Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/DHzYL8I4u0AFjHMFJ3e9rEcOow4.roa
File: DHzYL8I4u0AFjHMFJ3e9rEcOow4.roa (raw, json)
Hash identifier: mR6nfTR8cZiRWZPRuAV1YjXnkteK2NrUkG0hEmaxhc4=
Subject key identifier: 0C:7C:D8:2F:C2:38:BB:40:05:8C:73:05:27:77:BD:AC:47:0E:A3:0E
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019EEEBEAAEC08CB2BBDE08EAAC255B536AD
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/DHzYL8I4u0AFjHMFJ3e9rEcOow4.roa
Signing time: Mon 22 Jun 2026 09:52:13 +0000
ROA not before: Mon 22 Jun 2026 09:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201345
IP address blocks: 2a10:fa81:500::/40 maxlen: 40
2a10:fa81:580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:be:aa:ec:08:cb:2b:bd:e0:8e:aa:c2:55:b5:36:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 22 09:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c7cd82fc238bb40058c73052777bdac470ea30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:96:2f:2c:b2:65:19:50:f0:a3:4b:5d:47:
21:cc:22:6a:3d:a8:37:52:6f:e7:55:25:35:8a:9d:
55:41:a3:2c:ea:8d:68:62:bd:81:a8:53:aa:58:c9:
d7:5a:a7:21:e3:4b:64:b0:3e:f3:9e:89:29:8c:cc:
9a:a0:8c:fc:86:6b:9c:a8:2d:b0:2c:49:e3:75:88:
30:52:28:c7:44:72:c4:8e:fe:30:e3:cf:54:46:9e:
0f:cd:9b:f5:d5:53:43:2a:b1:38:69:79:11:1b:a4:
1a:47:31:09:56:70:5c:a3:d8:3f:65:53:12:ad:96:
fd:e4:56:97:12:0a:0a:08:72:0c:fa:1e:77:f5:79:
12:c2:ab:94:27:90:5f:56:78:b4:71:a7:8a:db:e8:
cc:9d:9e:70:a2:12:a1:f8:96:37:f8:37:24:fc:2b:
5a:f7:c4:50:32:56:2e:44:cb:13:d1:4e:de:ac:a2:
92:a5:65:06:f3:24:74:fa:32:7d:ee:86:a7:00:4c:
67:36:92:a5:09:89:b6:eb:e7:ce:9a:54:96:69:13:
09:d3:d9:58:35:ff:20:9c:cb:01:ed:ea:47:77:bb:
27:1a:04:37:d0:67:e1:ee:d9:ba:84:92:85:c6:3a:
f7:71:02:ce:df:a6:37:aa:dd:7b:7d:20:02:78:1d:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:D8:2F:C2:38:BB:40:05:8C:73:05:27:77:BD:AC:47:0E:A3:0E
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/DHzYL8I4u0AFjHMFJ3e9rEcOow4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:500::/40
Signature Algorithm: sha256WithRSAEncryption
78:ac:db:f8:95:37:3f:61:f6:c0:38:d0:68:6c:1e:f6:a4:55:
44:81:30:ec:ac:e5:0d:8c:08:9e:52:c9:19:32:78:49:21:c9:
bf:d2:02:a8:dd:36:4c:07:a8:1f:83:5b:0d:29:8e:b7:52:22:
c7:b6:ee:eb:da:45:d7:35:d3:2e:bd:4d:0d:6a:f9:66:b1:5e:
6e:e1:a8:7c:dc:a9:ee:9e:3e:6b:3b:9e:3a:da:79:65:4e:7e:
c8:af:6a:99:91:fc:d4:a2:7f:13:0c:4a:13:17:d2:d0:7d:00:
7e:84:f4:37:01:a1:7a:e0:7d:fe:80:c7:5c:44:9a:56:ec:0e:
e0:a4:85:3f:ad:aa:01:41:35:32:b0:56:f2:4c:d2:47:ce:58:
06:60:a4:05:07:11:55:4c:5a:bd:f3:38:b9:23:9d:9e:9e:85:
87:02:da:64:fe:31:fc:ce:a4:89:18:91:aa:0e:70:05:d9:f6:
1b:44:64:90:b5:3e:83:11:79:d7:66:6e:a7:a4:47:98:c7:39:
aa:76:d6:f0:22:e6:d9:a2:62:0e:5a:af:00:76:7c:ed:12:af:
6d:c3:49:37:18:aa:62:ed:d3:f3:fe:fc:ea:e2:af:4f:b1:0d:
87:93:14:b2:a0:4c:bb:87:0c:dd:14:06:39:5c:21:c2:b3:b1:
35:dd:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:43:31 2026 by rpki-client