Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa
File: Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa (raw, json)
Hash identifier: yeQjaVa1qWsFYF/Nfl2QRVridzOhdfUMldU4qSs4j9I=
Subject key identifier: 0D:EC:34:79:BF:C7:00:6E:D9:0D:21:78:34:A1:C9:69:D3:FE:82:47
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0A455E44661B41B1C9A7DB3F3D7812BB0
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa
Signing time: Tue 15 Sep 2026 09:11:27 +0000
ROA not before: Tue 15 Sep 2026 09:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 195.252.178.0/24 maxlen: 24
212.224.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:55:e4:46:61:b4:1b:1c:9a:7d:b3:f3:d7:81:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 15 09:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dec3479bfc7006ed90d217834a1c969d3fe8247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:44:db:3a:f6:f8:7b:0a:3f:c9:ef:34:06:
a8:a7:34:2c:1b:37:5f:9d:80:2f:a8:73:ad:e1:32:
5b:4a:84:be:13:71:92:fc:95:8e:d5:05:c1:43:3e:
5a:78:a2:6a:83:c0:b7:42:06:a3:26:fd:f7:59:34:
ef:85:7f:6a:38:01:47:22:d1:91:7c:bc:91:fe:ea:
22:c8:ba:cc:f0:67:c4:6c:bf:75:28:97:78:2c:95:
fb:de:0b:77:5a:db:68:c8:53:4f:a4:ed:ee:5a:90:
de:80:f4:14:6f:f2:1f:d1:41:7b:58:74:db:e1:14:
e9:6e:52:08:cc:1d:6b:f8:ec:5a:ba:3b:83:27:6d:
8c:4c:22:0d:88:26:f2:73:bf:60:75:d3:ed:6f:23:
f5:d9:cf:73:89:02:97:be:e9:7f:1c:e7:14:6e:62:
2b:95:e5:49:65:f3:34:21:04:da:7f:6d:cd:f2:60:
67:46:3d:1c:c8:58:d4:74:ee:f2:de:c9:e6:dc:59:
07:5d:ed:c9:c7:03:b0:7e:4a:24:96:1c:d3:34:06:
3e:6d:70:7c:38:7c:12:ab:57:d7:99:d9:54:5c:93:
7e:42:83:4c:a8:0f:e8:2a:41:74:76:11:eb:3b:00:
38:a4:88:91:57:04:e7:ca:f8:76:a4:93:98:74:bf:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EC:34:79:BF:C7:00:6E:D9:0D:21:78:34:A1:C9:69:D3:FE:82:47
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.178.0/24
212.224.7.0/24
Signature Algorithm: sha256WithRSAEncryption
70:aa:b6:c1:97:b2:c8:ac:4d:5e:b0:0d:a2:09:65:38:22:58:
68:52:c8:57:91:56:b5:54:3a:e6:aa:5b:ae:b7:55:99:ee:03:
9d:0e:08:36:9b:9b:7e:05:3a:61:e9:c2:16:74:7c:fb:c7:61:
6d:0f:e2:61:ce:1f:c9:07:81:87:47:10:1e:a7:ac:48:a6:c1:
48:5f:25:4c:0e:2a:ed:c4:dc:ed:48:54:aa:13:87:26:5b:2a:
78:aa:84:2c:e6:d9:68:e6:d5:de:25:4d:c7:dd:f7:a7:17:da:
1c:5f:58:b4:1c:5a:09:a8:dc:59:ac:76:67:54:bc:2f:30:73:
21:32:2d:3a:e1:7b:51:7d:ce:18:2f:24:7e:45:aa:43:42:32:
4c:84:44:99:28:fb:8e:6d:f1:10:8a:88:31:bd:2d:4d:05:40:
e8:30:5d:7b:98:27:3a:35:f0:a6:3f:f4:f5:ff:06:a4:86:b8:
07:ca:b7:b1:62:f6:1d:4b:fc:09:a8:05:67:ed:3a:3a:11:8e:
9b:03:93:fd:56:38:7f:83:e6:81:bb:59:45:05:a5:33:5f:ed:
03:9d:4f:73:56:59:62:81:6f:ba:ec:2c:59:09:f6:56:3f:ac:
45:52:0a:6b:54:3f:97:c3:9c:5f:8c:89:84:bb:dc:c7:eb:85:
fe:24:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:52:51 2026 by rpki-client