Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/DvhjlrD4k8Ln_aeRkLT9oX8WaAo.roa
File: DvhjlrD4k8Ln_aeRkLT9oX8WaAo.roa (raw, json)
Hash identifier: yhb5vBNekieAt8tCcz4pxh0ekvD8nMPbWHt3jJMgJRs=
Subject key identifier: 0E:F8:63:96:B0:F8:93:C2:E7:FD:A7:91:90:B4:FD:A1:7F:16:68:0A
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 01A01AAD6B2459946D61C9382FC98AED42A7
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/DvhjlrD4k8Ln_aeRkLT9oX8WaAo.roa
Signing time: Wed 19 Aug 2026 15:39:27 +0000
ROA not before: Wed 19 Aug 2026 15:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33876
IP address blocks: 91.198.47.0/24 maxlen: 24
94.126.168.0/21 maxlen: 24
176.61.144.0/21 maxlen: 21
176.111.104.0/22 maxlen: 22
176.111.104.0/24 maxlen: 24
176.111.106.0/24 maxlen: 24
185.11.164.0/22 maxlen: 24
185.12.116.0/22 maxlen: 24
185.76.4.0/22 maxlen: 24
194.8.30.0/24 maxlen: 24
2a03:8bc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 14:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:ad:6b:24:59:94:6d:61:c9:38:2f:c9:8a:ed:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Aug 19 15:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ef86396b0f893c2e7fda79190b4fda17f16680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:66:41:c1:50:cb:1d:95:a5:f9:b6:ed:7a:
f8:22:e2:80:eb:1e:a6:59:44:06:a1:76:f1:f1:60:
60:6a:a7:d6:1f:1a:d0:20:71:23:b1:9b:60:18:03:
99:af:5a:d3:bf:4e:ca:3e:35:0f:6c:b4:be:7e:43:
91:df:08:58:93:cd:8e:e1:19:33:db:d6:1b:3c:62:
71:34:97:eb:ba:8e:b4:83:d5:e9:25:2d:a8:d2:eb:
46:56:da:eb:ec:1b:07:59:0d:00:33:00:22:57:15:
0a:92:61:e5:86:bb:21:94:24:f8:cd:36:f0:8a:5c:
c4:c7:fa:b6:01:ea:9f:ea:31:c0:bd:3c:fa:72:24:
48:69:59:d1:2c:73:14:a4:fb:de:0c:d5:79:e1:9d:
86:81:b6:a1:c1:c6:ef:58:32:c7:de:87:6d:b5:ca:
54:20:78:d2:26:5f:49:35:68:7d:1c:53:2b:62:35:
50:f2:64:05:5a:c0:db:5a:a9:c1:ab:9e:67:57:28:
f1:3c:88:44:f4:49:56:2e:2b:16:60:ab:36:3b:d2:
30:dd:f2:fe:b5:f0:ec:5c:2c:fa:99:79:c8:bc:30:
26:ca:71:f9:32:9e:d7:47:c7:e9:9d:cf:00:f2:c1:
cf:47:3b:7b:ef:bd:16:13:24:ee:af:74:4d:e0:26:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:63:96:B0:F8:93:C2:E7:FD:A7:91:90:B4:FD:A1:7F:16:68:0A
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/DvhjlrD4k8Ln_aeRkLT9oX8WaAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.47.0/24
94.126.168.0/21
176.61.144.0/21
176.111.104.0/22
185.11.164.0/22
185.12.116.0/22
185.76.4.0/22
194.8.30.0/24
IPv6:
2a03:8bc0::/32
Signature Algorithm: sha256WithRSAEncryption
00:e8:85:98:af:e3:32:c9:0d:94:d0:fa:f1:27:70:84:6b:89:
7e:c1:f0:40:33:31:eb:ef:d9:73:99:c6:9a:e1:31:af:a6:73:
56:87:a7:b4:1f:e4:f9:59:de:de:2c:2c:eb:7c:ae:37:91:ad:
9f:09:de:ef:22:ac:32:01:56:53:b5:f8:09:ed:50:c2:8b:55:
68:2c:2d:fd:96:b6:78:85:1c:15:84:1a:eb:5a:9d:7c:30:52:
2e:a9:ac:9d:0c:ce:9e:c2:42:03:d6:39:95:b6:1e:86:b2:13:
7d:15:21:e9:84:e4:63:17:40:0e:26:43:7d:bc:41:6b:bc:57:
0a:12:81:1c:c1:9f:e3:15:cd:08:65:99:0b:18:ce:65:5d:f7:
5c:c7:f4:38:73:21:bf:b5:e7:2d:69:62:51:a6:0c:08:35:b6:
ac:47:60:8d:89:0c:2f:17:c6:d3:91:e1:c1:3d:d0:b6:cf:d5:
2d:64:3e:c8:54:a9:37:1b:e1:cb:a8:f8:f0:a0:4e:47:85:57:
b6:13:29:bb:fc:76:d8:6e:a9:7f:b3:7c:aa:23:d7:f2:84:01:
c1:f2:c7:4a:c6:b4:b3:58:c9:5d:f2:9f:30:65:05:0e:5c:4f:
50:af:14:f5:5a:2b:d7:88:ea:10:d4:04:5d:fe:ea:da:b0:f6:
48:8e:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 20:15:50 2026 by rpki-client