Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/DSNpmKLkffCpsbXwdQsOEeY_JQI.roa
File: DSNpmKLkffCpsbXwdQsOEeY_JQI.roa (raw, json)
Hash identifier: /h170UamnOLNHRPxFd4yLuyJTcIXETFqpsRpdGA4ykI=
Subject key identifier: 0D:23:69:98:A2:E4:7D:F0:A9:B1:B5:F0:75:0B:0E:11:E6:3F:25:02
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A07024E1C4EB1861C95CF48AB0374B7545
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/DSNpmKLkffCpsbXwdQsOEeY_JQI.roa
Signing time: Sat 05 Sep 2026 05:57:40 +0000
ROA not before: Sat 05 Sep 2026 05:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 84.55.14.0/24 maxlen: 24
88.223.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:24:e1:c4:eb:18:61:c9:5c:f4:8a:b0:37:4b:75:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 5 05:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d236998a2e47df0a9b1b5f0750b0e11e63f2502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:56:52:42:da:e8:4d:ff:6e:e1:e9:a5:96:
97:43:83:bd:98:b5:ae:ab:d6:f4:25:bd:7f:86:2c:
3e:a5:64:0f:e6:41:dc:39:96:1c:b5:33:04:9f:39:
1f:38:26:f2:20:69:9d:5c:59:e1:d5:47:ef:d2:17:
8d:04:50:0e:fd:b1:50:7d:e1:dd:aa:cd:42:99:68:
a4:81:66:59:3c:d7:8a:fe:53:38:b9:63:41:24:3c:
1a:c0:fd:aa:60:58:fc:f8:98:19:f4:3c:64:83:05:
69:6c:77:c1:fc:6d:5e:ed:41:56:25:73:9c:1f:ad:
99:fc:b4:d5:03:c5:20:c3:8a:f3:de:06:94:ef:df:
53:b0:9e:88:6e:4f:70:c6:2b:24:e6:54:07:40:32:
26:0e:7c:99:f2:39:6f:52:0e:32:9f:e4:49:6c:b2:
51:a4:2e:42:b0:9f:c1:25:80:e4:64:8b:fb:e6:f6:
19:18:fd:36:f7:2c:4f:ca:eb:69:5e:82:9d:3c:59:
6e:c9:00:99:c8:fd:ab:bd:2a:11:58:d7:c4:80:1b:
d0:26:17:a4:14:87:49:79:69:40:a3:ba:e7:38:25:
86:75:e6:85:ca:11:7f:0e:63:87:18:f1:a7:cd:ed:
d4:c1:6c:08:cb:c2:aa:09:e9:a9:43:e7:29:7d:d0:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:69:98:A2:E4:7D:F0:A9:B1:B5:F0:75:0B:0E:11:E6:3F:25:02
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/DSNpmKLkffCpsbXwdQsOEeY_JQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/24
88.223.44.0/24
Signature Algorithm: sha256WithRSAEncryption
98:56:16:9b:33:8a:6c:fe:c6:52:79:9b:76:cf:3d:a4:bf:22:
b7:d3:46:0c:50:60:9a:7e:41:21:18:cc:ad:58:ea:16:74:5e:
71:16:ad:1a:fd:95:a8:07:88:c2:03:54:67:b6:c0:5e:44:20:
e3:ee:6c:5c:f5:50:07:e1:b9:47:d4:ec:82:47:98:85:fb:85:
2c:1e:1d:08:32:63:77:7e:c2:fd:0b:cd:38:bf:f0:28:e8:6d:
37:a2:f2:85:ad:3c:2b:6f:23:cd:d7:7d:5b:f9:d3:17:e9:91:
cb:51:85:13:b7:55:8e:45:e1:da:7b:1e:4b:3a:ea:10:99:07:
8c:8f:28:74:58:8c:bc:6b:85:40:a3:ee:0b:71:95:d4:3a:12:
08:d7:fd:aa:ba:42:0c:cc:c0:1b:06:30:97:66:15:75:b0:aa:
8f:b0:30:99:e6:fe:5e:c6:18:e6:73:96:1f:12:78:4b:85:4f:
22:6d:11:56:b7:99:74:d2:e9:0c:f0:cf:40:07:2f:2f:ea:ef:
eb:f1:2a:cb:9b:36:3a:fe:62:0c:01:5a:96:fc:a5:ed:c5:10:
16:30:27:b8:a2:1d:ac:a7:2a:ea:ee:60:aa:4a:4d:2b:ad:76:
cf:c5:ab:b1:56:e9:a1:bc:75:8b:e0:3e:5b:5e:fd:b3:d2:df:
5f:66:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:21:59 2026 by rpki-client