Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dvx2hzvMT7hi8a5hX4LumdNaC7c.roa
File: Dvx2hzvMT7hi8a5hX4LumdNaC7c.roa (raw, json)
Hash identifier: Ocu370sBJZGLJXicuZAmLfZhcN2ZwV3iU7xOO4V/BtA=
Subject key identifier: 0E:FC:76:87:3B:CC:4F:B8:62:F1:AE:61:5F:82:EE:99:D3:5A:0B:B7
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019ED996EFAFDA9123D9853AC881D9D57F63
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dvx2hzvMT7hi8a5hX4LumdNaC7c.roa
Signing time: Thu 18 Jun 2026 07:16:48 +0000
ROA not before: Thu 18 Jun 2026 07:16:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:96:ef:af:da:91:23:d9:85:3a:c8:81:d9:d5:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 18 07:16:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0efc76873bcc4fb862f1ae615f82ee99d35a0bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:84:51:5d:15:3d:9e:96:95:9d:bc:4f:5e:
5f:8e:8c:64:90:f0:a6:cc:9f:22:c5:1b:2b:cd:b2:
df:14:76:cd:be:f2:00:2e:62:f9:f0:eb:7e:d9:18:
8a:01:c8:44:71:a8:65:1e:cd:25:c2:37:80:7c:bf:
0c:f0:8d:e5:d2:c7:8f:23:39:a0:0c:2d:20:ea:21:
db:39:9c:26:49:2a:4c:85:9f:90:9d:26:e5:5b:77:
6b:98:4c:5b:80:52:c6:ff:ea:ec:72:13:12:f9:b1:
30:46:84:0b:58:2b:bc:ed:eb:ce:5d:d4:57:cd:bf:
6c:3c:08:2b:7a:14:24:e0:a4:bb:93:c6:11:d7:fd:
dd:08:52:56:16:f0:c2:16:f6:d2:65:9f:e9:4e:1f:
e6:95:d6:a7:f8:10:45:46:33:5d:71:45:43:7e:3c:
c3:be:26:9d:0c:8f:32:64:03:5d:66:76:2f:d8:64:
8c:6f:ed:e9:6c:d3:a6:0e:1f:82:a9:76:49:cb:82:
d7:77:1d:c4:fc:67:a4:3b:38:7c:68:5a:1f:4d:19:
97:4f:bb:77:8a:b4:6a:b8:db:ed:60:5b:e1:2a:9d:
f4:91:be:91:58:8c:32:cf:c4:13:d1:52:06:22:17:
e6:9c:aa:a4:dc:fb:af:5d:5b:c7:64:ff:6a:42:ea:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:76:87:3B:CC:4F:B8:62:F1:AE:61:5F:82:EE:99:D3:5A:0B:B7
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dvx2hzvMT7hi8a5hX4LumdNaC7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c7:30:20:8f:6e:e7:5c:d1:b0:50:19:cd:25:88:54:38:f2:
c3:c0:b7:92:07:12:f9:1c:b9:98:86:8e:0f:2b:88:b1:c4:b5:
b5:6c:21:91:d0:ba:cb:63:6a:b2:78:4f:1a:22:b0:3c:b2:21:
f2:e0:75:63:30:10:d3:fa:76:ba:ba:7e:5f:13:e2:1c:42:c5:
f4:d1:cf:b8:a7:ce:7c:6c:df:2a:57:6a:c4:f5:dc:f6:44:a4:
21:4e:8a:75:10:2e:17:6d:92:5f:49:0b:0f:84:62:5c:0a:9f:
a1:09:53:c6:1d:05:cc:8f:ad:ae:e2:fd:97:c1:ee:a0:2c:02:
f7:24:2b:7f:55:eb:e0:07:37:8b:4b:a7:ac:bc:9b:25:c5:4d:
05:4d:4b:22:9c:69:97:01:0e:d5:27:5b:08:43:e6:15:e8:1a:
09:a1:dd:5e:2a:bf:e0:cc:ef:45:c4:40:4b:b2:72:b0:75:13:
9c:e7:29:1f:a8:29:73:fd:a5:f2:91:4f:7d:e4:6f:4d:db:e6:
f9:3d:12:53:65:44:03:ef:70:9a:40:38:25:99:21:ad:39:9d:
bf:10:66:6f:18:72:54:18:45:89:01:79:d1:a6:77:a9:8f:f2:
f2:ec:b6:37:17:c3:8a:60:d4:3e:99:79:06:27:be:08:f1:92:
1d:54:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 05:19:03 2026 by rpki-client