Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/dUzsM6a19GkdNIFlIA4P-4ydvho.roa
File: dUzsM6a19GkdNIFlIA4P-4ydvho.roa (raw, json)
Hash identifier: uiC0tqNUZz32Kx4oM8PGGqs16V38TxlgadgXl3+nxY8=
Subject key identifier: 75:4C:EC:33:A6:B5:F4:69:1D:34:81:65:20:0E:0F:FB:8C:9D:BE:1A
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 019EFA897C9E6B966755D052CC39B671B034
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/dUzsM6a19GkdNIFlIA4P-4ydvho.roa
Signing time: Wed 24 Jun 2026 16:49:34 +0000
ROA not before: Wed 24 Jun 2026 16:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 101.61.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:89:7c:9e:6b:96:67:55:d0:52:cc:39:b6:71:b0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Jun 24 16:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=754cec33a6b5f4691d348165200e0ffb8c9dbe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:bb:3f:27:82:59:ff:d8:e7:52:12:e6:4b:
08:74:8a:1a:7a:2e:0c:33:fa:aa:3f:5a:cf:d8:e6:
87:6d:2b:a9:57:14:f2:f8:e5:0b:80:7c:f9:7f:f3:
2c:3c:b8:43:d1:21:bb:44:cb:a9:79:f9:a3:18:2a:
16:a9:6a:bc:5a:de:b3:d2:cc:4b:22:1e:07:78:1d:
51:4b:8a:b3:c7:01:84:1d:51:8c:87:97:10:b0:9f:
18:e0:c7:b7:cd:6e:01:e8:ec:50:1b:d7:e3:28:ac:
75:b3:eb:de:87:a3:3a:d4:6c:f6:67:ef:81:0a:4d:
e9:19:2e:17:99:4f:c0:aa:e6:17:65:07:95:2e:34:
e7:73:76:e6:bd:2d:d6:7b:47:4e:75:ad:a3:a8:2f:
63:4b:62:b1:8d:9d:f5:15:0b:19:39:f7:89:7b:14:
59:39:a9:7e:4a:b6:ec:c2:99:63:63:a2:20:9e:bb:
99:20:62:9a:49:cd:e0:ba:ec:48:a5:85:4b:3d:5a:
bf:52:a4:a5:0e:3a:7d:b9:a8:5f:a6:e0:cd:00:b6:
40:da:4d:ef:72:a3:cc:1c:9b:49:74:d6:10:cf:47:
02:a4:1b:10:02:1b:cc:4c:3c:12:82:f9:46:17:f2:
53:76:dc:d8:6d:77:78:37:e8:34:9a:4f:33:ae:b2:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4C:EC:33:A6:B5:F4:69:1D:34:81:65:20:0E:0F:FB:8C:9D:BE:1A
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/dUzsM6a19GkdNIFlIA4P-4ydvho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.61.255.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2b:73:4d:49:73:8b:21:da:8e:1e:3f:0d:7d:6b:f5:f5:b1:
8d:8d:ca:0f:28:65:86:2c:41:8e:19:7b:7e:64:95:d6:da:6f:
a8:39:cb:37:4b:a5:7c:c8:4a:c9:56:5f:1b:a3:cb:43:dc:64:
6b:78:50:c1:f6:43:5e:28:69:5b:79:9b:50:40:03:d0:8a:be:
24:3a:53:c9:44:3a:1d:5c:f6:12:6d:b1:83:51:17:ca:42:20:
99:78:ce:f0:8c:7a:84:27:7b:2c:cb:77:ab:64:56:4d:6a:7f:
aa:46:f8:58:a1:03:44:84:88:b2:bb:9e:44:92:b2:52:eb:a1:
e0:34:98:0e:82:d4:39:fa:d5:77:3f:09:b7:41:4f:cb:df:8e:
b9:f8:e6:49:f5:90:ae:d7:ea:3a:05:ed:80:b8:6f:95:eb:89:
3f:fc:20:e1:7e:59:37:e5:09:0a:d8:4b:d1:f0:4e:b1:0e:1f:
55:6f:37:7c:91:12:55:0e:cb:e9:1c:43:44:bc:82:8d:e0:c1:
93:b8:80:4a:58:9f:d4:29:cd:85:6f:31:71:4a:2c:67:15:04:
da:e4:b6:75:85:45:36:37:45:44:45:74:d5:c9:d9:63:a2:fa:
90:c1:be:29:a7:b5:00:4f:03:0c:58:36:eb:71:3d:f8:0a:f5:
56:84:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client