Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Dur4yJ4Pj3v7h_FGmnhNwrA_mYk.roa
File: Dur4yJ4Pj3v7h_FGmnhNwrA_mYk.roa (raw, json)
Hash identifier: uvKA2TAkKkWC8VPtuI10dVVA2UR+xIBpFmJHawXQCZE=
Subject key identifier: 0E:EA:F8:C8:9E:0F:8F:7B:FB:87:F1:46:9A:78:4D:C2:B0:3F:99:89
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A081E939C02BEC6F5E49094C55FF7F0764
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Dur4yJ4Pj3v7h_FGmnhNwrA_mYk.roa
Signing time: Tue 08 Sep 2026 16:45:40 +0000
ROA not before: Tue 08 Sep 2026 16:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 94.184.36.0/24 maxlen: 24
94.184.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:e9:39:c0:2b:ec:6f:5e:49:09:4c:55:ff:7f:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 8 16:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eeaf8c89e0f8f7bfb87f1469a784dc2b03f9989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:91:10:12:da:b7:7a:7e:0e:80:29:7b:1d:
2b:c0:3b:11:35:8c:c7:3a:4c:a2:f4:21:16:d7:61:
eb:9a:81:ba:36:ea:92:01:4b:76:de:6b:1a:5e:05:
e9:08:b6:f6:cb:1a:44:11:5b:87:b4:79:be:15:c7:
f4:96:cf:9d:b7:52:7a:c1:a9:41:e8:f9:3c:2a:bd:
d6:20:25:7c:77:6b:24:5f:e7:c8:09:37:41:39:ba:
a5:88:7e:22:64:dd:a7:0c:fd:42:c8:47:71:ee:c0:
56:90:31:8e:06:0e:ab:9d:fa:dc:f8:fd:85:65:37:
67:c9:0c:6c:4f:28:48:da:8a:3b:8a:aa:f1:94:fb:
c4:ce:28:b1:96:f6:59:ec:cc:2e:bb:ec:e2:19:96:
f7:73:ab:e5:5e:0b:a1:5c:1a:a3:01:bf:04:5c:86:
88:fc:d8:c8:c9:84:80:c1:f0:f7:cf:69:a8:8c:02:
47:9b:91:14:06:c6:ac:75:08:67:17:80:0e:e6:e9:
14:62:f8:b5:11:c9:b6:a0:49:e8:20:91:79:49:ba:
df:8f:e5:23:cc:3f:12:39:35:3e:62:0d:be:89:74:
2e:9e:f0:0e:42:91:ff:5b:77:5a:99:6a:b1:ab:e7:
79:f9:c6:14:35:ef:9e:08:7c:2d:37:99:9e:12:6d:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:F8:C8:9E:0F:8F:7B:FB:87:F1:46:9A:78:4D:C2:B0:3F:99:89
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Dur4yJ4Pj3v7h_FGmnhNwrA_mYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.36.0/24
94.184.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:50:ae:03:80:04:61:26:7a:8b:30:a7:32:ef:f9:92:5e:
7c:79:16:8e:fe:af:1c:9f:69:5e:0d:6c:fa:59:66:cb:70:8b:
06:5d:68:ef:a1:4a:10:e7:0e:5d:36:bf:62:51:8a:bb:43:bf:
1d:06:20:ca:6b:8b:b7:28:83:2b:54:4b:9e:69:61:68:77:67:
8f:e4:51:bf:fd:c0:fd:f0:96:34:42:46:84:4e:f1:51:7c:c2:
b6:aa:5a:8f:1a:b7:0d:73:10:b1:2f:45:36:27:97:45:ad:e0:
ad:bd:d1:c8:20:2d:be:44:91:da:8d:ea:48:e0:b5:a5:1c:0d:
45:58:e7:f1:10:08:cb:50:3a:5a:16:2e:ba:6d:1e:bf:62:61:
00:e6:dc:24:9a:3c:c3:04:4d:62:5b:de:8b:a4:52:6b:67:f0:
27:fe:92:da:fc:7b:b9:33:be:18:58:cc:17:af:e6:56:a9:2e:
16:24:7c:d1:f7:ca:c9:90:c0:c2:08:ed:7a:9e:10:e1:78:a1:
04:b6:6c:c2:bf:06:6e:62:4d:2a:3f:00:df:60:7f:3b:58:38:
b1:cf:e8:13:9d:e5:8a:61:7c:73:9e:6d:78:c6:22:3b:37:95:
47:a7:79:65:5c:ee:8a:b6:54:9f:41:c7:03:f3:cb:cd:c7:7c:
74:bd:b4:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCB6TnAK+xvXkkJTFX/fwdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYwOTA4MTY0NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWVhZjhjODllMGY4ZjdiZmI4N2YxNDY5YTc4NGRjMmIwM2Y5OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEyREBLat3p+DoApex0rwDsRNYzH
Okyi9CEW12HrmoG6NuqSAUt23msaXgXpCLb2yxpEEVuHtHm+Fcf0ls+dt1J6walB
6Pk8Kr3WICV8d2skX+fICTdBObqliH4iZN2nDP1CyEdx7sBWkDGOBg6rnfrc+P2F
ZTdnyQxsTyhI2oo7iqrxlPvEziixlvZZ7Mwuu+ziGZb3c6vlXguhXBqjAb8EXIaI
/NjIyYSAwfD3z2mojAJHm5EUBsasdQhnF4AO5ukUYvi1Ecm2oEnoIJF5Sbrfj+Uj
zD8SOTU+Yg2+iXQunvAOQpH/W3damWqxq+d5+cYUNe+eCHwtN5meEm00vwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA7q+MieD497+4fxRpp4TcKwP5mJMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvRHVyNHlKNFBqM3Y3aF9GR21uaE53ckFfbVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXrgkAwQA
XrgpMA0GCSqGSIb3DQEBCwUAA4IBAQBPS1CuA4AEYSZ6izCnMu/5kl58eRaO/q8c
n2leDWz6WWbLcIsGXWjvoUoQ5w5dNr9iUYq7Q78dBiDKa4u3KIMrVEueaWFod2eP
5FG//cD98JY0QkaETvFRfMK2qlqPGrcNcxCxL0U2J5dFreCtvdHIIC2+RJHajepI
4LWlHA1FWOfxEAjLUDpaFi66bR6/YmEA5twkmjzDBE1iW96LpFJrZ/An/pLa/Hu5
M74YWMwXr+ZWqS4WJHzR98rJkMDCCO16nhDheKEEtmzCvwZuYk0qPwDfYH87WDix
z+gTneWKYXxznm14xiI7N5VHp3llXO6KtlSfQccD88vNx3x0vbRW
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:53 2026 by rpki-client