Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/DVctQHuUFs5Ww1nxg7BOkHHIxmA.roa
File: DVctQHuUFs5Ww1nxg7BOkHHIxmA.roa (raw, json)
Hash identifier: NAYQAcei8ET2orLJQeLFFdmfCZY62HVhsb/rGilJLnI=
Subject key identifier: 0D:57:2D:40:7B:94:16:CE:56:C3:59:F1:83:B0:4E:90:71:C8:C6:60
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019DA617A5BFD52602C151FDF0617A2469BD
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/DVctQHuUFs5Ww1nxg7BOkHHIxmA.roa
Signing time: Sun 19 Apr 2026 14:14:20 +0000
ROA not before: Sun 19 Apr 2026 14:14:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 69.40.207.0/24 maxlen: 24
185.219.7.0/24 maxlen: 24
193.46.217.0/24 maxlen: 24
193.46.218.0/24 maxlen: 24
195.96.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:17:a5:bf:d5:26:02:c1:51:fd:f0:61:7a:24:69:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Apr 19 14:14:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d572d407b9416ce56c359f183b04e9071c8c660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:db:bd:78:4f:68:9c:4e:dc:3b:87:3d:b3:
88:ea:3b:9d:96:ce:50:65:b2:9f:64:c0:00:1e:6a:
b0:40:c9:cd:2c:6c:70:89:59:52:6d:f6:53:93:6b:
4a:89:d7:6b:76:2f:40:fa:46:79:60:d1:d2:e8:50:
84:30:13:9c:23:6d:33:ea:c9:dc:9a:12:44:e2:12:
4e:45:81:c4:4f:81:61:ed:2d:5c:f0:8f:60:f0:c2:
37:03:ad:81:02:47:50:c8:ae:d7:f1:74:7b:fb:64:
f4:e4:61:29:55:26:48:83:8b:38:4b:b5:59:7c:23:
d0:c5:f8:0c:52:ce:5e:df:a5:10:3f:7e:4f:f7:db:
3f:d9:a3:68:da:69:b9:05:87:ce:96:c1:71:81:db:
d1:55:e9:ca:6b:3e:b8:19:cd:1f:3f:fd:63:c3:33:
47:2e:88:83:3c:7f:ab:a9:0a:e8:d3:8b:23:48:d6:
c2:41:69:68:63:fd:df:d3:f8:c8:8f:b4:d7:bd:31:
d9:f3:32:9e:0e:d4:ad:ab:3c:1e:3e:d1:7b:b7:e9:
3c:47:81:ec:18:e8:c2:56:91:c5:19:79:f6:b6:8c:
32:88:dd:c0:13:95:20:cc:15:c8:25:1c:c5:f9:d6:
b8:38:7b:f8:f1:08:90:af:7c:bb:ab:c4:03:51:7a:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:2D:40:7B:94:16:CE:56:C3:59:F1:83:B0:4E:90:71:C8:C6:60
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/DVctQHuUFs5Ww1nxg7BOkHHIxmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.40.207.0/24
185.219.7.0/24
193.46.217.0-193.46.218.255
195.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:94:43:64:ee:a1:6c:a3:b5:10:70:f4:fa:0c:ce:bf:10:df:
c5:d3:ab:5d:02:9b:0c:fd:34:c5:c2:8f:27:a1:42:bf:6c:08:
6c:4c:85:49:e3:f6:8f:19:cf:9a:39:e6:7b:a5:e8:1f:ed:c1:
c9:ed:47:1b:d3:d3:24:c1:4f:e4:4e:01:9b:a7:e5:7a:33:63:
70:90:8d:01:bb:b5:9f:cf:79:da:77:dd:54:75:1b:be:4a:20:
18:a1:76:65:3f:4c:1e:f3:d9:2a:80:c9:f5:b3:f0:2e:7d:fe:
52:85:f0:6e:fb:9d:71:72:c8:ca:91:82:9f:dc:11:e9:80:a8:
9f:4e:ae:5b:68:d3:58:89:16:89:7f:e7:8d:7d:65:d2:e0:8c:
ab:00:08:b7:bb:49:70:dc:09:8e:92:f5:8a:ca:f7:d1:ff:81:
e9:32:8e:63:27:c7:14:9d:2d:36:47:f5:4a:0e:47:7c:07:e8:
64:ca:02:be:37:bf:11:2f:e3:f6:16:94:3f:bb:cd:a4:18:ec:
0d:d6:9b:b0:cb:21:6b:1f:45:04:f6:d6:e5:af:d2:6a:42:bc:
89:7d:30:4b:84:bf:85:0a:15:fc:61:14:59:02:89:3b:a2:aa:
3e:1a:d5:8a:aa:b8:b5:19:1b:64:56:72:94:fb:70:3b:d5:12:
61:64:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:16:23 2026 by rpki-client