Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0DXUnnBUED5LUr7iNU8x2YrPc_8.roa
File: 0DXUnnBUED5LUr7iNU8x2YrPc_8.roa (raw, json)
Hash identifier: rQg+yz/hWp0KaQu3VwyB6dZC3gh/J7bujUKA1+wdnYU=
Subject key identifier: D0:35:D4:9E:70:54:10:3E:4B:52:BE:E2:35:4F:31:D9:8A:CF:73:FF
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A137AE976F93BAF3539443CB84573FC92F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0DXUnnBUED5LUr7iNU8x2YrPc_8.roa
Signing time: Tue 13 Oct 2026 23:52:31 +0000
ROA not before: Tue 13 Oct 2026 23:52:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 176.101.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ae:97:6f:93:ba:f3:53:94:43:cb:84:57:3f:c9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 13 23:52:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d035d49e7054103e4b52bee2354f31d98acf73ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:ac:e4:84:5c:e0:45:2c:22:54:ab:91:56:
d8:09:12:c3:9d:3f:9f:8d:92:f9:ac:23:39:be:b9:
38:8e:f7:16:f7:b3:41:b1:95:42:19:5f:ec:48:a7:
31:81:11:d0:0b:ff:d2:f0:28:b7:bd:0f:53:67:f1:
d4:15:97:9e:b7:c9:ef:19:70:8a:8b:7d:d4:35:b2:
f8:a2:7e:5b:ef:ea:2a:30:34:5d:72:de:72:c8:97:
cb:cc:21:c0:96:5d:9f:06:75:7d:d7:d1:c7:b6:c6:
fb:23:53:2e:a3:72:98:19:1b:ad:e6:a6:a8:d1:cf:
3d:4b:0f:6c:ee:1d:0f:2e:61:2f:fa:43:1a:f2:6b:
cd:5b:23:0d:0d:ba:c8:7a:5b:67:ea:dc:1d:0a:c8:
f8:36:86:ab:00:07:89:d4:3c:46:51:7d:ca:e3:dd:
75:84:07:1a:69:3a:d9:d0:cf:7b:a6:02:3f:ed:39:
c6:fa:06:2f:27:0a:5d:03:37:a1:86:33:37:cd:30:
5e:44:57:f0:86:47:c4:df:22:73:ec:76:b2:4d:a6:
51:5c:35:e2:c0:1d:b0:80:45:c1:5c:55:59:02:7d:
00:41:e9:16:d4:de:18:d8:58:6c:5a:b3:4e:3f:8b:
f4:82:b2:ef:49:32:97:e8:58:fe:05:92:29:0c:fe:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:D4:9E:70:54:10:3E:4B:52:BE:E2:35:4F:31:D9:8A:CF:73:FF
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0DXUnnBUED5LUr7iNU8x2YrPc_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.62.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2b:6d:54:e9:0d:ba:45:97:26:e1:6e:b1:bc:8a:70:b7:0c:
9b:28:c5:8d:5d:1c:cc:2b:6f:25:4f:57:b8:51:55:f5:65:69:
4b:0c:51:ab:76:d8:7e:6e:ae:fb:e9:2f:cc:bf:14:70:62:bf:
36:b0:5c:89:c8:62:85:f0:03:2b:0f:17:2d:51:c8:e6:a2:96:
3c:62:19:d7:a0:fd:3e:c2:fa:c3:1b:89:6c:d4:46:9f:79:34:
6a:e9:c4:00:37:9d:81:91:22:9e:da:87:ba:33:02:cd:9a:85:
a1:73:64:23:47:4e:89:d9:72:de:24:69:06:2d:90:ac:1c:c1:
3c:d4:4c:b9:72:ad:e6:01:df:92:46:9c:3a:bf:93:cc:5d:42:
d6:aa:6e:e6:85:ce:ea:bc:56:dd:fb:9e:79:78:4d:ff:e1:92:
b7:aa:09:d9:3f:f9:13:30:f8:46:01:51:eb:d3:75:09:1f:4a:
e1:57:7d:18:33:85:73:80:6b:f7:10:60:41:26:3e:94:f1:7f:
0f:04:89:ca:b5:cb:b6:02:20:0c:32:39:c1:7d:bd:0b:86:6d:
a5:f8:a7:9d:66:ce:57:8d:46:21:fe:9e:cf:f1:12:a8:23:c2:
0e:c0:38:d2:d1:aa:20:59:af:73:11:a7:48:15:35:b6:47:b6:
64:6a:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:08:26 2026 by rpki-client