Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/DABiD7uw5X1UDgK0KYm4pTweBTs.roa
File: DABiD7uw5X1UDgK0KYm4pTweBTs.roa (raw, json)
Hash identifier: CdIof73ob606H6HEETNJAXQA/8lVWBNHp980E+YLvcU=
Subject key identifier: 0C:00:62:0F:BB:B0:E5:7D:54:0E:02:B4:29:89:B8:A5:3C:1E:05:3B
Certificate issuer: /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial: 019F2368EC8EE7D5C8896F38493ED3D7810F
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/DABiD7uw5X1UDgK0KYm4pTweBTs.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51945
IP address blocks: 185.190.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:8e:e7:d5:c8:89:6f:38:49:3e:d3:d7:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c00620fbbb0e57d540e02b42989b8a53c1e053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:43:f0:5a:6f:05:19:18:d9:13:be:87:0f:24:
e2:86:07:65:07:df:ca:87:18:72:2e:fd:1a:04:15:
a0:0c:a5:5b:26:84:8c:73:3a:8d:f4:c1:1e:5e:7e:
53:d0:3a:d9:f5:20:1f:ee:a2:c0:0f:25:9d:0d:e7:
47:cb:ad:61:53:9b:a9:53:15:51:15:44:c8:f1:fd:
a6:48:f7:93:0d:45:b7:9e:1a:55:81:62:80:5a:90:
90:b3:07:de:cf:a7:73:a6:05:d5:0b:b0:02:1a:d1:
21:b2:e9:37:7e:d4:ae:0e:43:e7:da:1a:b9:fa:06:
e3:ec:76:39:9e:77:0c:af:7e:93:d0:16:8f:bf:63:
15:9a:56:11:ff:11:e3:90:df:a4:bf:47:5a:7d:d4:
8d:d2:0c:50:bc:bc:e1:7d:15:0f:ef:e1:09:cd:f5:
b5:f1:33:28:78:52:9a:ae:61:54:2b:3b:f4:08:f4:
eb:50:e0:a2:6c:cb:90:4c:dc:79:65:f0:f7:55:e3:
26:6e:3a:20:d1:a0:32:25:e5:a1:42:8e:4c:9d:83:
e4:5b:fe:b9:1e:40:7b:32:85:94:e8:50:03:c9:0a:
81:71:d6:a2:a9:f3:be:99:4d:3c:1f:19:7c:b1:db:
88:a4:c6:e3:44:8b:c1:32:fd:b3:6d:e9:cb:8e:fb:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:62:0F:BB:B0:E5:7D:54:0E:02:B4:29:89:B8:A5:3C:1E:05:3B
X509v3 Authority Key Identifier:
keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/DABiD7uw5X1UDgK0KYm4pTweBTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c0:10:d6:24:5c:47:ff:87:30:c4:45:35:bd:6d:1b:07:b2:
77:01:ba:11:e9:2c:5f:dd:62:94:77:be:a7:e1:db:68:63:2e:
64:52:f1:36:9f:20:b0:0c:d5:1b:42:b6:5d:87:a7:4a:cf:1f:
90:e1:34:9d:de:0d:2a:2b:0c:c5:9f:50:a6:89:30:2a:7e:39:
1b:ec:ea:1b:22:67:75:d0:3a:1d:3f:8e:55:52:65:11:26:79:
da:97:07:07:aa:fd:f2:d6:51:45:df:62:ce:39:aa:cf:57:8a:
96:5f:89:2f:3c:24:dc:26:cb:b7:27:dd:7c:2a:6e:4b:3e:7d:
36:d2:e8:81:43:07:7c:63:cd:65:66:b1:8d:ce:1b:7f:92:c3:
f9:c3:19:17:86:09:33:80:de:52:81:36:3c:ad:28:b2:8b:c9:
59:43:d8:14:bd:70:50:36:e0:f8:b1:b4:87:97:44:c9:be:ad:
01:10:17:bf:3f:f6:df:b3:52:9b:40:21:9e:34:a8:8a:e7:76:
97:97:49:46:b8:2f:08:89:2a:c9:9a:17:9f:0c:0c:07:ff:ba:
e8:c3:b1:f4:9f:ff:05:de:fc:e7:51:ff:0f:8a:d7:d0:88:60:
81:1d:bf:97:14:41:0d:1b:2d:39:9e:00:a3:cf:4f:df:f2:ed:
c7:e3:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:28 2026 by rpki-client