Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/dbhJ2mgiwrEXRHzGR6WxaKNKqQI.roa
File: dbhJ2mgiwrEXRHzGR6WxaKNKqQI.roa (raw, json)
Hash identifier: DiPMBIkLGWdMB24tY0k21oVl4yJWUGtPKzqDuGYtkB4=
Subject key identifier: 75:B8:49:DA:68:22:C2:B1:17:44:7C:C6:47:A5:B1:68:A3:4A:A9:02
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 01A0EECC92B8EA807259063F6C81A5549AEE
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/dbhJ2mgiwrEXRHzGR6WxaKNKqQI.roa
Signing time: Tue 29 Sep 2026 20:12:59 +0000
ROA not before: Tue 29 Sep 2026 20:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218641
IP address blocks: 195.93.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:cc:92:b8:ea:80:72:59:06:3f:6c:81:a5:54:9a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Sep 29 20:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75b849da6822c2b117447cc647a5b168a34aa902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:61:cf:3d:bd:b6:8c:97:b1:46:00:80:b0:
e1:d4:52:eb:a4:be:ef:0c:dc:df:be:07:36:62:fd:
1f:77:86:83:15:53:c6:f6:e6:b5:22:e7:a2:69:b2:
df:f6:16:2a:2a:be:e6:91:f3:ee:7d:b3:30:87:f3:
e6:e8:c4:11:df:e5:36:18:14:50:55:75:21:c4:f9:
0e:f8:20:65:f6:72:a2:56:c4:40:91:83:8f:ac:01:
9a:1b:03:48:87:ec:9d:f6:31:2d:0a:29:4a:07:5e:
6c:f2:f7:83:51:24:93:a6:6d:cf:10:2a:8c:c9:db:
dc:99:2d:46:48:de:47:a5:74:73:13:ab:58:53:1d:
99:ad:d4:23:29:5c:2d:4a:f9:96:a5:b0:2f:ff:25:
57:d6:4c:9f:43:cd:ee:7d:f7:0d:dd:39:49:c1:b7:
0a:76:1b:be:71:a1:7f:eb:92:f5:d3:6f:0f:46:f4:
95:ad:b4:6e:e5:d1:80:ac:50:e1:98:c0:b3:73:8f:
32:37:78:af:9b:48:34:d0:e9:8e:21:16:d4:5a:94:
f2:36:8e:65:da:67:50:47:cf:90:22:5d:57:25:e3:
04:3c:cc:45:82:ec:87:27:93:ef:00:73:3d:e1:9a:
73:96:6d:0e:37:bd:b3:b6:0b:04:6d:d1:06:88:0f:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:49:DA:68:22:C2:B1:17:44:7C:C6:47:A5:B1:68:A3:4A:A9:02
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/dbhJ2mgiwrEXRHzGR6WxaKNKqQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ee:f1:2d:da:85:63:c3:3b:f7:a1:31:92:d4:f3:45:bf:3c:
c8:9b:d0:19:c2:fc:56:07:f3:46:dc:ca:f7:51:3e:ef:77:25:
03:49:50:1c:cb:f6:ca:2e:b2:2c:2b:07:7d:83:bf:38:cb:f8:
3e:a9:d7:d2:07:4b:cd:f8:39:36:d0:c0:99:58:62:32:00:11:
1c:72:88:0c:96:68:6d:f3:78:fd:41:1a:60:4b:2e:8d:44:df:
5a:38:e0:23:91:f4:47:16:2e:ef:c5:e1:a5:f4:1e:e6:77:71:
97:b6:37:db:ca:0d:77:de:e4:44:a5:dd:8f:57:56:79:2d:cd:
c0:ba:96:aa:4f:08:f8:eb:f3:1e:3b:04:c4:4c:5e:29:0e:e0:
3d:4b:90:3f:55:fb:ef:0a:82:85:9d:03:89:24:35:82:06:a1:
b7:73:de:59:a5:11:62:97:25:a7:8b:92:a2:9d:97:90:3c:bb:
5d:93:3a:54:92:77:0d:97:12:16:ee:68:3d:06:8b:9b:10:c8:
f5:b6:97:aa:09:30:31:4c:dd:3d:ca:9e:a2:4e:64:6d:bc:8b:
0e:cb:fa:2d:55:2e:84:8a:3d:04:81:1c:79:ec:c9:5a:70:1a:
98:4c:e4:6b:16:34:38:65:69:2d:14:f5:24:1e:df:c1:f0:8a:
9a:e5:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:16 2026 by rpki-client