Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/dyDzo4hJpiTRaDDet0X08ugGcJY.roa
File: dyDzo4hJpiTRaDDet0X08ugGcJY.roa (raw, json)
Hash identifier: TrJJ2ymhBJH4iJ3ySQQImWyU/QJE/0OV+6/09+ugceI=
Subject key identifier: 77:20:F3:A3:88:49:A6:24:D1:68:30:DE:B7:45:F4:F2:E8:06:70:96
Certificate issuer: /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Certificate serial: 01A01BCA25319536810012AD55F4218894F4
Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/dyDzo4hJpiTRaDDet0X08ugGcJY.roa
Signing time: Wed 19 Aug 2026 20:50:27 +0000
ROA not before: Wed 19 Aug 2026 20:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204285
IP address blocks: 185.254.116.0/23 maxlen: 23
185.254.116.0/24 maxlen: 24
185.254.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:ca:25:31:95:36:81:00:12:ad:55:f4:21:88:94:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Validity
Not Before: Aug 19 20:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7720f3a38849a624d16830deb745f4f2e8067096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:47:97:d9:e1:3a:84:33:d7:e2:b8:e3:84:
61:3c:dc:10:50:cf:73:f1:54:f6:43:39:83:7f:0d:
72:bf:15:a3:cf:55:1d:42:03:0c:b2:87:c4:4d:51:
1d:80:50:25:3b:3d:e7:fc:8d:87:74:1e:62:2d:78:
87:5d:34:56:a9:93:60:ac:80:3d:16:fa:c5:a1:af:
04:d8:0e:0a:5b:b7:80:a3:75:7a:4d:f5:db:db:eb:
ee:ac:c6:0a:90:09:ca:ea:31:fc:53:05:df:88:9c:
c5:99:74:60:e0:80:f7:1a:e6:b1:41:cd:b9:29:ee:
ce:60:d4:3a:e1:30:15:42:32:39:2a:83:64:09:43:
0b:3c:e9:05:31:3f:ef:5c:28:ee:2c:39:91:7e:cc:
e6:9e:1f:e8:b0:22:df:cc:75:96:6b:c9:b9:b7:87:
a4:1d:a7:7d:38:45:99:d3:78:79:98:49:c2:9b:79:
6b:8b:ab:53:76:f9:c1:17:f9:3a:ab:cc:91:35:c7:
2b:2a:6d:39:24:d6:16:0d:50:69:ee:fd:0f:41:f1:
fb:74:3c:fd:dd:ac:aa:09:69:72:52:f5:fd:36:c6:
aa:42:fa:a7:e9:16:35:45:85:a9:d1:51:9f:97:5d:
ba:f3:29:bc:7e:6f:b4:8a:a6:1b:f3:df:f7:7f:54:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:20:F3:A3:88:49:A6:24:D1:68:30:DE:B7:45:F4:F2:E8:06:70:96
X509v3 Authority Key Identifier:
keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/dyDzo4hJpiTRaDDet0X08ugGcJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.116.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:20:67:47:e8:db:08:07:4c:46:02:62:2b:e6:e6:c1:8f:8c:
18:67:0f:ab:f4:06:6d:12:21:de:a3:93:ea:7f:43:bc:23:19:
fb:45:f1:c1:4c:b8:47:fc:22:0c:17:22:c6:74:31:d7:13:35:
f3:23:d6:65:4d:36:76:12:fe:12:ef:f7:e0:98:23:1a:03:5e:
bb:1c:f9:02:6a:29:92:3c:2d:dd:60:22:21:55:30:39:3a:b2:
18:ab:cd:89:12:a4:3c:48:ff:69:67:a6:b7:21:c7:f8:92:f3:
63:e1:b5:53:86:be:61:e6:92:ab:2c:8d:ba:21:47:13:6f:2a:
35:43:0d:3e:5a:25:8c:8e:8c:e1:d1:62:55:bf:84:33:75:6a:
63:67:33:f0:ef:e7:ac:e6:8a:f2:65:93:43:25:66:7a:00:d5:
b3:c5:93:e9:87:8c:4e:b8:08:be:e8:7e:8e:ea:be:36:e0:59:
89:3f:31:f8:ad:31:1d:e0:9d:f7:4f:86:e8:a5:64:92:9e:1f:
38:d9:e3:8e:06:c0:e8:ac:63:f5:9b:87:0b:e7:40:62:f8:c1:
2d:e2:00:e5:05:de:44:56:ec:05:0d:a6:82:52:1f:e9:dc:38:
25:3f:ec:38:53:0e:1d:29:8f:0b:e8:71:1a:06:83:ed:34:10:
5b:25:46:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:10:28 2026 by rpki-client