:3b:51:d2:e7:5d:e0:71:1f:a7:ad:99:
46:2f:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:42:01 2026 by rpki-client