Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/D3mBuI6UymwrxIQPCiIX68sZqjA.roa
File: D3mBuI6UymwrxIQPCiIX68sZqjA.roa (raw, json)
Hash identifier: 01jsIsFDXvlNvLuUSn6GNUOI+BUbqYbHMa4VSoVg2jQ=
Subject key identifier: 0F:79:81:B8:8E:94:CA:6C:2B:C4:84:0F:0A:22:17:EB:CB:19:AA:30
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A133D76DFF03616EF27A674E7E8A61E276
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/D3mBuI6UymwrxIQPCiIX68sZqjA.roa
Signing time: Tue 13 Oct 2026 05:58:38 +0000
ROA not before: Tue 13 Oct 2026 05:58:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 80.71.231.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
81.29.148.0/24 maxlen: 24
81.29.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d7:6d:ff:03:61:6e:f2:7a:67:4e:7e:8a:61:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 13 05:58:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f7981b88e94ca6c2bc4840f0a2217ebcb19aa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:fe:77:e5:ef:84:af:6d:ab:e9:bb:2b:ce:
36:e5:b5:15:e8:f6:3d:18:88:ed:28:69:77:43:31:
65:1e:05:2d:cf:cf:92:ec:a7:81:5c:54:10:45:40:
e0:64:03:6c:0b:db:23:0e:69:e1:f7:42:ba:91:f2:
16:d5:39:03:a1:0a:08:9f:a8:d6:77:92:e1:70:18:
e9:e1:74:0b:a6:c4:70:c2:b7:35:37:2f:c2:27:bb:
e9:8f:7f:61:01:c3:68:04:93:84:f3:05:ac:9a:db:
d4:2a:81:17:38:ec:10:d0:ac:ca:dd:4b:1b:c4:c5:
11:65:3b:da:59:73:ab:74:c1:d0:6d:7c:73:8b:f9:
dd:a0:23:68:78:75:bc:06:06:f7:4e:df:1d:c6:4f:
b9:5f:fb:fb:e7:0f:f0:99:62:00:5b:49:5d:3a:07:
5d:ef:00:d4:1b:61:3f:ac:1a:1c:17:d7:bd:8a:f5:
d6:9b:df:8f:e7:06:12:91:4b:c6:8e:b3:2b:23:c6:
85:4a:d7:a9:2d:2d:12:a5:56:42:4e:f9:59:07:20:
10:d6:81:97:f5:5f:ab:8b:0f:99:44:48:45:e2:8f:
23:7e:10:72:15:80:7e:c3:0b:2d:48:dc:fb:6a:ee:
e5:72:c6:b7:ba:d7:0e:af:77:ce:52:e9:c0:f8:90:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:81:B8:8E:94:CA:6C:2B:C4:84:0F:0A:22:17:EB:CB:19:AA:30
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/D3mBuI6UymwrxIQPCiIX68sZqjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
80.71.238.0/24
81.29.148.0/24
81.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
31:75:3f:77:6a:f7:ee:9d:16:fb:3b:9c:96:15:21:99:0f:4d:
a7:14:0d:8c:7d:7b:0c:a5:22:92:b5:8f:ee:b0:1f:e9:07:f8:
87:66:e7:84:28:ff:c1:cd:12:e7:e7:93:25:c0:9f:64:c6:2c:
3e:64:63:41:60:15:8a:8b:32:d0:5d:83:56:00:80:3f:a3:13:
26:6b:12:7a:8f:9e:d6:2c:ef:22:4e:04:b6:88:d9:92:51:c9:
10:b2:69:be:56:5e:15:0c:64:5a:95:66:93:59:5d:6a:d2:c2:
6d:ea:a1:90:fc:88:2c:bc:0f:5b:c4:66:4c:aa:01:75:c8:d7:
c3:c8:a8:c3:46:14:71:f7:18:57:b3:97:58:29:72:cd:d9:7d:
76:cf:7d:e7:55:26:c6:d1:db:f5:2f:90:b3:2a:ba:a9:ae:cf:
6c:12:45:d8:49:8d:af:0d:59:1f:03:47:33:db:bb:5b:c6:70:
12:e5:6a:ad:db:28:6e:ba:f9:23:64:f2:a7:68:86:fe:5b:46:
9b:c8:52:61:d3:fb:74:0c:ce:ca:85:ea:36:2c:7f:c2:5d:32:
fc:37:61:3b:4a:96:73:95:0a:19:58:5d:a0:14:39:04:0f:cf:
54:12:d1:82:ab:13:7d:e2:75:93:ec:c4:1c:de:fb:61:d7:5c:
ee:a3:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 16:11:41 2026 by rpki-client