Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/DVZz7rsMGVVgSxRyVzYOt5_hjkw.roa
File: DVZz7rsMGVVgSxRyVzYOt5_hjkw.roa (raw, json)
Hash identifier: 4sqqNPs5YOYeCorNx8Z4ekZEsrO+YvaH34HN2GL//3Q=
Subject key identifier: 0D:56:73:EE:BB:0C:19:55:60:4B:14:72:57:36:0E:B7:9F:E1:8E:4C
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 01A1B9FA930750FE6B4BEBB87FD16955306B
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/DVZz7rsMGVVgSxRyVzYOt5_hjkw.roa
Signing time: Sun 08 Nov 2026 07:06:08 +0000
ROA not before: Sun 08 Nov 2026 07:06:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.143.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b9:fa:93:07:50:fe:6b:4b:eb:b8:7f:d1:69:55:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Nov 8 07:06:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d5673eebb0c1955604b147257360eb79fe18e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:59:06:7c:8c:43:1d:64:01:8e:2f:9a:3b:
9c:fe:6c:7a:fb:be:51:ae:6a:d7:e6:1b:23:3a:11:
a1:82:1a:82:d6:a7:10:61:b6:73:06:3e:53:fc:4a:
9d:f4:68:58:be:77:b9:9a:3f:a5:91:2a:b2:08:8c:
3b:5e:fc:e8:3d:6a:08:a9:0c:ba:4b:b3:38:19:bb:
9c:e7:97:37:e3:77:2f:16:39:f2:94:0a:0c:9d:79:
3f:54:76:93:7f:b6:ee:ea:07:22:e4:0d:9d:4c:27:
f9:fa:ef:a4:5c:89:91:33:0f:12:bd:c5:2f:36:dc:
56:00:05:6f:03:6b:ea:fc:86:6b:43:e1:30:03:be:
04:0b:32:78:61:99:26:54:d0:b7:07:ae:c4:55:08:
17:84:2f:f4:8c:73:16:87:c8:cd:1b:5b:b0:fa:54:
82:19:84:df:23:06:01:78:57:fd:e0:c0:9d:75:f1:
ee:e2:ae:95:51:33:91:95:57:c5:9e:3d:78:9e:ee:
b7:d3:f1:5f:75:26:25:86:ae:5e:08:2f:e4:81:cd:
8e:66:d9:28:b3:ea:78:ec:af:06:36:ed:17:f8:98:
0f:a7:12:d5:05:41:86:e7:2c:d4:ca:13:35:8b:15:
42:c9:88:3a:1a:be:69:5b:02:d5:b3:3f:16:c9:92:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:56:73:EE:BB:0C:19:55:60:4B:14:72:57:36:0E:B7:9F:E1:8E:4C
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/DVZz7rsMGVVgSxRyVzYOt5_hjkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:bb:b9:bb:2b:78:48:6d:53:4b:0c:69:09:93:26:48:0a:6b:
e5:ae:a9:13:1b:30:f5:d6:19:72:d4:83:1d:37:b6:21:ff:8b:
59:6c:f5:e3:81:25:5c:57:94:ea:18:94:bc:6a:bc:99:77:c7:
12:b4:c5:9a:ae:30:2d:b5:75:64:40:eb:91:41:1d:c7:da:69:
a5:42:e4:e6:ee:d5:3a:ab:85:8c:72:98:2c:89:10:ad:3b:86:
97:28:92:03:63:de:da:2f:4d:6c:cd:10:ff:f6:77:1b:b6:24:
89:69:7f:c3:ed:02:7b:74:66:97:21:43:92:cb:b1:8e:ed:17:
9d:58:91:44:33:a3:54:9e:28:46:cd:fa:5d:61:f7:76:b2:79:
68:91:cd:c4:7c:32:94:10:95:e5:21:90:f7:46:27:82:86:48:
dd:02:4d:23:85:7a:87:08:72:d5:74:5f:46:2d:a9:33:fa:ce:
b9:5c:bf:23:2f:18:b9:35:2a:af:b4:ed:67:21:81:47:24:d4:
70:1e:c5:e9:23:73:fc:4d:40:69:f5:a9:13:18:2c:71:9a:9c:
91:61:d6:53:6a:f6:1c:a7:f1:31:96:56:62:37:c7:c6:04:0e:
23:cc:0e:4f:97:d4:bc:ae:3e:67:92:51:c6:21:ea:04:a0:1d:
a5:de:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:09:37 2026 by rpki-client