Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/0dzMjSKpRUY-44bFET_xjKmLZqk.roa
File: 0dzMjSKpRUY-44bFET_xjKmLZqk.roa (raw, json)
Hash identifier: /gL+2fvCjluGjnsuF06+e5Fr7aGlLRVjmYErYPuCpqc=
Subject key identifier: D1:DC:CC:8D:22:A9:45:46:3E:E3:86:C5:11:3F:F1:8C:A9:8B:66:A9
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A086834EE1E8B6014EDA20AD03B07FE5EB
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/0dzMjSKpRUY-44bFET_xjKmLZqk.roa
Signing time: Wed 09 Sep 2026 14:12:27 +0000
ROA not before: Wed 09 Sep 2026 14:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49387
IP address blocks: 95.177.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:83:4e:e1:e8:b6:01:4e:da:20:ad:03:b0:7f:e5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Sep 9 14:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1dccc8d22a945463ee386c5113ff18ca98b66a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:65:58:89:31:9a:5f:ab:c3:2e:d8:a9:4d:
f3:af:a5:e0:ae:32:00:61:78:eb:7a:19:47:b8:47:
92:97:27:69:ba:30:4e:ed:aa:3e:0e:a3:6b:93:18:
36:39:06:08:71:0d:d7:c7:eb:fc:8b:55:50:18:44:
f7:0e:08:f4:05:bd:bd:b4:62:fd:83:65:a9:77:7b:
09:52:4e:0a:e6:3c:2c:88:b8:d9:6b:9d:ed:89:1c:
61:23:d2:63:60:6e:68:73:0d:51:b0:27:0d:f2:6b:
bc:92:a1:f0:d4:e5:e5:17:56:08:49:60:fe:95:aa:
49:c3:db:2e:19:a0:10:49:77:6d:0f:78:fe:21:69:
10:df:ec:c0:62:70:a2:0c:1b:bc:3a:4e:77:ef:63:
13:45:cb:06:10:e7:48:4c:d7:05:10:a8:4a:83:6f:
7d:b8:cb:1f:6b:b2:1e:d8:9c:2e:0c:72:7b:8f:5d:
2e:8c:94:67:90:1f:79:a6:ad:01:e1:7a:e7:d6:5d:
ca:67:93:ca:d3:e1:b1:3a:9a:c3:cc:7e:48:be:8f:
17:c9:d0:ed:70:2e:dc:6d:87:ae:95:cb:e4:d7:0a:
d3:c9:6b:a1:22:f5:fd:91:60:54:14:c6:6b:3b:1c:
8c:a4:9e:17:9b:89:cb:c4:45:8c:45:19:d8:1a:4a:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:CC:8D:22:A9:45:46:3E:E3:86:C5:11:3F:F1:8C:A9:8B:66:A9
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/0dzMjSKpRUY-44bFET_xjKmLZqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.177.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:ac:02:ac:a2:35:6c:53:09:61:2c:03:a6:b1:06:b9:13:20:
13:6f:3c:20:af:5a:47:45:c9:f0:f3:50:58:0f:4b:10:7f:4a:
62:69:e1:dd:9e:32:52:8a:e3:9a:92:95:f2:1c:2e:1d:d3:7a:
2a:cd:13:bc:84:c4:b6:78:58:5c:b5:58:0e:d6:75:15:2a:a9:
2d:a1:ba:81:de:8a:ee:20:c3:28:fd:9a:0e:7f:17:a7:2e:d1:
d8:d3:e6:77:0e:4b:ec:4d:cd:3b:0e:86:5b:c7:ce:6d:3e:7f:
1c:79:e7:40:8d:73:59:b3:ae:02:15:e5:a7:f6:4b:83:5d:f1:
61:54:ff:de:09:db:c8:24:87:3c:d5:4f:e2:54:5b:19:2c:cb:
e8:c3:1f:d9:c0:3d:e2:d4:99:fd:8f:ae:92:ff:21:25:82:34:
52:78:e2:07:b0:8d:94:34:e3:6e:5b:fe:74:55:21:f2:b4:fb:
f1:f9:76:8d:ae:04:b7:7b:4b:d4:88:92:a5:54:a8:e2:c3:b0:
37:fe:74:86:7a:89:6a:40:11:e0:4d:0b:b0:cb:fc:11:7f:a6:
a7:73:b2:db:b9:f7:6c:c4:77:31:f4:02:41:f0:a0:58:97:fe:
03:f3:f1:66:f5:e4:a0:62:f3:9e:36:96:12:59:c6:90:81:b9:
55:ac:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:58 2026 by rpki-client