Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/DaA_4Jlo0vCjiqyQ9Zy7aoC9TDs.roa
File: DaA_4Jlo0vCjiqyQ9Zy7aoC9TDs.roa (raw, json)
Hash identifier: xtXG2aAxB/H8VWm8zgz3IAcnfc0DerNKgS8NAIUzC58=
Subject key identifier: 0D:A0:3F:E0:99:68:D2:F0:A3:8A:AC:90:F5:9C:BB:6A:80:BD:4C:3B
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 019F2368711D4650F4EEE451C6B370F23717
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/DaA_4Jlo0vCjiqyQ9Zy7aoC9TDs.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38930
IP address blocks: 94.75.196.0/24 maxlen: 24
2001:1af8:4410::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:71:1d:46:50:f4:ee:e4:51:c6:b3:70:f2:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0da03fe09968d2f0a38aac90f59cbb6a80bd4c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:d3:22:67:68:02:9e:a1:5b:d1:10:40:ad:
6e:50:fe:0f:43:7a:48:04:20:35:23:23:0d:57:24:
d8:94:30:7a:0d:0f:f6:08:51:01:b6:9c:d4:6d:a2:
8d:a2:41:5b:b9:39:55:99:2f:56:7d:eb:cd:69:3f:
0d:15:ad:58:99:c4:b5:40:59:1f:76:1d:1b:77:0d:
12:f1:48:d0:6d:e6:8e:84:36:21:48:3d:d0:e2:78:
d9:6a:f5:ad:7d:ff:b7:a1:57:23:13:6a:48:8a:bf:
a1:a5:e8:7c:a7:12:6f:3c:9a:e3:aa:d1:2f:f7:80:
f2:26:09:68:e7:a7:3a:a9:d9:e9:65:e6:29:86:c9:
9e:f8:f2:6e:14:81:ac:9c:8b:a0:86:d3:ad:14:6b:
24:0d:34:75:76:61:a2:f1:9b:a4:af:83:ed:97:66:
de:d7:44:8e:cb:da:26:41:00:b5:6e:ba:5c:64:39:
75:84:b2:70:8e:b5:1a:43:0b:0e:23:4c:d0:55:6a:
15:e5:42:5b:38:10:f7:9d:2b:58:17:bf:51:ce:ef:
c5:a7:9e:10:37:ad:68:14:44:8b:a2:9e:4a:3b:1d:
31:99:0a:86:f3:23:7b:60:cf:f4:b8:89:9b:08:19:
8c:89:48:c2:0f:2d:14:00:2d:47:0e:62:2e:1b:62:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:3F:E0:99:68:D2:F0:A3:8A:AC:90:F5:9C:BB:6A:80:BD:4C:3B
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/DaA_4Jlo0vCjiqyQ9Zy7aoC9TDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.75.196.0/24
IPv6:
2001:1af8:4410::/48
Signature Algorithm: sha256WithRSAEncryption
af:31:80:a9:02:fe:45:2a:79:13:80:66:59:71:8a:ea:2e:f3:
f9:10:0e:d6:38:a3:3b:8e:85:ca:0d:e1:65:9a:00:82:ab:1d:
49:40:0b:d6:7a:b0:35:5b:34:4d:d0:22:d8:0e:9f:c1:e3:14:
64:8c:da:df:f3:ea:40:5c:ea:47:c5:10:6d:45:10:ce:fc:0c:
6f:f5:c1:07:fe:05:50:f4:46:a6:9d:bb:e8:41:76:83:ea:9c:
91:6e:13:04:ca:94:3b:ee:44:32:e0:3f:a2:f0:60:ad:23:77:
c7:72:de:7f:0c:49:de:3c:f7:35:22:8a:03:42:ea:12:67:fe:
cc:88:69:f9:ea:7f:5e:e2:0e:b5:de:29:6e:ff:95:da:5d:ad:
8e:68:f3:90:99:82:71:93:fa:8e:8d:33:a3:c0:a0:d0:c7:5c:
d7:de:ca:5d:ba:53:68:08:3e:29:06:01:5b:61:97:6c:8c:8d:
c8:03:af:54:16:c6:2b:8c:ef:e2:3d:ed:c1:26:5b:b9:78:76:
88:f8:ac:08:dc:6b:21:61:48:80:5e:07:74:c2:20:78:33:dd:
a4:4e:b3:94:65:16:47:b0:53:92:ea:33:2f:bb:55:7b:1b:87:
92:03:45:85:6c:a3:f5:9b:ee:c5:85:f3:bf:9f:f5:2b:96:45:
ea:4d:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:26 2026 by rpki-client