Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dUmjM-tJP5qjKZyBab8kOKowUUo.roa
File: dUmjM-tJP5qjKZyBab8kOKowUUo.roa (raw, json)
Hash identifier: oIFN5A5NG2DpTk5WfWj4Ad8OhPfjUI0qKesE7RDJ09M=
Subject key identifier: 75:49:A3:33:EB:49:3F:9A:A3:29:9C:81:69:BF:24:38:AA:30:51:4A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789C839A12A87689B9659C3457328984
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dUmjM-tJP5qjKZyBab8kOKowUUo.roa
Signing time: Mon 26 Oct 2026 14:28:05 +0000
ROA not before: Mon 26 Oct 2026 14:28:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211851
IP address blocks: 217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9c:83:9a:12:a8:76:89:b9:65:9c:34:57:32:89:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:28:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7549a333eb493f9aa3299c8169bf2438aa30514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:f2:80:c9:fd:ec:9a:d8:21:e0:69:39:a1:
1d:1f:13:77:a2:90:36:84:17:c1:fc:c2:27:d9:70:
b3:f8:eb:07:06:75:fa:95:3d:4e:6c:e8:84:64:2c:
1f:b3:63:80:8b:4f:6d:7e:18:a0:54:e6:3a:69:d7:
2a:be:71:a8:64:1e:ee:bd:ec:5b:d3:89:1c:00:35:
82:63:76:39:52:4d:4a:83:ca:21:54:66:40:1a:81:
58:2b:78:5b:2e:a2:62:8b:9e:ba:d2:98:0f:46:3b:
4e:a6:c1:92:2e:c6:bd:b3:d8:15:f7:20:73:10:10:
95:a9:8e:af:6d:b3:3a:5d:83:9c:9f:50:53:c9:61:
08:47:43:8a:9f:7e:8f:25:cb:85:de:0a:94:63:71:
f8:b7:f7:fa:71:d3:70:e8:c2:f6:45:90:91:dc:ed:
d2:65:8c:9a:73:e8:19:09:41:98:fb:d0:5e:2b:c3:
e3:74:b1:dc:c5:db:15:0e:9d:eb:f5:26:50:a6:df:
d8:fd:66:b4:09:3e:b6:ff:ab:a2:e3:5a:03:11:5d:
0d:76:d4:28:4a:90:03:a6:a3:06:50:d7:6c:a3:69:
0f:17:54:9d:0a:dc:23:44:f5:44:0b:fb:58:b4:2e:
25:02:81:dd:32:ac:c6:f5:71:51:75:57:67:9d:ed:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:49:A3:33:EB:49:3F:9A:A3:29:9C:81:69:BF:24:38:AA:30:51:4A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/dUmjM-tJP5qjKZyBab8kOKowUUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d6:44:95:37:8b:df:11:ba:33:61:7f:f1:3c:1f:65:d5:10:
98:46:e9:b0:9c:2d:f4:c5:93:87:4b:bb:68:69:85:af:16:3a:
2e:1d:c4:a3:c1:14:0c:f5:63:db:7f:e8:22:bc:5e:c0:75:29:
92:82:ff:48:69:fd:bb:8b:5a:63:81:73:12:cf:0c:37:cd:64:
10:75:d4:cb:8a:e1:7b:cc:66:7e:11:40:b8:11:bf:5e:39:2c:
07:4c:31:cb:30:e3:2a:5f:7b:ac:9d:2b:54:6c:50:04:4b:69:
52:10:ea:d5:99:f6:10:29:de:70:8b:4a:ba:74:99:b4:9d:ae:
64:c3:68:1c:47:1c:31:38:74:54:de:4f:90:cb:49:f7:67:21:
44:ca:57:f0:81:f9:de:b3:e5:ad:b9:05:85:57:b2:ab:a9:76:
53:9b:8f:1d:12:af:9d:bf:96:ef:ee:4d:14:f1:33:74:61:15:
96:d4:b7:f6:8a:f4:f1:9f:92:9d:61:cd:34:2c:41:e0:c8:bf:
2b:db:72:95:6a:07:c7:b3:ee:56:c2:b2:9c:cb:bf:77:e3:83:
8e:85:ec:b3:4c:ec:43:bc:61:f0:54:e8:5c:38:ca:99:c0:6d:
75:11:65:69:68:ec:11:2e:e1:f6:96:89:a7:ca:cc:1a:c2:4d:
12:67:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:57:15 2026 by rpki-client