Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DHZU-EoYSgoY9_1JxnGVBrOcVHU.roa
File: DHZU-EoYSgoY9_1JxnGVBrOcVHU.roa (raw, json)
Hash identifier: RZzTWSCIdts8qheMjP5+r69gUFznA68WFuM+kEtZjsg=
Subject key identifier: 0C:76:54:F8:4A:18:4A:0A:18:F7:FD:49:C6:71:95:06:B3:9C:54:75
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F3CA8CF15D0FE7C4A2A978013C06C2B43
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DHZU-EoYSgoY9_1JxnGVBrOcVHU.roa
Signing time: Tue 07 Jul 2026 12:58:43 +0000
ROA not before: Tue 07 Jul 2026 12:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.37.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:a8:cf:15:d0:fe:7c:4a:2a:97:80:13:c0:6c:2b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 7 12:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c7654f84a184a0a18f7fd49c6719506b39c5475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:ef:7c:9a:cd:ad:12:a9:45:1b:a6:77:c0:
12:f1:6f:25:5a:9d:50:2d:3f:74:51:48:2c:79:d3:
17:e2:6e:1e:8a:e1:6d:20:5f:d9:3f:3a:ca:d6:f4:
75:96:27:5d:e8:b5:7c:c9:3f:ff:13:6c:bb:0f:91:
1a:53:56:0b:49:18:9c:4f:4b:5a:58:85:8a:b0:00:
3a:0e:b8:78:28:41:9d:7b:82:4d:af:31:ed:81:e3:
8a:f9:56:72:b6:13:74:88:d7:ff:a7:d3:a9:c7:76:
1b:99:3f:b3:1f:e4:d8:cd:52:70:ba:9b:eb:aa:04:
10:d0:8d:6e:d4:25:92:1b:e6:5a:96:5c:d1:0d:6d:
cf:4b:51:3d:40:04:40:31:c2:6c:02:35:93:5d:27:
08:ed:f7:2f:b1:32:68:4a:be:38:c5:13:30:db:b0:
61:ff:d0:f5:2e:df:0f:07:37:ea:73:00:06:0c:3c:
75:eb:d3:42:9d:88:7e:6b:1b:2c:be:55:5a:5f:23:
98:5e:fe:63:2a:14:92:d9:fd:7f:c4:a7:53:92:62:
21:cf:05:a7:5a:45:07:66:4b:c0:7a:4d:7b:df:3d:
8e:cc:04:12:a8:19:ce:1c:75:39:31:20:f5:a6:99:
4e:60:07:2e:35:00:aa:35:98:3a:b2:eb:ab:f2:ac:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:54:F8:4A:18:4A:0A:18:F7:FD:49:C6:71:95:06:B3:9C:54:75
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DHZU-EoYSgoY9_1JxnGVBrOcVHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:57:70:9c:08:15:3b:15:f8:4e:f7:22:56:76:3a:c6:f7:ee:
86:23:1f:c5:2e:27:a6:70:ec:ab:55:8b:15:9d:46:ee:14:f9:
3e:92:21:c5:e4:6b:15:bd:30:12:25:46:9e:83:c2:3d:58:f3:
60:c1:99:83:dd:a0:9a:9c:b0:af:e5:61:8c:79:23:1b:6f:61:
be:0e:b3:c2:83:5d:e0:5f:1b:5d:d5:18:5f:54:5b:8a:26:4c:
50:1e:49:75:2a:f0:aa:e7:57:5e:71:fb:69:ca:9d:e5:3f:60:
92:da:1d:2f:ac:97:e5:f2:44:cd:62:da:a4:7c:ab:83:a9:56:
cc:a8:f2:5c:e7:8a:1d:1a:a7:78:3e:d1:70:c0:be:f1:8d:15:
1b:ef:b1:0f:03:5d:35:12:00:f2:4d:67:01:a4:1e:86:0b:7d:
d2:c5:a6:64:a5:1c:f0:07:47:12:1a:a7:c8:1b:f5:5b:f6:36:
8d:a3:5a:53:85:c3:10:b5:31:9b:f7:79:58:a3:de:3a:1a:55:
10:79:c8:24:b9:bf:e4:33:2c:58:04:a8:c1:63:d0:4c:d1:1a:
1f:fb:4e:24:58:b8:11:2b:4c:00:33:e3:2c:65:e1:8a:d7:bf:
ac:64:42:f7:8e:b2:92:1b:53:d9:a2:d7:9a:e7:dc:53:82:a7:
5d:45:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:23 2026 by rpki-client