Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa
File: Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa (raw, json)
Hash identifier: QPVOPL6nSnWbsKxxKr4oQ5BFOYUcMw/3uW2oYvYKLmo=
Subject key identifier: 0E:F9:B5:8A:F3:39:A7:87:8F:A6:0C:AC:0E:D2:ED:A0:B1:F0:27:9C
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A04DC2934B94F8FA668C9E5B36409FDB6B
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa
Signing time: Sat 29 Aug 2026 13:43:12 +0000
ROA not before: Sat 29 Aug 2026 13:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 2a0b:a280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:c2:93:4b:94:f8:fa:66:8c:9e:5b:36:40:9f:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 29 13:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ef9b58af339a7878fa60cac0ed2eda0b1f0279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:fd:3e:04:6d:ae:be:a3:c4:52:1e:f5:f9:
69:41:fb:a5:7f:89:8e:03:98:8a:8f:8a:02:b1:d9:
95:ef:ab:97:d5:b8:07:32:fb:f4:cc:d2:96:4a:88:
93:6f:3c:de:26:19:53:dc:5c:ee:a4:3f:ea:94:31:
83:86:85:d8:59:7e:2d:c1:c2:94:28:25:ed:75:cb:
26:c3:f5:0c:05:65:d1:35:6a:be:71:b7:85:08:fa:
02:60:83:41:41:da:41:cd:04:6d:44:73:c7:89:1a:
5a:41:e5:c1:9e:ca:3a:a6:0b:f6:83:90:0b:52:db:
9e:57:8d:91:be:e3:5b:f7:81:6a:0f:5c:b9:2d:d2:
38:d6:c4:e4:32:64:b6:c8:b1:69:e8:4e:d2:d3:24:
c6:7b:3a:d7:19:78:c5:5f:8e:25:61:40:09:39:80:
9f:e2:90:f3:7e:69:90:88:8e:9d:16:58:00:c2:47:
66:05:7e:bd:a5:19:97:28:9d:60:d0:a2:12:5f:f1:
e0:99:c0:78:2f:34:25:4a:aa:5e:e5:72:61:ec:59:
93:7b:76:9b:03:30:07:6d:7a:38:88:4a:9b:50:f5:
02:9d:e3:8a:44:35:19:14:2c:0b:1b:d6:db:a2:09:
5b:93:6f:9a:05:f3:30:2d:1c:3d:32:ab:0c:06:0d:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F9:B5:8A:F3:39:A7:87:8F:A6:0C:AC:0E:D2:ED:A0:B1:F0:27:9C
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a280::/29
Signature Algorithm: sha256WithRSAEncryption
6d:b7:a7:83:62:f4:7e:03:ec:d9:21:f5:ca:61:d3:bc:2b:98:
c1:dc:00:f6:55:7e:ab:1f:2f:58:3f:7b:85:01:98:ba:f8:9e:
87:7a:32:a9:cc:bd:82:2b:8e:cf:8d:4a:f3:db:45:c5:7a:5f:
96:8e:9d:5c:2e:12:29:1f:31:b3:69:71:be:98:58:12:e7:02:
03:a9:76:81:6d:14:02:0e:36:05:39:1e:8a:4e:a2:23:d1:08:
eb:6d:70:c3:2e:a1:74:b2:75:1d:61:41:6e:4f:25:af:7e:33:
de:61:5d:e9:20:ae:62:6d:a2:d1:8c:75:0c:55:60:58:0a:22:
9d:0a:45:33:01:2d:56:eb:9e:56:e4:db:53:2f:eb:dc:98:72:
eb:7b:6d:23:f1:e9:7c:35:c4:68:d2:9b:66:3f:73:d3:a7:43:
8f:6e:75:7d:55:bf:5e:2f:44:10:9f:56:b9:3d:8b:04:f2:c6:
be:a1:42:6a:5c:13:ea:f9:6a:b2:ed:c8:d9:f9:53:31:65:6b:
68:f0:64:6e:fa:24:30:9e:60:be:cd:26:fd:0b:84:89:ec:31:
4e:69:d5:13:22:14:e6:3f:78:81:84:79:84:9a:f3:1d:01:58:
94:b2:d1:6a:0a:39:75:22:0f:6a:8b:46:43:2a:75:2d:9e:58:
18:6e:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:39 2026 by rpki-client