Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dhi5B2eTlpGFOydBSPNIaYSidSY.roa
File: Dhi5B2eTlpGFOydBSPNIaYSidSY.roa (raw, json)
Hash identifier: yNkwT1TF61Cxe0EeoPTICAxd+24qk4US46TaOUvyyeo=
Subject key identifier: 0E:18:B9:07:67:93:96:91:85:3B:27:41:48:F3:48:69:84:A2:75:26
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368ED33194198589E9EAD30D024F5C7
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dhi5B2eTlpGFOydBSPNIaYSidSY.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43698
IP address blocks: 78.159.0.0/19 maxlen: 19
82.151.0.0/19 maxlen: 19
95.168.0.0/19 maxlen: 19
2a00:8d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ed:33:19:41:98:58:9e:9e:ad:30:d0:24:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e18b90767939691853b274148f3486984a27526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:cc:92:16:25:6e:1c:9d:e4:f4:0c:df:06:
8e:cd:8d:4a:04:69:e7:a8:2f:a2:24:95:28:a7:78:
43:0e:71:5e:f2:e8:fb:cd:89:ec:56:91:e1:63:8b:
7c:e1:44:43:3f:cf:c4:1b:e9:d1:c5:30:c7:90:ba:
c5:b6:35:49:58:0d:22:a8:3d:5b:10:37:d8:0e:18:
3f:71:db:13:21:03:73:0f:89:bf:85:b7:c0:ea:29:
ef:9f:76:ef:e4:9e:e2:b9:fe:42:c3:6d:5f:6f:e8:
10:d5:a1:dc:da:ce:35:21:41:92:60:3a:f6:4e:f7:
68:3f:bb:f8:84:07:66:77:0c:4b:07:57:ee:df:a0:
6f:71:58:dc:c2:1d:71:f8:2b:db:b2:dd:ef:3a:f9:
c2:0e:f2:da:66:19:8e:52:ff:41:c0:32:d8:65:44:
75:eb:65:e6:41:7b:b9:35:7a:b5:9d:ca:7d:e1:75:
4f:2f:b6:be:a4:45:31:3d:67:49:a5:cb:6b:bc:a9:
06:01:3f:0d:4c:e3:06:e9:63:3d:cb:6a:60:50:1a:
9f:79:58:ea:b3:e5:df:41:10:8b:a8:4f:1a:c9:e2:
a6:4d:99:93:ae:88:85:09:19:9a:9a:5d:d4:62:d6:
d5:a0:65:40:82:82:0c:c2:78:05:5e:82:55:d8:a1:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:18:B9:07:67:93:96:91:85:3B:27:41:48:F3:48:69:84:A2:75:26
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dhi5B2eTlpGFOydBSPNIaYSidSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.0.0/19
82.151.0.0/19
95.168.0.0/19
IPv6:
2a00:8d80::/32
Signature Algorithm: sha256WithRSAEncryption
75:bc:0e:ee:58:65:33:52:a3:7f:70:85:32:35:99:f0:26:37:
81:52:96:c6:92:e2:45:12:b8:28:61:c1:53:c9:ea:a7:25:19:
da:3d:95:ba:36:2a:dd:63:19:25:88:d2:37:80:f6:18:c2:33:
08:e8:21:6d:68:c8:bc:4a:ff:f4:ba:5a:1a:87:c1:0c:5f:95:
12:c1:cb:5a:a2:bd:31:ec:de:a2:ba:ac:0c:00:3f:5f:b1:9e:
f3:e7:89:16:35:e0:ce:4c:fd:0b:d6:d2:9b:63:99:e6:54:48:
e2:1c:88:52:23:d6:a0:28:af:cc:e3:37:2d:95:5b:73:48:42:
1c:1c:81:b6:fb:93:f1:24:01:82:7a:b3:5f:38:7e:5c:7d:77:
9c:57:67:02:b2:d6:38:17:9b:6b:1b:75:b1:aa:99:5e:c4:c3:
60:c1:98:ac:b2:07:44:bb:ba:89:34:e5:59:26:81:ce:b9:b3:
59:ef:4c:e6:5a:fe:c5:c3:3a:79:22:47:68:a1:c9:af:81:07:
d6:95:30:2a:50:e3:64:74:de:0c:40:ae:ae:ca:0b:aa:d2:fb:
83:9c:f2:be:46:bc:c1:ce:99:0a:ad:20:a1:bf:2e:91:c9:dc:
cd:a5:15:0d:ea:6b:d9:77:dd:6a:5b:db:be:61:6a:f8:e4:e0:
fa:af:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:38 2026 by rpki-client