Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/DewPVx0uxJChPazGVl04iEQt-GM.roa
File: DewPVx0uxJChPazGVl04iEQt-GM.roa (raw, json)
Hash identifier: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=
Subject key identifier: 0D:EC:0F:57:1D:2E:C4:90:A1:3D:AC:C6:56:5D:38:88:44:2D:F8:63
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 019DC32BE41C573C4145C32980B87CCEB9F9
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/DewPVx0uxJChPazGVl04iEQt-GM.roa
Signing time: Sat 25 Apr 2026 05:45:26 +0000
ROA not before: Sat 25 Apr 2026 05:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 37.143.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:2b:e4:1c:57:3c:41:45:c3:29:80:b8:7c:ce:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Apr 25 05:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dec0f571d2ec490a13dacc6565d3888442df863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:0a:cb:dd:c3:19:35:e8:10:d3:61:70:17:
c7:8f:d6:74:d8:bc:85:36:6a:78:5b:32:2c:dd:ad:
4a:6e:b6:c2:c0:cd:88:9f:1d:6c:76:c3:f4:15:1b:
5d:a0:99:94:2d:fa:bc:9e:ef:9e:c0:d8:47:d3:af:
ed:57:98:67:2b:7c:5e:09:0c:97:bd:fd:4e:f5:98:
ce:ef:b9:47:76:61:e7:34:ac:3c:9f:38:dd:79:d7:
96:c8:a2:46:9a:b1:2e:a4:6f:1f:2b:f9:52:11:74:
b4:28:fb:87:44:4f:c0:e1:ba:08:e5:30:20:f8:f0:
80:4a:9a:4b:b2:f5:81:0a:14:e3:44:07:5d:68:26:
bf:69:ac:cd:da:59:03:c6:14:1a:b9:24:bd:f1:57:
ff:cb:d7:12:45:4b:bf:63:16:6b:71:85:bc:a6:d4:
32:8d:0a:d7:c3:62:58:cb:5c:8b:bb:9e:07:bc:e1:
d5:51:48:be:2a:6c:c8:2f:97:5b:12:72:b0:16:f7:
eb:d8:bb:aa:04:de:31:2a:e3:19:c4:42:f5:98:46:
bb:1f:5f:9f:2f:f6:58:b0:37:cf:c8:65:20:0c:1e:
aa:79:ae:ad:b0:e4:1e:33:fa:ab:3a:ef:e6:53:18:
b7:c3:14:f0:3e:1e:9f:9c:72:c9:3d:76:32:e9:71:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EC:0F:57:1D:2E:C4:90:A1:3D:AC:C6:56:5D:38:88:44:2D:F8:63
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/DewPVx0uxJChPazGVl04iEQt-GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
28:73:e5:6f:c7:25:3f:bc:8f:2f:25:bd:52:dc:3f:7e:01:e7:
a8:b8:c1:bc:0a:7d:f6:4b:e2:be:d1:48:d1:74:7d:12:3d:67:
9e:ab:df:99:4d:e0:31:52:28:78:1f:cb:86:4e:12:4c:5b:70:
69:2f:fc:64:d2:84:ea:ef:46:7d:eb:57:41:aa:97:46:58:0b:
b4:bd:12:09:ae:ed:29:dc:54:f4:47:41:5d:20:b3:e5:d4:72:
0a:42:9a:e0:eb:28:5a:86:35:08:26:be:8e:c6:fd:2f:92:f0:
da:4f:b5:cf:e3:80:76:82:cb:8a:c4:25:11:8d:e3:e7:ce:32:
4f:96:50:8d:bc:d7:b5:6e:23:de:05:32:83:3d:b1:6a:14:be:
d9:c1:4f:1e:f2:95:9e:01:68:08:bc:db:ee:4d:74:c9:f5:53:
31:db:9e:d6:07:36:1e:15:ed:85:d6:97:54:5b:c5:db:8c:91:
1a:22:c7:19:1b:d4:d6:8a:7d:e4:92:c3:17:1c:3d:2e:41:29:
ca:a2:a0:6b:36:90:e7:37:c8:76:ea:ea:29:91:df:e3:97:43:
31:a0:7e:f1:68:1b:e8:5a:93:a4:26:2d:31:40:30:48:8a:51:
1c:5e:db:a4:86:d9:36:fa:4c:ba:d4:6b:5b:22:d1:a2:9f:a4:
17:29:86:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3DK+QcVzxBRcMpgLh8zrn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh
M2Q0YjUwHhcNMjYwNDI1MDU0NTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGVjMGY1NzFkMmVjNDkwYTEzZGFjYzY1NjVkMzg4ODQ0MmRmODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFYKy93DGTXoENNhcBfHj9Z02LyF
Nmp4WzIs3a1KbrbCwM2Inx1sdsP0FRtdoJmULfq8nu+ewNhH06/tV5hnK3xeCQyX
vf1O9ZjO77lHdmHnNKw8nzjdedeWyKJGmrEupG8fK/lSEXS0KPuHRE/A4boI5TAg
+PCASppLsvWBChTjRAddaCa/aazN2lkDxhQauSS98Vf/y9cSRUu/YxZrcYW8ptQy
jQrXw2JYy1yLu54HvOHVUUi+KmzIL5dbEnKwFvfr2LuqBN4xKuMZxEL1mEa7H1+f
L/ZYsDfPyGUgDB6qea6tsOQeM/qrOu/mUxi3wxTwPh6fnHLJPXYy6XFK2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3sD1cdLsSQoT2sxlZdOIhELfhjMB8GA1UdIwQY
MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt
MmUxYzBhZjRmYWE0LzEvRGV3UFZ4MHV4SkNoUGF6R1ZsMDRpRVF0LUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0
LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8AMA0G
CSqGSIb3DQEBCwUAA4IBAQAoc+VvxyU/vI8vJb1S3D9+AeeouMG8Cn32S+K+0UjR
dH0SPWeeq9+ZTeAxUih4H8uGThJMW3BpL/xk0oTq70Z961dBqpdGWAu0vRIJru0p
3FT0R0FdILPl1HIKQprg6yhahjUIJr6Oxv0vkvDaT7XP44B2gsuKxCURjePnzjJP
llCNvNe1biPeBTKDPbFqFL7ZwU8e8pWeAWgIvNvuTXTJ9VMx257WBzYeFe2F1pdU
W8XbjJEaIscZG9TWin3kksMXHD0uQSnKoqBrNpDnN8h26uopkd/jl0MxoH7xaBvo
WpOkJi0xQDBIilEcXtukhtk2+ky61GtbItGin6QXKYYt
-----END CERTIFICATE-----
Generated at Thu May 7 07:22:41 2026 by rpki-client