Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/D1MjY2dgI854Vrql-2sCQNqc_lM.roa
File: D1MjY2dgI854Vrql-2sCQNqc_lM.roa (raw, json)
Hash identifier: OLcuGasHeRlkhgtJyRPIcd1KKR1gIAesFmUc+dmwf6Q=
Subject key identifier: 0F:53:23:63:67:60:23:CE:78:56:BA:A5:FB:6B:02:40:DA:9C:FE:53
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 01A0D14520874102A00873EA940F7C9346D6
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/D1MjY2dgI854Vrql-2sCQNqc_lM.roa
Signing time: Thu 24 Sep 2026 02:36:03 +0000
ROA not before: Thu 24 Sep 2026 02:36:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49972
IP address blocks: 134.255.205.0/24 maxlen: 24
134.255.206.0/24 maxlen: 24
194.32.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:45:20:87:41:02:a0:08:73:ea:94:0f:7c:93:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Sep 24 02:36:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f532363676023ce7856baa5fb6b0240da9cfe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:15:75:d6:83:65:c6:f3:3e:5e:0b:2e:55:
39:b5:61:72:98:cc:24:87:1b:1e:c3:30:2d:08:1b:
ca:ae:eb:b8:59:fd:ce:d1:98:89:b9:0a:76:92:2a:
42:e0:47:86:88:13:e0:9f:93:80:02:14:19:db:ec:
97:af:6f:77:46:cc:f8:83:d0:76:a3:6b:a7:33:a9:
4d:57:68:f1:56:2a:dd:20:f3:a2:3c:62:19:9d:f7:
2d:91:1d:b3:da:e2:33:08:0b:e0:21:5d:7b:21:fc:
c9:56:bd:23:97:e7:bc:15:01:bd:ed:e9:6d:4b:12:
ef:06:30:c3:41:a9:0c:41:18:68:58:6b:ba:23:22:
36:ef:ed:39:4d:a6:ec:4d:48:88:44:92:02:5d:be:
9c:e6:18:d0:97:1a:7d:c5:8a:12:61:ad:ec:dd:e9:
95:8b:36:20:c8:41:9a:c0:41:58:1a:4e:fe:1e:a4:
d7:3f:a2:d8:fc:24:64:9c:79:13:70:b2:fa:88:67:
9d:6a:3f:c7:14:78:c8:40:37:f1:36:70:e1:03:f2:
04:c3:b8:b1:04:ec:0f:77:bc:39:27:46:a4:2b:4f:
3d:2e:61:b1:20:ce:65:29:48:61:d8:64:d3:cd:61:
c3:bf:e4:ab:77:9a:4b:cc:4b:3a:61:f3:c9:b8:a1:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:23:63:67:60:23:CE:78:56:BA:A5:FB:6B:02:40:DA:9C:FE:53
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/D1MjY2dgI854Vrql-2sCQNqc_lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.205.0-134.255.206.255
194.32.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b5:46:63:c3:a2:4d:29:29:09:73:51:7b:94:7d:86:94:9f:
84:bc:c1:e5:c4:43:a1:05:08:d6:e8:fd:75:a3:f8:06:cb:8b:
0f:08:9f:3d:b0:ce:d4:7b:e0:a1:b8:ad:55:de:ef:92:cc:12:
38:71:ab:c0:95:87:7a:66:a6:e4:a1:6b:f2:6b:f3:c9:ec:25:
88:94:12:56:35:5e:15:ed:e0:52:10:d6:5b:28:db:78:20:81:
c9:14:3c:04:f0:90:77:c3:e6:06:93:c7:f3:d1:1a:33:d3:90:
8f:47:3d:15:9e:4d:cd:b6:41:fe:ad:d1:5b:2b:16:61:8e:f1:
01:87:42:4f:e4:3a:30:45:87:53:76:c4:f7:7a:d6:65:74:cd:
1d:59:15:b9:46:96:0c:69:1e:e1:30:b6:8c:0e:d6:58:9d:a5:
12:8d:91:9b:29:26:99:f4:65:e4:f6:5d:de:e9:79:30:4c:e1:
a5:09:2d:88:27:b5:1c:6b:cf:47:a1:cc:6e:bc:d0:dd:be:fe:
60:f5:d6:57:75:16:a3:9d:43:c7:5c:47:93:9e:18:8f:f7:bd:
33:a0:f2:e2:12:cf:98:5d:36:3e:19:54:77:30:25:8f:2d:21:
be:dd:f9:0e:a0:e9:51:52:44:92:6a:8b:4f:07:a8:4f:62:29:
58:5b:e1:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:24 2026 by rpki-client