Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DfvjL4j67bdK_Y9b5FgFPIone28.roa
File: DfvjL4j67bdK_Y9b5FgFPIone28.roa (raw, json)
Hash identifier: DN0b0r0SCmON5lI1iJgQyiyDVOyUq2JE0Aw4+3S588A=
Subject key identifier: 0D:FB:E3:2F:88:FA:ED:B7:4A:FD:8F:5B:E4:58:05:3C:8A:27:7B:6F
Certificate issuer: /CN=0ee592621d18309312c014c1122d94a4211fa82b
Certificate serial: 01A016A109F9EBBB7CAB627DF406269BA8AC
Authority key identifier: 0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DfvjL4j67bdK_Y9b5FgFPIone28.roa
Signing time: Tue 18 Aug 2026 20:47:27 +0000
ROA not before: Tue 18 Aug 2026 20:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219359
IP address blocks: 132.243.186.0/24 maxlen: 24
132.243.187.0/24 maxlen: 24
157.228.64.0/21 maxlen: 24
185.113.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:a1:09:f9:eb:bb:7c:ab:62:7d:f4:06:26:9b:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee592621d18309312c014c1122d94a4211fa82b
Validity
Not Before: Aug 18 20:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dfbe32f88faedb74afd8f5be458053c8a277b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:e5:0c:92:46:b6:09:51:85:5d:c7:30:f6:
22:cd:b3:fd:98:84:41:64:d4:0d:7a:01:d2:0a:e8:
96:04:b0:48:39:c5:cd:4c:56:3f:d2:fa:f0:bd:e5:
0d:e7:9b:8c:43:47:22:21:90:67:7e:19:d3:cc:8f:
b7:a8:f7:cf:7e:aa:fd:f4:34:f1:b5:ef:94:54:76:
4f:5b:45:cf:88:6a:0d:14:f5:23:e5:9a:92:23:58:
1c:dd:c2:08:77:44:8a:36:5a:bf:0b:e5:53:08:72:
8b:36:69:c5:2e:22:ed:e3:42:fb:af:b4:76:f7:fd:
a2:a8:0d:55:a3:f9:f6:f4:79:22:57:1a:0f:5d:4a:
b7:30:3f:e6:38:29:2b:1a:ed:a2:6f:c4:0e:07:87:
51:a2:07:e7:86:43:fb:22:38:5f:c6:1e:4b:62:07:
39:7f:fc:1e:6f:0e:9e:63:a2:9a:86:de:fe:b5:85:
6c:98:42:da:b5:19:91:0b:db:de:89:4e:6b:f3:a7:
b1:2c:4c:6e:98:d2:df:d9:58:62:b1:be:72:fa:6f:
12:b0:65:70:31:f6:00:7e:0c:91:7e:1a:1b:e2:a2:
11:63:2b:a1:eb:a9:05:0b:9e:b2:1c:9b:07:43:bf:
50:eb:8b:28:8d:99:fa:62:22:54:0c:32:8c:2a:01:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FB:E3:2F:88:FA:ED:B7:4A:FD:8F:5B:E4:58:05:3C:8A:27:7B:6F
X509v3 Authority Key Identifier:
keyid:0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DfvjL4j67bdK_Y9b5FgFPIone28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.186.0/23
157.228.64.0/21
185.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
24:57:3b:e2:76:8e:88:6b:f1:b5:70:f7:ee:61:cd:1d:66:99:
