Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/DrCOmEUQ4JwglphgJCb6AVaakAY.roa
File: DrCOmEUQ4JwglphgJCb6AVaakAY.roa (raw, json)
Hash identifier: qp/g2z3npHJzshleCgog068nrOuVJGLc4l65RkGLOVI=
Subject key identifier: 0E:B0:8E:98:45:10:E0:9C:20:96:98:60:24:26:FA:01:56:9A:90:06
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A0461840715AB07966932537CD206F8675
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/DrCOmEUQ4JwglphgJCb6AVaakAY.roa
Signing time: Fri 28 Aug 2026 01:59:49 +0000
ROA not before: Fri 28 Aug 2026 01:59:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197196
IP address blocks: 216.195.195.0/24 maxlen: 24
216.235.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:18:40:71:5a:b0:79:66:93:25:37:cd:20:6f:86:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Aug 28 01:59:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eb08e984510e09c209698602426fa01569a9006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:15:0f:7d:eb:b2:3e:f5:e1:b9:c2:86:1f:
cc:0a:31:c9:3f:00:1a:b1:7d:8d:67:f8:81:29:54:
e5:d4:bd:15:d2:6f:6a:5b:85:0c:2f:d4:80:22:f6:
7c:49:c0:29:3f:0f:6b:35:e3:4f:03:cc:ff:c6:7b:
5a:aa:63:65:83:6a:6f:a4:23:33:34:1f:02:28:af:
ad:05:8c:a5:ce:f0:9c:62:9f:2a:d7:73:53:ff:8a:
20:c6:f7:7e:9b:58:dd:bb:1b:5b:a8:8a:fd:33:2f:
cb:b9:9d:24:6f:bd:a0:c4:16:1f:27:75:26:18:a3:
eb:fc:53:66:7b:7b:f5:dd:cd:eb:85:16:a3:39:f2:
71:05:8e:6c:c7:74:05:b0:e0:c8:c3:47:90:c4:47:
50:12:40:a2:92:13:00:41:9f:c5:93:e5:a2:ab:5e:
5d:de:5f:66:28:68:58:64:dd:91:3f:9e:fe:67:d1:
65:d2:3d:9c:8e:99:9d:d3:37:4b:01:6d:9b:ed:e3:
47:81:1e:bf:0c:47:39:13:09:8e:72:e3:5c:b1:60:
0f:45:c9:d0:30:89:d9:24:e6:50:c2:b1:76:b0:69:
18:65:19:7b:0d:19:14:c8:4f:f9:2f:b7:e9:28:19:
d3:11:a9:8a:b7:69:5d:44:20:e9:c7:9d:72:ab:60:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B0:8E:98:45:10:E0:9C:20:96:98:60:24:26:FA:01:56:9A:90:06
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/DrCOmEUQ4JwglphgJCb6AVaakAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.195.0/24
216.235.248.0/24
Signature Algorithm: sha256WithRSAEncryption
22:be:37:d7:7b:4a:d5:04:14:59:f5:1c:dd:c1:7e:12:46:06:
5f:86:0a:42:ee:29:e3:a0:2d:02:2c:a9:6f:ac:86:85:31:c5:
7e:88:30:7b:bc:db:63:1e:b5:94:b3:a5:6a:ff:f7:95:52:db:
d0:a5:e7:26:80:05:a3:33:34:67:f6:de:0d:3a:be:7f:c0:6e:
4d:7e:5e:4b:06:e3:4d:d4:47:f8:46:c2:bd:cd:98:37:11:94:
1f:8d:22:f8:46:cc:e9:8c:cd:6c:e0:a7:19:a7:ba:ec:fd:73:
92:b6:22:ab:44:41:2f:6d:ef:45:1d:f7:d9:5a:4f:e1:2a:25:
77:41:27:24:46:a4:95:93:c1:37:44:98:78:ae:42:c8:eb:5d:
94:e0:56:e3:54:46:9b:b1:12:1b:e3:11:42:4e:c7:0c:f5:f1:
e2:bc:a2:7d:92:ab:0c:90:c9:76:d2:94:cd:c5:93:3b:e0:89:
d7:b8:e5:53:09:af:40:23:85:94:24:93:09:6d:71:b8:c4:fe:
9e:14:82:82:c4:f6:de:d6:fa:2b:8f:c2:33:ca:9b:4f:c6:7b:
b5:bb:8f:34:56:80:af:32:26:e8:b4:b4:e5:29:9c:4c:3b:ef:
bb:c7:1c:02:76:6f:6f:b6:ae:5a:ed:fa:11:0a:11:80:12:cd:
0f:3d:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 16:18:17 2026 by rpki-client