Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa
File: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (raw, json)
Hash identifier: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=
Subject key identifier: 0C:A3:F4:3D:B4:CA:D4:DE:63:08:EE:53:4E:55:B2:5F:94:70:E5:C3
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 019B78354CA0DB8A09BFC56C10B61C8C2344
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa
Signing time: Thu 01 Jan 2026 06:18:37 +0000
ROA not before: Thu 01 Jan 2026 06:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20976
IP address blocks: 217.14.128.0/20 maxlen: 20
217.14.131.0/24 maxlen: 24
217.14.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:4c:a0:db:8a:09:bf:c5:6c:10:b6:1c:8c:23:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Jan 1 06:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ca3f43db4cad4de6308ee534e55b25f9470e5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:ee:15:32:76:73:48:42:7f:53:b9:34:a2:
76:5d:a8:03:01:80:79:87:31:e7:45:d9:34:41:af:
37:16:e9:d9:a4:a3:39:8d:6c:49:5a:74:81:2d:0e:
51:93:37:05:7e:99:7e:87:e9:75:40:ba:e5:31:8d:
7f:c4:30:0b:f1:ab:3a:b6:59:05:41:1e:be:a7:e0:
aa:c2:f0:03:3a:5e:21:7e:7e:8f:ed:37:c9:7b:a2:
5f:cf:43:8e:14:fd:ad:36:77:dc:3a:13:2e:63:08:
bc:2d:f3:37:0b:17:4c:22:68:a4:9b:70:cf:80:01:
52:8e:cb:08:37:82:25:34:22:20:22:82:43:fe:8d:
82:4c:45:76:8b:ab:03:0c:a0:18:63:a3:94:72:b3:
84:b7:a1:10:7d:ab:1a:10:fe:d2:a4:05:06:a3:22:
5f:cf:0b:70:5a:36:d3:9b:dd:2a:d5:18:9b:ef:77:
1c:e5:39:9a:5f:d3:38:e6:ec:1f:ea:07:86:f9:16:
34:a4:48:28:07:99:5f:ce:0f:27:ef:ba:a0:51:6f:
04:5c:91:c3:41:5e:c6:47:db:b8:f6:ee:3d:18:b7:
1f:3d:d8:84:b3:4e:07:60:36:42:8c:5d:34:39:3a:
dd:4d:a5:be:e5:a2:dc:0d:77:3a:7d:18:b5:db:d6:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:F4:3D:B4:CA:D4:DE:63:08:EE:53:4E:55:B2:5F:94:70:E5:C3
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.14.128.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:de:7a:4e:8c:43:ea:81:38:20:c5:a0:23:f9:fc:67:2d:73:
02:94:e4:8e:c4:a5:93:8d:bc:c0:54:fd:ae:c5:47:d4:64:c3:
44:38:54:46:51:e5:33:05:05:37:5e:33:24:98:b9:28:74:d0:
57:3a:b5:9b:e7:0d:b5:be:86:49:42:52:48:13:40:87:3c:ad:
54:3f:72:57:16:30:33:be:56:fe:ce:dd:87:14:6c:98:f5:0f:
8e:79:3f:9c:a4:c5:4e:3a:b2:85:4d:27:93:29:9d:d9:9d:cc:
53:24:77:a2:e8:cb:4b:b6:52:bc:b9:91:12:61:e4:16:83:19:
c2:1d:85:e7:5c:95:9e:ee:60:34:20:c2:ba:58:81:22:ca:14:
03:41:e0:94:c3:9c:2a:3d:cc:95:8f:4e:79:5a:e6:d4:82:62:
51:e1:91:48:40:9d:a2:99:78:6f:05:dc:72:48:60:88:62:cf:
3d:49:d2:60:86:b2:39:ab:54:6b:40:a3:cb:21:4c:af:b2:1d:
a8:2f:f8:a6:0a:49:a0:89:d5:0c:e4:a4:a3:f2:7a:50:17:6a:
81:58:5c:70:55:c5:de:d4:ce:09:93:e7:ec:04:53:01:62:a7:
26:ef:3b:c5:e1:6b:3a:9c:e5:64:f2:c3:5f:3c:d5:1b:75:1e:
e8:51:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:32 2026 by rpki-client