28:4f:83:e5:48:56:cf:35:dc:84:9a:95:46:3a:7f:40:cd:ad:
81:af:ea:8c:7c:78:29:50:1b:13:7a:4c:80:ec:38:c3:64:52:
de:b4:4b:f2:11:ba:54:d6:d2:3f:1a:2c:aa:49:26:fe:5a:f7:
44:61:b7:30:14:ea:43:e3:7e:fb:68:30:2a:46:45:49:ab:e6:
05:9a:7b:d8:ac:18:7d:ab:7d:fc:b3:68:59:64:a2:34:ea:7d:
2f:fc:f3:53:59:8c:0e:36:c4:31:1a:0e:7b:1e:9c:35:6c:cb:
ed:20:14:54:2a:07:4d:f9:93:61:aa:6d:21:61:6a:3f:da:92:
f8:87:47:5d:da:03:40:11:6c:4c:72:d1:a5:a8:e5:46:ca:96:
15:02:a3:d8:36:9e:3a:a9:27:8e:51:39:dd:96:ac:b8:3d:a5:
cc:65:d0:df:3f:e4:e5:05:34:24:20:f3:5b:24:d8:71:54:5e:
6f:61:6b:d4:7e:0f:12:fa:43:ae:b0:c2:36:ad:5c:32:c1:cd:
9e:51:7a:e0:c5:0d:d8:4f:04:17:92:22:9c:ed:e2:3b:f4:0d:
a2:79:9c:a3:ea:1b:ab:55:73:2f:db:8a:0d:42:ad:2f:91:5e:
0c:dd:60:4a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAWoQn567t8q2J99AYmm6isMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTU5MjYyMWQxODMwOTMxMmMwMTRjMTEyMmQ5NGE0MjEx
ZmE4MmIwHhcNMjYwODE4MjA0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGZiZTMyZjg4ZmFlZGI3NGFmZDhmNWJlNDU4MDUzYzhhMjc3YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjPlDJJGtglRhV3HMPYizbP9mIRB
ZNQNegHSCuiWBLBIOcXNTFY/0vrwveUN55uMQ0ciIZBnfhnTzI+3qPfPfqr99DTx
te+UVHZPW0XPiGoNFPUj5ZqSI1gc3cIId0SKNlq/C+VTCHKLNmnFLiLt40L7r7R2
9/2iqA1Vo/n29HkiVxoPXUq3MD/mOCkrGu2ib8QOB4dRogfnhkP7Ijhfxh5LYgc5
f/webw6eY6Kaht7+tYVsmELatRmRC9veiU5r86exLExumNLf2Vhisb5y+m8SsGVw
MfYAfgyRfhob4qIRYyuh66kFC56yHJsHQ79Q64sojZn6YiJUDDKMKgGsTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA374y+I+u23Sv2PW+RYBTyKJ3tvMB8GA1UdIwQY
MBaAFA7lkmIdGDCTEsAUwRItlKQhH6grMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mOTQyYTEtYzAwNC00NDg0LWJjMWQt
NmI4NTgyMDliNWVlLzEvRGZ2akw0ajY3YmRLX1k5YjVGZ0ZQSW9uZTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mOTQyYTEtYzAwNC00NDg0LWJjMWQtNmI4NTgyMDliNWVl
LzEvRHVXU1loMFlNSk1Td0JUQkVpMlVwQ0VmcUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBhPO6AwQD
neRAAwQAuXEIMA0GCSqGSIb3DQEBCwUAA4IBAQAkVzvido6Ia/G1cPfuYc0dZpko
T4PlSFbPNdyEmpVGOn9Aza2Br+qMfHgpUBsTekyA7DjDZFLetEvyEbpU1tI/Giyq
SSb+WvdEYbcwFOpD4377aDAqRkVJq+YFmnvYrBh9q338s2hZZKI06n0v/PNTWYwO
NsQxGg57Hpw1bMvtIBRUKgdN+ZNhqm0hYWo/2pL4h0dd2gNAEWxMctGlqOVGypYV
AqPYNp46qSeOUTndlqy4PaXMZdDfP+TlBTQkIPNbJNhxVF5vYWvUfg8S+kOusMI2
rVwywc2eUXrgxQ3YTwQXkiKc7eI79A2ieZyj6hurVXMv24oNQq0vkV4M3WBK
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:14 2026 by rpki-client