Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa
File: dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa (raw, json)
Hash identifier: wDNh4iJtkmG2Tv4fXnbCCR59EatzQ/W+vho/keWCSrQ=
Subject key identifier: 74:C5:2C:78:38:C1:E1:59:B8:F9:06:8D:40:A1:03:56:93:1B:30:C0
Certificate issuer: /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial: 019F2368ABD9581C14A39404957CDB60CFF2
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132335
IP address blocks: 188.208.140.0/24 maxlen: 24
188.208.141.0/24 maxlen: 24
188.241.62.0/24 maxlen: 24
188.241.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:d9:58:1c:14:a3:94:04:95:7c:db:60:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74c52c7838c1e159b8f9068d40a10356931b30c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:9e:94:43:db:16:e7:bb:4b:6a:8c:a0:d4:
ec:cd:61:63:e0:34:47:a1:74:32:34:94:79:81:27:
b3:8e:00:28:cd:9a:03:c5:3f:a0:68:c4:83:57:12:
ca:03:c7:1a:83:c0:01:c2:9f:71:c6:2e:c0:49:52:
3e:ea:7f:4c:4d:53:a0:d7:70:41:03:f8:d2:a8:9c:
0a:7f:28:50:af:13:74:a9:53:bf:29:a5:5d:4a:1c:
26:1f:fa:8d:a6:0d:4a:e7:d8:05:da:85:0d:16:89:
bb:d2:65:19:d1:00:bd:0b:04:44:2c:8c:1e:d2:fd:
6f:9d:44:0b:7e:35:1c:1e:04:8d:c9:16:d8:1a:04:
fd:7a:8c:cd:dd:f4:f3:9b:c5:1b:f8:13:43:1b:03:
e0:3e:3b:1f:fa:88:d5:51:85:f9:18:c9:13:c5:4f:
f0:92:e1:02:ed:ec:51:1e:a2:90:6d:af:89:64:97:
30:85:93:40:c1:4a:2d:06:63:5a:d0:f9:42:d5:f4:
06:02:8d:11:59:ea:1f:dd:98:6c:09:6d:57:f8:59:
2a:81:8a:60:7e:b9:8f:2a:35:95:5d:96:2d:ee:87:
58:48:0b:6a:22:d8:31:44:02:d8:28:ef:4d:4d:16:
53:96:3b:af:bb:70:43:b5:4f:b6:8c:eb:55:5c:40:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:2C:78:38:C1:E1:59:B8:F9:06:8D:40:A1:03:56:93:1B:30:C0
X509v3 Authority Key Identifier:
keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.140.0/23
188.241.62.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:71:df:52:ad:6a:49:19:47:e3:0e:69:4c:f1:2c:7e:c3:97:
0a:03:42:15:f9:cf:28:64:30:9d:d5:f0:92:0a:bf:51:8b:32:
33:6f:1e:a9:e5:40:8e:d1:1d:11:5e:90:93:de:43:b7:df:fd:
36:3e:6a:52:f4:b6:51:d2:fe:63:54:69:ab:cf:2b:18:b8:66:
56:4a:e3:e7:1f:e9:d2:82:e0:50:51:d8:d0:c5:72:5e:e8:7a:
a1:6a:f4:f1:14:69:15:44:6f:0f:cc:fd:ac:b3:c1:6a:ca:16:
7c:28:49:53:25:9c:fc:73:67:f2:9c:02:9f:06:db:79:82:37:
23:c3:c2:0f:56:78:17:0a:78:75:28:0b:96:2c:7d:0e:5d:af:
b3:4f:d5:24:f1:90:69:7e:88:31:22:80:33:68:b5:e2:62:f8:
d9:29:a4:17:8f:76:9b:54:f3:24:da:0c:20:86:91:22:00:4c:
71:77:ae:dc:19:5e:c9:f1:e9:d4:0c:2a:a8:b4:39:bd:14:b8:
27:ed:01:c6:45:80:78:cd:53:58:47:0a:84:de:50:1e:55:ce:
2b:f3:03:1d:8b:b5:67:2b:e7:b5:1a:12:dd:46:9d:47:89:f3:
d3:e7:e4:d7:a8:7c:26:90:ea:a7:8c:ed:2b:0e:f6:d7:7a:4f:
5c:51:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:17 2026 by rpki-client