Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/DzgWlGnCrZVrsHNtlyUgrSKq1SE.roa
File: DzgWlGnCrZVrsHNtlyUgrSKq1SE.roa (raw, json)
Hash identifier: UqU+44CBn8Fv1xicZUkxPdELRTJ7aPP6G+L/dU22hrs=
Subject key identifier: 0F:38:16:94:69:C2:AD:95:6B:B0:73:6D:97:25:20:AD:22:AA:D5:21
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 019FCB8BF77D47D8F49C8AAEF7CE67E88981
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/DzgWlGnCrZVrsHNtlyUgrSKq1SE.roa
Signing time: Tue 04 Aug 2026 06:52:55 +0000
ROA not before: Tue 04 Aug 2026 06:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25122
IP address blocks: 194.126.33.0/24 maxlen: 24
194.126.34.0/24 maxlen: 24
194.126.38.0/24 maxlen: 24
194.126.44.0/24 maxlen: 24
194.126.54.0/24 maxlen: 24
2a03:5780:197::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:8b:f7:7d:47:d8:f4:9c:8a:ae:f7:ce:67:e8:89:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Aug 4 06:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f38169469c2ad956bb0736d972520ad22aad521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:08:48:ba:ce:30:cf:e5:6a:35:6a:31:b0:
46:c8:43:32:0c:2b:41:36:52:42:39:3a:20:24:a2:
37:8c:78:45:0e:13:62:14:62:5b:3b:a4:4d:f0:53:
b5:89:2b:ac:70:1c:07:09:a1:f2:f6:26:05:b2:c8:
d8:4d:66:37:d9:c5:e9:43:af:96:21:6d:9a:8d:96:
61:64:6d:c5:6e:e8:eb:4b:6b:14:c0:6c:ae:ae:33:
30:49:60:e3:8f:93:ea:bd:3e:07:b3:17:29:1f:5f:
9c:91:42:4c:5c:83:85:ca:17:7b:79:65:9c:44:26:
21:fa:cf:7b:b8:f4:dc:ef:8e:d8:a6:d5:99:27:06:
72:e6:31:29:3f:fb:3c:35:c6:58:8e:90:f6:71:ef:
bc:7c:3b:25:6e:74:c6:2c:f4:1f:2d:59:37:28:a5:
e0:c1:1a:9c:ac:5f:11:81:31:04:cc:4b:93:a2:63:
42:41:19:3f:3c:a0:e0:43:79:d3:e7:ae:1d:ca:dc:
1a:f5:39:24:77:c4:c5:3a:19:5f:9f:13:9e:93:41:
cd:5e:1f:f5:45:c5:a6:cf:31:4b:b5:1a:c3:96:5a:
bd:35:c9:39:05:37:71:ed:c6:31:f8:58:72:6c:40:
0d:7b:10:33:e3:5c:2f:d8:f0:51:2c:16:1d:3a:e8:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:38:16:94:69:C2:AD:95:6B:B0:73:6D:97:25:20:AD:22:AA:D5:21
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/DzgWlGnCrZVrsHNtlyUgrSKq1SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.33.0-194.126.34.255
194.126.38.0/24
194.126.44.0/24
194.126.54.0/24
IPv6:
2a03:5780:197::/48
Signature Algorithm: sha256WithRSAEncryption
19:b7:24:f2:4f:af:98:b3:55:1b:c4:24:99:78:fb:7d:b5:90:
fb:11:f9:41:7a:1f:f7:d8:7a:1a:63:e4:62:dd:3d:95:1c:d9:
b2:52:ee:5f:cd:fc:7e:f4:ec:8e:4a:0c:b7:55:51:ca:4c:87:
7d:72:1f:2a:98:ce:fa:20:b2:1f:9f:d3:c7:cf:03:80:47:bb:
a7:6c:be:8e:e8:1d:7a:5e:3d:ef:a0:d0:69:72:17:d9:92:7e:
ba:45:d5:c8:05:21:86:18:42:8a:c2:94:87:ee:4f:bf:51:aa:
38:26:89:83:f2:8a:bc:ad:7b:d2:b4:0a:5d:87:fe:26:27:2b:
91:e9:1d:4a:0c:c1:6f:94:3c:e4:6d:67:4e:a4:c2:7c:a8:74:
2e:8a:0e:4c:0b:94:00:56:24:1a:65:00:b3:b0:ab:a5:d9:30:
e1:64:bd:23:03:c4:d3:a6:7f:db:61:b3:b1:6a:40:b6:87:d0:
e7:44:3a:21:ff:f5:ff:78:74:98:6c:1e:8c:ad:f8:c7:8e:1c:
8f:0f:6c:fe:9f:48:16:28:ef:aa:dd:ab:46:7b:97:9f:24:6d:
10:8f:3b:cd:9a:71:50:ad:13:43:df:bb:7e:61:27:31:fd:10:
27:25:08:d4:75:ba:68:39:f4:8a:9b:e2:c9:dc:82:0f:d1:d1:
d8:66:0d:18
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZ/Li/d9R9j0nIqu985n6ImBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh
MDRiM2QwHhcNMjYwODA0MDY1MjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjM4MTY5NDY5YzJhZDk1NmJiMDczNmQ5NzI1MjBhZDIyYWFkNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjgISLrOMM/lajVqMbBGyEMyDCtB
NlJCOTogJKI3jHhFDhNiFGJbO6RN8FO1iSuscBwHCaHy9iYFssjYTWY32cXpQ6+W
IW2ajZZhZG3FbujrS2sUwGyurjMwSWDjj5PqvT4HsxcpH1+ckUJMXIOFyhd7eWWc
RCYh+s97uPTc747YptWZJwZy5jEpP/s8NcZYjpD2ce+8fDslbnTGLPQfLVk3KKXg
wRqcrF8RgTEEzEuTomNCQRk/PKDgQ3nT564dytwa9Tkkd8TFOhlfnxOek0HNXh/1
RcWmzzFLtRrDllq9Nck5BTdx7cYx+FhybEANexAz41wv2PBRLBYdOuis+QIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFA84FpRpwq2Va7BzbZclIK0iqtUhMB8GA1UdIwQY
MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt
MjhkYTZhMWJhMTI4LzEvRHpnV2xHbkNyWlZyc0hOdGx5VWdyU0txMVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4
LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgMAwDBADCfiED
BADCfiIDBADCfiYDBADCfiwDBADCfjYwDwQCAAIwCQMHACoDV4ABlzANBgkqhkiG
9w0BAQsFAAOCAQEAGbck8k+vmLNVG8QkmXj7fbWQ+xH5QXof99h6GmPkYt09lRzZ
slLuX838fvTsjkoMt1VRykyHfXIfKpjO+iCyH5/Tx88DgEe7p2y+jugdel4976DQ
aXIX2ZJ+ukXVyAUhhhhCisKUh+5Pv1GqOCaJg/KKvK170rQKXYf+JicrkekdSgzB
b5Q85G1nTqTCfKh0LooOTAuUAFYkGmUAs7Crpdkw4WS9IwPE06Z/22GzsWpAtofQ
50Q6If/1/3h0mGwejK34x44cjw9s/p9IFijvqt2rRnuXnyRtEI87zZpxUK0TQ9+7
fmEnMf0QJyUI1HW6aDn0ipviydyCD9HR2GYNGA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:37 2026 by rpki-client