Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/d6GlurZjrrwt2Mzk129b7bT_DCU.roa
File: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (raw, json)
Hash identifier: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=
Subject key identifier: 77:A1:A5:BA:B6:63:AE:BC:2D:D8:CC:E4:D7:6F:5B:ED:B4:FF:0C:25
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019B7DC9D6C9CCE6CCB2143EF7EA01D562B0
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/d6GlurZjrrwt2Mzk129b7bT_DCU.roa
Signing time: Fri 02 Jan 2026 08:18:58 +0000
ROA not before: Fri 02 Jan 2026 08:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60641
IP address blocks: 5.39.233.0/24 maxlen: 24
5.39.234.0/24 maxlen: 24
5.39.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:d6:c9:cc:e6:cc:b2:14:3e:f7:ea:01:d5:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jan 2 08:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77a1a5bab663aebc2dd8cce4d76f5bedb4ff0c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:20:91:57:22:85:23:ab:59:a7:94:fc:53:20:
5e:31:0d:fe:2c:b1:95:7c:fe:bc:ea:34:03:0e:37:
61:8c:ab:2b:40:b3:04:84:67:ca:b9:d1:47:ab:22:
a3:d2:07:f1:69:78:e0:94:35:c0:ad:d9:02:00:12:
1d:46:08:04:e2:e6:33:ec:be:2f:df:2d:e8:fd:e2:
1e:78:d3:d9:04:d8:31:b4:72:18:53:8b:dc:d9:0b:
4b:03:54:7e:fa:c2:ad:24:e8:bf:a3:0f:a8:10:9b:
e9:1c:01:6b:5f:06:da:4a:7d:12:15:44:e2:8c:fb:
a6:9c:bf:87:3c:60:15:64:6a:e2:be:66:ff:74:93:
be:0a:b2:2a:63:77:e1:53:0f:a2:fe:d7:d2:f5:30:
86:45:8a:79:21:45:78:3f:a6:ef:f7:0f:4c:1b:c3:
2c:f2:2d:d7:92:ba:17:9f:8a:0a:b3:27:7c:f6:fe:
52:cc:c0:3b:49:99:06:76:f4:3d:3e:82:62:fb:ea:
88:f5:fd:1b:be:47:84:cf:f0:0a:45:0c:40:61:56:
7e:bf:f7:7b:af:ed:8e:04:08:84:8d:a9:36:5c:54:
5c:0d:2d:39:3c:82:3b:48:b8:d2:08:91:1f:e8:c3:
72:d7:fc:45:3b:2d:2a:08:6e:1b:d2:f0:0a:0b:69:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:A5:BA:B6:63:AE:BC:2D:D8:CC:E4:D7:6F:5B:ED:B4:FF:0C:25
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/d6GlurZjrrwt2Mzk129b7bT_DCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.233.0-5.39.234.255
5.39.236.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d3:7e:fd:40:15:81:9c:aa:de:de:52:30:66:ff:2d:e5:f5:
65:62:b3:6f:1d:bd:6b:15:4e:dd:92:65:88:3a:f4:a7:31:84:
5e:60:44:51:d7:ce:fb:c2:5a:90:f0:c4:2b:62:65:1b:fb:a6:
7a:94:bb:52:5b:7b:d4:03:8d:2c:ce:85:b0:ac:d7:8b:b3:0b:
23:7f:fd:d8:02:d7:d2:2c:b9:5f:ff:a7:89:2f:34:0e:3b:f5:
31:bd:6e:09:66:89:9d:07:df:44:c1:c7:79:26:7b:1e:cc:64:
2b:51:ba:13:54:33:20:f4:a7:74:36:09:0c:03:b3:f3:10:54:
4e:31:7d:2a:3c:b2:44:99:f3:8a:4e:7a:4f:b5:24:46:79:46:
17:08:4c:3f:84:a4:2e:f9:ae:b8:8d:a7:8d:1d:49:2f:05:4a:
2f:74:0e:2b:8d:f7:0e:48:2b:90:f9:56:f0:a7:86:07:79:d2:
99:53:0c:6d:d4:b8:1e:04:59:f8:40:79:1d:c6:33:f9:02:7d:
10:bf:38:17:e3:e6:27:cc:fd:6a:91:04:3b:7d:72:1f:cc:48:
a4:cb:9b:7d:39:da:e2:8e:a8:62:1d:58:62:50:e4:1a:7e:de:
41:a5:5a:1c:ad:0e:28:d8:f6:75:82:84:3b:3f:5e:cf:4d:44:
64:7f:01:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:47 2026 by rpki-client