Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/D1W94lYLyCK0mFFjH_NmcWgeZRo.roa
File: D1W94lYLyCK0mFFjH_NmcWgeZRo.roa (raw, json)
Hash identifier: SthWk5H0t9aqmxt2JIiFsXEJGCaUIzEf3HXu1g4xmBs=
Subject key identifier: 0F:55:BD:E2:56:0B:C8:22:B4:98:51:63:1F:F3:66:71:68:1E:65:1A
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019D2B2EC290BB10A573797E040EBE5B920F
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/D1W94lYLyCK0mFFjH_NmcWgeZRo.roa
Signing time: Thu 26 Mar 2026 17:26:17 +0000
ROA not before: Thu 26 Mar 2026 17:26:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.43.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:2e:c2:90:bb:10:a5:73:79:7e:04:0e:be:5b:92:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 26 17:26:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f55bde2560bc822b49851631ff36671681e651a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:bf:34:af:d9:83:16:af:0f:43:e7:24:60:
9a:ac:63:ab:eb:c5:6c:9f:ba:95:d0:5b:52:8e:fd:
29:e2:f1:0e:ce:bf:d8:cc:ac:4a:3e:96:9a:aa:0b:
e9:92:4d:9b:57:66:6d:2a:6f:a3:56:27:4f:6b:e2:
d2:c0:d2:06:f1:4f:21:d8:fb:87:1c:b8:b0:b6:f2:
92:9a:63:30:9f:62:b6:63:ee:27:aa:ff:0a:94:26:
64:1b:3c:d5:ab:d6:cd:69:f3:a3:a8:c6:2d:e6:3c:
f9:74:0f:ac:00:d1:0e:22:70:31:c4:97:c9:c2:93:
1c:2d:13:b8:0d:26:92:40:e6:b8:fb:6f:6d:f0:19:
87:42:72:66:8b:3e:10:df:33:64:67:39:c4:2f:cc:
e3:68:d5:5a:8e:3f:77:6f:0f:fe:78:8b:e6:a1:02:
80:89:23:7a:46:6b:81:5c:eb:94:23:59:a6:f0:e4:
a4:ce:18:71:92:b3:88:f1:1d:2c:c2:19:7b:16:72:
cb:27:4f:c0:b2:70:8f:b0:6e:aa:67:f7:ed:00:66:
cc:be:ed:b7:2c:9e:11:8e:0a:fe:ce:d3:47:42:37:
35:30:4c:df:a0:24:5b:82:53:dd:eb:92:1f:c5:c3:
7e:0d:4c:7a:0f:e5:61:80:d5:98:31:83:a8:19:e4:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:55:BD:E2:56:0B:C8:22:B4:98:51:63:1F:F3:66:71:68:1E:65:1A
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/D1W94lYLyCK0mFFjH_NmcWgeZRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/22
94.154.45.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
17:49:62:5a:8e:40:58:03:22:5e:1b:49:88:36:a7:4d:80:2d:
93:3c:5e:62:2c:4a:9a:23:a5:a5:68:df:69:a4:4b:62:af:df:
f7:e9:ec:bf:08:62:07:54:07:df:3b:f8:ac:62:12:09:94:0f:
0c:46:5c:21:cc:c8:ae:26:c8:bf:c3:c5:0e:f3:5b:d4:07:2a:
90:1d:f9:d6:60:f2:67:52:41:7c:ce:1f:96:2d:64:f6:ec:dc:
6a:a9:91:fb:aa:61:25:38:5d:2c:aa:78:86:be:de:93:b2:d2:
95:b8:99:20:37:90:92:b8:a5:c2:c2:a1:3a:b4:16:97:f0:15:
1a:4c:6e:e6:b3:65:7c:af:15:cc:ff:eb:11:93:f2:1a:bb:df:
bd:6c:58:4d:51:e5:f0:25:dd:48:9c:9b:d9:37:03:c2:bb:e0:
7a:b2:05:29:08:e1:60:48:1b:46:fe:eb:cf:fd:08:26:c3:22:
e1:a9:79:d2:5b:3d:99:bb:f1:e4:5f:06:b3:c0:4a:57:b3:e0:
b5:1e:da:4a:bc:43:a0:bf:84:e3:14:ae:2e:a4:1c:af:24:0f:
ac:78:b5:0a:c3:9f:e8:00:0c:08:e5:84:29:5e:1a:73:33:06:
d4:01:b7:95:c4:01:e0:40:f5:94:eb:c1:21:68:71:01:60:97:
57:39:d1:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:12 2026 by rpki-client