Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa
File: Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa (raw, json)
Hash identifier: 4cS0yJGa1qGXptqnTWuUTKBWN0RvY+fjOJv3AFlspyE=
Subject key identifier: 0D:B7:B5:EF:E4:D8:D0:08:FA:E4:F6:CA:20:D2:29:30:15:7D:64:4B
Certificate issuer: /CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Certificate serial: 019F8A2BC64765247DD7E22A75B9C117064F
Authority key identifier: 15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa
Signing time: Wed 22 Jul 2026 14:12:32 +0000
ROA not before: Wed 22 Jul 2026 14:12:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 134.1.0.0/16 maxlen: 16
139.75.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:2b:c6:47:65:24:7d:d7:e2:2a:75:b9:c1:17:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Validity
Not Before: Jul 22 14:12:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0db7b5efe4d8d008fae4f6ca20d22930157d644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:8b:07:4d:2a:0d:d1:e8:b1:1b:c7:91:68:
27:14:d5:cb:e4:a1:48:d3:c8:a8:38:b3:57:fb:05:
af:64:fb:4d:fc:d0:00:5a:bc:88:89:08:69:97:30:
22:b2:e1:c7:bc:62:b4:b2:8d:2b:fd:1b:68:4f:58:
93:0a:a7:62:af:03:96:59:bf:da:92:f3:f6:cb:d3:
2c:41:07:95:05:f9:ec:29:37:f7:a4:6d:52:6c:94:
db:06:31:b9:fb:a0:1d:e6:14:61:98:a4:b7:1f:14:
70:81:9d:82:25:c0:f6:d5:42:18:a7:a4:ed:40:51:
84:06:19:fd:72:1d:bb:6c:fe:6a:95:8e:96:8f:e4:
82:3f:72:ba:a3:4e:ca:cc:3f:f7:ec:51:93:2b:28:
e4:95:15:79:ac:dc:8d:19:ba:27:05:7a:09:88:b6:
3c:4b:47:9f:24:44:d0:c8:27:30:b0:36:69:27:22:
28:3e:5c:ec:5e:a4:3d:67:76:2e:d1:db:a4:a7:6d:
bf:85:68:c4:6b:02:6f:36:c5:93:a5:69:a9:d5:5c:
5a:5b:4f:87:76:8f:30:d9:b5:52:55:99:a4:f4:2e:
d7:89:1c:9e:ad:7c:28:c9:1c:bf:d3:b7:b7:7e:12:
eb:00:91:e8:b0:b2:d9:7e:ed:8e:2b:8a:76:e3:c4:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:B5:EF:E4:D8:D0:08:FA:E4:F6:CA:20:D2:29:30:15:7D:64:4B
X509v3 Authority Key Identifier:
keyid:15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.1.0.0/16
139.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:72:d5:04:24:aa:61:74:dd:79:1d:84:45:f8:12:62:4a:65:
2f:f8:61:7e:08:9a:ac:8c:e1:d5:ca:71:de:d4:75:fc:08:44:
28:05:9f:a9:a3:33:3f:47:38:a1:86:61:18:ed:08:f6:c4:34:
39:fc:9e:29:cf:2e:49:25:27:49:d0:43:2f:42:cd:e4:b7:0e:
fb:86:f4:f5:04:5d:69:88:2c:b8:99:dc:6d:c8:72:43:1e:86:
55:a8:53:2c:05:4c:00:60:c1:d6:1a:95:0a:fb:53:2d:e9:b8:
fb:99:a0:c4:8f:10:c2:59:ce:d2:22:8b:49:85:0f:e5:9f:03:
42:78:17:53:25:15:8c:4d:95:b0:7c:2a:48:b2:4f:29:ee:51:
e0:fc:f0:8b:31:f1:ea:83:1b:0d:bc:22:e7:da:10:4d:6f:6b:
14:fd:b4:b9:33:2e:f9:68:78:0d:f1:21:d6:8c:74:f9:d8:b2:
65:56:81:44:ce:81:5e:19:ec:85:b5:bc:3c:bf:d8:ff:7e:ef:
fd:b2:a7:e2:c0:0d:7c:ad:45:15:13:7e:3f:e6:03:c9:35:9e:
f0:51:34:49:d6:66:b0:39:4e:83:d6:13:6a:33:35:e5:58:3a:
07:c6:c1:ab:c9:f1:5b:b6:85:be:ac:67:7e:fd:82:fa:3a:24:
d7:60:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:53 2026 by rpki-client