Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DSJRhDpX1P0cpmgwDEBBGiiNW00.roa
File: DSJRhDpX1P0cpmgwDEBBGiiNW00.roa (raw, json)
Hash identifier: WGPjVSNNbC4fdBC17/VmrglZ0GaGAyRLw7qU8/xzERQ=
Subject key identifier: 0D:22:51:84:3A:57:D4:FD:1C:A6:68:30:0C:40:41:1A:28:8D:5B:4D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FF6B9FC0C178B5AD0F2EC71FF4B50490D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DSJRhDpX1P0cpmgwDEBBGiiNW00.roa
Signing time: Wed 12 Aug 2026 16:06:51 +0000
ROA not before: Wed 12 Aug 2026 16:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62513
IP address blocks: 153.76.4.0/24 maxlen: 24
153.76.5.0/24 maxlen: 24
2a0f:b240::/46 maxlen: 48
2a0f:b240:60::/44 maxlen: 48
2a0f:b240:70::/44 maxlen: 48
2a0f:b240:80::/44 maxlen: 48
2a0f:b240:a4::/48 maxlen: 48
2a0f:b245::/32 maxlen: 48
2a0f:b246::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b9:fc:0c:17:8b:5a:d0:f2:ec:71:ff:4b:50:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 12 16:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d2251843a57d4fd1ca668300c40411a288d5b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:9b:9a:62:45:e8:9b:f6:d6:3b:bc:3c:28:
40:04:33:a5:fc:b9:9e:81:80:49:76:9d:3c:69:2e:
6a:75:3e:df:b7:7d:9d:ea:e0:d1:fb:17:52:a7:23:
43:cb:05:c3:52:e6:c2:45:27:d5:ef:81:fe:9d:93:
16:74:f8:0c:df:b9:88:80:e6:6d:1e:20:1a:2d:b7:
5c:71:04:36:1e:a0:b7:e1:86:ba:2f:c1:33:36:52:
98:a1:13:18:95:e4:81:85:65:ec:1f:18:73:b1:00:
b8:a7:a1:fd:77:d3:b0:c9:f5:bd:7d:2e:76:c7:9c:
09:52:2a:b3:8f:49:b5:b9:2e:93:46:aa:39:29:1e:
5f:06:47:5f:e3:80:16:80:8b:1c:63:23:7c:a9:66:
a1:bc:6c:c4:3a:44:03:96:78:e5:2f:e1:5c:61:76:
13:15:9f:ec:15:c1:c2:19:aa:68:13:84:51:93:75:
74:e2:fb:44:38:00:71:8f:c2:a4:07:5c:b3:aa:ef:
ea:d9:59:a6:69:99:f4:23:b4:cb:41:cb:0d:e0:49:
3e:04:ee:0d:a4:3b:e3:69:64:85:e4:72:69:86:21:
0e:3a:0b:b8:46:09:b9:65:5b:08:96:4d:f0:bf:09:
4e:21:b3:8b:a6:9b:f9:8b:c3:d8:00:e3:c1:f3:6e:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:51:84:3A:57:D4:FD:1C:A6:68:30:0C:40:41:1A:28:8D:5B:4D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DSJRhDpX1P0cpmgwDEBBGiiNW00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.4.0/23
IPv6:
2a0f:b240::/46
2a0f:b240:60::-2a0f:b240:8f:ffff:ffff:ffff:ffff:ffff
2a0f:b240:a4::/48
2a0f:b245::-2a0f:b246:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4d:b9:90:83:b4:a9:cc:2b:5a:55:5a:07:62:b2:e5:d5:6e:9f:
81:67:81:91:24:96:2f:36:48:74:a0:09:db:d1:4b:3d:91:8c:
37:37:ef:78:4e:9a:7f:83:1f:10:fc:26:50:c6:f1:fc:3e:14:
e1:eb:bf:c9:d1:2a:1d:d9:46:bc:e7:50:dd:a1:5a:69:d5:f7:
4f:67:ba:4b:4f:c6:8e:3c:1f:72:25:fb:a2:a9:11:04:12:d8:
8d:67:9b:50:ba:37:10:67:74:71:b9:ca:4e:fb:7b:23:38:83:
a0:e4:62:76:6c:12:28:e3:95:e4:ef:61:66:6d:7d:25:51:69:
af:e4:e3:7e:3d:23:41:bc:7e:d0:65:5a:95:f2:5a:12:28:f6:
ca:6b:d6:57:3c:3a:4b:73:16:fd:f3:ad:b3:89:2d:b5:af:dc:
ae:d6:7a:f7:51:2a:13:09:67:10:11:63:b3:bd:2f:74:e4:ef:
20:d9:1d:65:7a:6c:71:c5:71:08:c1:13:9f:b1:8e:dd:0a:30:
3a:90:5a:48:30:e3:53:0b:a3:e4:6e:3a:8a:b0:14:23:50:b7:
48:8b:7c:d7:09:b4:70:4c:a0:21:86:a4:76:26:c1:9d:08:7b:
0a:05:88:76:0d:98:81:ac:d6:20:62:30:2f:fd:40:6e:50:b5:
65:ce:e4:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 27 23:47:47 2026 by rpki-client