Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DhtYy-NTbO_bboTrRjm1XEEIYEI.roa
File: DhtYy-NTbO_bboTrRjm1XEEIYEI.roa (raw, json)
Hash identifier: y/JKAV7y8VPKTGsH2rFB6CNK8C/GSWK5Lh52kh2GFW0=
Subject key identifier: 0E:1B:58:CB:E3:53:6C:EF:DB:6E:84:EB:46:39:B5:5C:41:08:60:42
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0666B94F0E96F2D241F97489E8208684F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DhtYy-NTbO_bboTrRjm1XEEIYEI.roa
Signing time: Thu 03 Sep 2026 08:38:41 +0000
ROA not before: Thu 03 Sep 2026 08:38:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 80.68.216.0/21 maxlen: 24
82.109.153.0/24 maxlen: 24
87.84.129.0/24 maxlen: 24
87.85.66.0/23 maxlen: 24
87.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:6b:94:f0:e9:6f:2d:24:1f:97:48:9e:82:08:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 3 08:38:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e1b58cbe3536cefdb6e84eb4639b55c41086042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:aa:40:ef:d2:84:87:7b:c7:c8:e5:cf:84:
31:db:4e:1e:ae:9a:2a:ac:32:7e:66:6b:61:67:e5:
97:9e:9e:52:28:a8:f1:3b:38:7f:45:d4:2a:04:11:
c8:be:4e:d1:82:47:c7:5c:a3:7d:cd:38:a7:cb:ee:
3d:7f:12:98:1a:ea:ec:85:e6:0a:5a:9b:17:da:76:
0f:34:f9:20:4b:7e:35:e1:ca:79:96:8f:86:d2:3d:
28:f1:20:a5:33:a4:e8:10:7e:96:ec:35:a7:6f:1f:
d6:90:d1:c2:7c:9b:5a:f8:76:57:08:76:a0:9b:6f:
d4:e2:f6:67:c9:8e:d0:84:ef:41:96:ee:86:0c:c8:
dc:d1:1f:74:41:b3:65:71:43:52:00:25:57:33:d6:
9a:74:b4:d7:6e:f9:e3:24:2f:43:2f:42:14:16:19:
42:47:56:57:0b:b9:da:2f:26:2c:6b:1c:49:87:43:
56:a1:b1:fd:46:6c:e9:de:7c:0f:5f:32:7c:66:9c:
4a:11:b7:29:8c:e9:6c:3c:9f:f3:33:cd:81:e5:bb:
ef:38:a6:b7:a4:c5:21:91:e9:4d:c3:6c:5c:4c:78:
29:f6:cc:e2:c1:33:df:aa:90:9b:1a:d2:ee:0a:79:
94:9e:c6:80:3a:a7:da:1d:49:44:02:c6:1b:7b:e6:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:58:CB:E3:53:6C:EF:DB:6E:84:EB:46:39:B5:5C:41:08:60:42
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DhtYy-NTbO_bboTrRjm1XEEIYEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.216.0/21
82.109.153.0/24
87.84.129.0/24
87.85.66.0/23
87.86.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:13:f7:04:f7:b9:84:ad:cd:8b:49:75:f1:67:38:ea:0a:a0:
29:85:4a:25:3e:24:87:20:09:2a:20:c4:87:5f:ed:8d:83:e1:
bf:e6:61:dd:da:62:f1:88:80:4d:f4:0a:6d:39:52:aa:df:75:
48:3e:eb:6d:8d:9e:0b:63:d9:b6:68:0b:fe:82:d0:11:8b:a4:
47:4a:b6:26:f9:63:13:38:f3:b5:99:41:63:e9:b0:0f:09:a6:
4d:7a:7a:73:2d:6b:1b:13:f1:ed:11:d8:b4:f4:d4:6e:6b:57:
6f:0b:43:95:2a:35:0a:3c:a6:4b:6e:d7:4e:a3:c1:8e:87:ee:
d6:10:90:10:aa:f6:b2:56:a0:6f:0e:ec:cc:76:98:08:63:80:
34:19:7f:4b:a0:ee:62:7b:85:6e:b4:5b:f3:34:f9:4c:51:14:
36:5b:1c:be:84:34:b9:ae:f5:92:5e:4e:4b:a1:f3:bf:1b:47:
16:06:e9:90:64:40:83:88:60:1a:26:cb:45:26:24:a0:60:f2:
c4:83:6c:99:63:59:df:10:fa:6e:d1:45:f7:9e:21:cf:e2:e7:
40:e5:86:44:cd:e7:58:47:df:bb:e7:00:16:af:22:2a:a6:d9:
4b:89:28:db:98:d7:0b:17:0f:de:2c:8e:c4:f2:eb:87:99:e3:
1d:ee:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:11 2026 by rpki-client