Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DvSbsBvTrUB_k_1FQlugBO0wHx0.roa
File: DvSbsBvTrUB_k_1FQlugBO0wHx0.roa (raw, json)
Hash identifier: GM4EAd1TO1n2iZiSmusY28HI1NGFfOqWZ7hG8EjQD0I=
Subject key identifier: 0E:F4:9B:B0:1B:D3:AD:40:7F:93:FD:45:42:5B:A0:04:ED:30:1F:1D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0AA937E7B7FC6C676F3D8E61039BA09EC
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DvSbsBvTrUB_k_1FQlugBO0wHx0.roa
Signing time: Wed 16 Sep 2026 14:16:27 +0000
ROA not before: Wed 16 Sep 2026 14:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 138.249.19.0/24 maxlen: 24
138.249.116.0/24 maxlen: 24
138.249.140.0/24 maxlen: 24
170.168.4.0/24 maxlen: 24
170.168.5.0/24 maxlen: 24
170.168.12.0/24 maxlen: 24
170.168.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:93:7e:7b:7f:c6:c6:76:f3:d8:e6:10:39:ba:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 16 14:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ef49bb01bd3ad407f93fd45425ba004ed301f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:12:98:c7:e9:1e:b4:32:ce:af:30:1a:19:
26:0e:78:6d:a9:cf:68:8d:de:5a:f7:ca:76:5c:32:
ec:5a:80:d3:9b:a4:c5:24:e0:a9:21:12:8f:94:16:
d1:55:b6:1f:c7:f1:0d:c6:55:da:15:19:03:55:98:
d0:09:ae:b0:1a:cf:50:31:85:29:fe:a4:d6:a0:3f:
02:d9:14:9d:e8:94:26:7e:a9:40:81:0e:f7:f9:0c:
50:db:53:a9:dc:d3:60:c0:f6:7a:e0:41:7b:1a:0e:
42:9b:32:c7:47:41:e3:bc:b0:a1:89:69:f1:33:5f:
f1:f0:ac:51:7b:bb:4f:ba:e1:b4:d2:b5:fb:df:fa:
eb:04:0b:56:84:01:d0:da:de:09:8d:5e:ac:28:4b:
5c:c3:2d:68:8c:b8:84:f7:c1:64:58:2e:1e:7b:fd:
72:df:68:20:54:d7:6b:70:90:c9:e6:02:c7:15:40:
51:9f:71:81:a8:af:ac:c2:82:4e:2d:96:89:f6:f7:
48:83:a2:41:5c:1c:e7:d2:53:52:19:61:76:cc:78:
de:37:af:f3:bc:ea:ea:04:63:63:ea:74:80:b3:a5:
0a:5c:85:a6:fc:d1:80:f7:d1:57:6c:60:16:36:90:
84:e8:bc:2c:ce:bb:f7:0e:20:a1:de:47:72:ab:9e:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:9B:B0:1B:D3:AD:40:7F:93:FD:45:42:5B:A0:04:ED:30:1F:1D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DvSbsBvTrUB_k_1FQlugBO0wHx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.19.0/24
138.249.116.0/24
138.249.140.0/24
170.168.4.0/23
170.168.12.0/24
170.168.24.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8b:ff:1a:71:8e:92:31:1b:e8:ad:5a:f1:92:28:ba:ab:f1:
97:79:78:39:bc:fc:0a:d3:d8:38:ce:d6:6c:1a:01:5c:0d:a3:
9b:dc:9d:92:e3:77:46:af:13:f7:ce:2c:ad:f3:ea:35:b3:3e:
2a:a0:b2:34:29:79:f7:93:b3:a2:1c:8b:71:41:42:34:85:bb:
7f:d5:ff:83:c0:d2:ce:f6:f3:ea:ce:bc:88:12:d7:a2:91:61:
07:ae:b7:06:fc:2c:61:e5:8b:00:4e:a3:3e:27:f3:a8:3b:eb:
f2:99:94:ce:24:d4:9b:ac:96:4b:ae:44:26:03:55:8a:0c:5e:
02:3e:5f:b4:47:d2:6c:b9:50:16:68:d7:f4:14:e6:90:1a:5c:
e2:53:3c:f5:7d:af:7a:8a:46:76:64:23:c4:1a:15:f0:dc:3f:
54:c6:b1:4a:17:dd:6f:fd:ea:9e:07:17:bb:e2:6a:bf:d3:31:
c2:6e:84:41:5a:ca:01:1d:68:9e:18:7a:6c:cb:74:78:d3:bc:
e9:5a:a6:6d:cc:3b:db:80:6d:52:15:ab:17:6a:4a:58:b8:90:
ee:00:93:11:69:1e:c1:d9:38:5c:f9:bc:5c:77:02:34:41:34:
c1:c7:3c:0e:72:4e:61:57:72:6b:6a:8f:93:cf:ac:7d:c8:a6:
1f:1d:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 02:57:15 2026 by rpki-client