Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/DBNPe8eVrw7_1KUjzRRA33hX58Y.roa
File: DBNPe8eVrw7_1KUjzRRA33hX58Y.roa (raw, json)
Hash identifier: hYdptN3L/vz/3ch52LzC/IoTDQvky7D/anqUyA/QPOc=
Subject key identifier: 0C:13:4F:7B:C7:95:AF:0E:FF:D4:A5:23:CD:14:40:DF:78:57:E7:C6
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 01A0583B3D6384ABCE03E10EBB054E32E3E8
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/DBNPe8eVrw7_1KUjzRRA33hX58Y.roa
Signing time: Mon 31 Aug 2026 14:31:12 +0000
ROA not before: Mon 31 Aug 2026 14:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60594
IP address blocks: 155.133.32.0/24 maxlen: 24
2a06:1e00:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:3b:3d:63:84:ab:ce:03:e1:0e:bb:05:4e:32:e3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Aug 31 14:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c134f7bc795af0effd4a523cd1440df7857e7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:51:54:a2:75:b2:26:be:38:53:0d:92:c3:
db:58:a1:39:f7:c2:20:f3:99:66:be:7d:23:43:6d:
50:f6:85:19:5b:90:36:cc:5a:ba:39:62:dd:94:50:
e7:35:66:fa:b3:3f:7e:cb:b4:e4:b3:76:9d:0a:47:
0e:67:11:cf:f2:8a:23:64:cf:5d:26:4a:46:af:13:
ff:23:22:89:1e:cd:e0:d3:a4:fd:52:82:d6:d2:5f:
54:38:41:43:a5:5f:0a:3e:45:e1:d6:9d:43:33:63:
43:dc:bd:81:a3:76:3d:8d:ba:d7:c9:75:ed:78:16:
d8:f5:bc:18:3c:54:e1:f1:0a:3d:6a:8f:ae:f0:80:
73:89:ed:df:47:18:86:c8:aa:dd:33:0d:38:f7:42:
a4:a0:0e:c8:5d:6b:1b:e5:1f:d3:e1:d2:c1:15:14:
fb:6a:d6:57:8d:9d:f9:00:12:86:7c:6a:ac:92:b3:
ef:86:43:4e:1e:a2:c2:05:43:1a:05:1c:97:5a:4e:
63:dc:f9:ef:95:02:3b:3f:11:46:06:b9:e2:bb:36:
a6:85:d7:42:d4:1d:50:4d:bb:3d:ea:0f:13:a0:95:
b9:6e:ef:98:f8:69:a9:a9:ef:1c:ab:15:75:1b:bc:
bd:7e:be:2e:ba:4a:f8:65:b7:1f:50:a7:25:83:0c:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:4F:7B:C7:95:AF:0E:FF:D4:A5:23:CD:14:40:DF:78:57:E7:C6
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/DBNPe8eVrw7_1KUjzRRA33hX58Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.32.0/24
IPv6:
2a06:1e00:2f::/48
Signature Algorithm: sha256WithRSAEncryption
14:70:03:9a:6b:02:7b:4b:76:24:fd:f4:67:61:56:af:d9:93:
ee:d1:10:52:dc:e0:48:a1:7b:f4:8b:b9:a6:77:ae:7e:ca:2c:
0d:0d:ba:7f:2c:7c:46:a9:ca:dd:ef:70:3d:d1:d8:03:cb:bf:
dc:42:18:5e:7e:08:dc:62:6a:01:5b:e1:6d:e4:b2:ba:56:b7:
9e:fc:15:7f:1d:cb:b4:53:3d:58:80:9a:76:ab:25:43:9b:11:
1a:61:90:21:8d:89:5e:30:c1:6e:39:1c:97:5b:45:84:1f:d6:
ce:b8:90:de:33:b1:1b:9d:32:3e:fd:f6:cc:9f:55:f8:2c:c6:
5d:fa:ac:b2:a0:48:36:82:dd:29:96:71:db:1b:6e:79:48:8c:
ee:b5:26:e0:a1:7c:52:c5:30:e3:39:f0:8d:86:32:e1:86:a1:
ed:d4:c9:42:0d:1d:58:44:81:7a:a3:b9:94:4d:4a:fb:94:07:
19:c4:15:8c:fc:5c:a0:8e:0a:53:ff:38:2f:b7:da:14:4d:e7:
37:ac:70:73:30:8e:2b:f4:fb:ec:a9:f1:4b:aa:2e:66:ba:03:
b5:07:5e:aa:ed:ef:45:e9:cf:39:f9:65:b3:31:ef:0d:1e:34:
93:77:dd:7b:c3:27:97:60:89:a2:1d:f8:09:9e:0e:8b:ee:cf:
e1:46:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:47:50 2026 by rpki-client