Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/Dq_PeQEX9w9AZ7hhB8jGjaPXdek.roa
File: Dq_PeQEX9w9AZ7hhB8jGjaPXdek.roa (raw, json)
Hash identifier: x2vJKbCmJ/r1uDEib+Z5d15/ZK6XfDckYPBmz+6pfec=
Subject key identifier: 0E:AF:CF:79:01:17:F7:0F:40:67:B8:61:07:C8:C6:8D:A3:D7:75:E9
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 01A0ED6ED7F1CFE90A4A24BEB833A6C6C74E
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/Dq_PeQEX9w9AZ7hhB8jGjaPXdek.roa
Signing time: Tue 29 Sep 2026 13:50:59 +0000
ROA not before: Tue 29 Sep 2026 13:50:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.105.162.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:6e:d7:f1:cf:e9:0a:4a:24:be:b8:33:a6:c6:c7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Sep 29 13:50:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eafcf790117f70f4067b86107c8c68da3d775e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:4d:cf:d1:9c:23:80:f1:ba:00:3b:d5:3a:
56:b8:c1:59:cd:8b:c5:56:5e:4a:e8:fd:15:5d:d6:
fc:73:ba:0f:72:9f:2f:1c:2f:22:f4:a6:36:81:55:
1e:f9:3c:0f:a5:1c:a6:5a:57:7b:6c:88:7e:be:c0:
f1:5b:bb:aa:55:b1:3c:6e:76:73:bf:cd:a5:2a:8a:
65:19:d4:32:76:ae:b2:d7:fe:cb:01:71:5c:bd:f9:
d6:aa:3d:15:ea:d5:76:83:31:7a:ea:59:95:40:80:
8c:18:9d:a9:63:af:2e:19:a8:e4:ef:34:da:12:50:
38:f1:ab:50:b6:d8:ab:9c:d9:44:eb:37:f4:41:6b:
b9:5b:59:30:eb:42:b0:d5:fa:4b:d6:e1:99:86:65:
9c:7c:51:80:23:81:a4:29:de:5e:45:7b:8d:ee:83:
16:9e:33:d9:f8:9e:fd:aa:09:71:72:92:df:da:e7:
0d:9f:99:88:8f:8d:23:56:3f:e1:92:81:74:3e:9c:
a8:a1:1c:73:4c:9b:dd:71:6b:3d:ab:a1:85:0c:34:
b3:d8:22:b0:84:d7:61:d0:73:b5:87:b6:f1:73:6e:
54:ed:32:2b:23:51:64:3e:11:db:82:ba:f2:d8:7c:
58:74:c3:7e:0a:a4:57:8c:68:4f:4d:07:54:d9:86:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AF:CF:79:01:17:F7:0F:40:67:B8:61:07:C8:C6:8D:A3:D7:75:E9
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/Dq_PeQEX9w9AZ7hhB8jGjaPXdek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.162.0/23
Signature Algorithm: sha256WithRSAEncryption
60:db:97:32:b2:7b:53:48:7d:10:29:df:cf:1a:31:f8:6e:02:
0d:6b:b6:b0:e9:f2:4e:21:79:c0:9c:32:ed:da:70:ff:72:37:
81:ad:b1:d4:32:b9:bb:51:0f:63:ea:5a:55:30:ba:ba:e2:c9:
49:e3:f8:ee:50:b8:c5:69:a2:87:21:46:1d:2d:d3:ee:68:95:
d3:42:89:d5:b5:c3:45:78:32:57:d7:a6:bf:81:3f:48:65:fd:
60:d7:86:2e:b8:47:21:72:6c:62:75:f7:74:97:d1:57:3c:f4:
c2:65:aa:af:5b:f7:ae:da:8f:8b:cd:99:b8:5c:4e:3f:85:75:
c7:9b:eb:e1:a8:0d:0a:af:45:15:02:14:67:1a:c1:5f:90:9a:
59:3a:ad:81:07:53:55:f4:88:b9:e2:38:70:8d:28:9e:44:7c:
ec:a4:44:0d:83:a6:77:3d:bf:28:a5:dd:b9:c6:6b:57:e2:69:
62:14:2c:a8:d5:08:42:6f:c9:74:ba:74:2e:51:8b:57:db:b0:
8d:84:8d:a1:60:76:53:d1:9b:93:c1:b0:2c:5a:b1:f5:cf:bc:
7f:1f:58:25:f9:60:b3:49:2a:4c:d2:af:0f:ab:1a:5e:3f:e5:
5f:4b:c9:43:86:20:e4:61:6a:32:3d:bc:d8:2e:dd:71:58:e0:
64:14:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:01:42 2026 by rpki-client