Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/dYKy0V0V-kDfDOZR4gtFzNeiaww.roa
File: dYKy0V0V-kDfDOZR4gtFzNeiaww.roa (raw, json)
Hash identifier: ECNi8rSbsFUBmyj3614uPGhFINVbMd3PxyWgQRCiork=
Subject key identifier: 75:82:B2:D1:5D:15:FA:40:DF:0C:E6:51:E2:0B:45:CC:D7:A2:6B:0C
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FD6F565A98EF125A497D6D18E8270DB9E
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/dYKy0V0V-kDfDOZR4gtFzNeiaww.roa
Signing time: Thu 06 Aug 2026 12:03:54 +0000
ROA not before: Thu 06 Aug 2026 12:03:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208619
IP address blocks: 45.92.132.0/22 maxlen: 24
45.92.134.0/24 maxlen: 24
45.92.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:f5:65:a9:8e:f1:25:a4:97:d6:d1:8e:82:70:db:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 6 12:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7582b2d15d15fa40df0ce651e20b45ccd7a26b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:67:b7:1b:ed:fc:5b:9e:cb:a4:5c:0f:5e:
1e:22:df:46:4d:f8:b7:7c:93:0b:a2:59:da:82:84:
08:56:3d:25:9e:41:26:58:5c:26:8e:85:d1:93:b5:
4d:1d:c8:03:da:9b:2d:82:8f:29:f8:b3:bd:39:cd:
7a:f8:17:0e:ee:71:1c:62:44:55:1a:40:86:3f:8d:
cf:f3:7a:4d:5e:3d:bc:9e:55:69:4e:e8:c5:5f:a6:
a3:8b:c5:35:45:d3:0d:d9:a8:e0:db:29:97:cf:49:
3d:b6:0e:e0:8d:0a:3a:4c:bc:ce:78:59:38:ca:95:
18:ff:a0:f7:35:0d:76:3e:67:31:d6:27:4d:a1:ee:
8c:94:70:ec:e7:a0:24:49:32:8b:40:1a:50:d2:13:
ee:38:a6:f8:5a:c6:3f:f1:c2:28:62:be:01:40:4e:
42:d9:13:2d:ae:dd:41:85:b6:3a:0a:b6:e1:d3:b0:
2a:7f:4e:eb:c4:bf:66:49:2e:8a:61:ec:a7:7e:80:
e6:6a:1f:5f:35:82:29:9c:2b:42:bd:ed:13:e8:ac:
20:9e:44:dc:79:43:e4:e3:7b:22:39:ab:7f:34:cd:
2b:0b:5f:c8:c0:4a:a4:43:ce:df:ec:92:4c:48:f4:
19:8e:09:1c:14:fb:3a:35:e3:c3:41:db:82:2f:77:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:B2:D1:5D:15:FA:40:DF:0C:E6:51:E2:0B:45:CC:D7:A2:6B:0C
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/dYKy0V0V-kDfDOZR4gtFzNeiaww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.132.0/22
Signature Algorithm: sha256WithRSAEncryption
40:95:a1:4c:84:2f:a3:7f:1f:bc:16:de:82:99:73:b5:43:e8:
fd:15:d7:30:2b:aa:5d:d7:7b:27:85:25:92:9b:22:11:73:1c:
dc:75:32:18:2c:e4:59:ff:86:a5:fb:59:39:1b:1c:fb:74:6d:
98:d1:d1:48:64:c5:6a:cf:c8:e4:42:78:67:aa:e0:db:dc:4d:
f1:83:45:e5:12:60:69:76:d4:e9:ed:88:eb:72:37:6f:f3:32:
c2:b3:b5:e3:68:34:e9:d7:c7:8e:34:9c:84:f6:aa:44:07:c8:
1c:e2:07:f3:04:89:29:f4:6e:bf:5d:e4:6d:bf:ee:fb:dc:a6:
70:42:13:9c:7f:a1:b1:65:99:d7:34:95:e6:b6:b3:28:a0:84:
f9:59:7e:97:4a:36:f5:73:70:f3:af:38:d5:9d:33:30:f3:f4:
54:dd:8e:19:b1:d0:74:2b:8c:82:1e:38:d4:79:77:0b:13:56:
54:dd:57:37:2b:5c:c9:f0:2c:97:a9:60:e8:a5:21:02:53:f1:
ca:74:a3:30:f7:15:4d:87:49:e6:a0:52:c1:45:11:4c:f1:35:
03:e1:38:bc:33:87:3d:8d:62:86:fa:fb:f3:28:c9:19:9f:fa:
88:7b:68:63:b1:8f:60:81:90:e1:79:7d:ff:a8:6b:5c:ed:73:
3c:76:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:43:06 2026 by rpki-client