Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/DJletBM0tIFFFJ-dypu-DHrFceU.roa
File: DJletBM0tIFFFJ-dypu-DHrFceU.roa (raw, json)
Hash identifier: bByHr5fnzYQ5KdGrvk8CzGr4/2zv/8Vt4xxo1eVu+A0=
Subject key identifier: 0C:99:5E:B4:13:34:B4:81:45:14:9F:9D:CA:9B:BE:0C:7A:C5:71:E5
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 01A07C1314A524CFC2133EF7AD2C1EF3093E
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/DJletBM0tIFFFJ-dypu-DHrFceU.roa
Signing time: Mon 07 Sep 2026 13:33:40 +0000
ROA not before: Mon 07 Sep 2026 13:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203948
IP address blocks: 194.36.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:13:14:a5:24:cf:c2:13:3e:f7:ad:2c:1e:f3:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Sep 7 13:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c995eb41334b48145149f9dca9bbe0c7ac571e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:0e:14:13:2d:fd:ea:af:c3:7f:eb:ce:19:
41:3a:f1:0f:c8:5b:77:75:fb:86:7a:3b:70:98:46:
0d:1d:49:94:17:7d:dc:92:b3:4a:12:df:63:85:f4:
69:8d:8e:87:00:5a:e5:1a:43:13:ec:05:ac:55:7e:
ef:32:90:25:a7:15:5d:fc:81:dc:12:5e:3e:98:d8:
16:3a:52:79:32:dd:88:45:3d:cf:2c:65:40:89:a9:
ec:4f:82:9a:3e:21:91:7b:80:44:e2:46:e0:ac:e9:
18:28:7c:80:33:04:70:ae:d0:c4:18:41:42:01:22:
fc:8d:6b:7d:87:f6:37:93:91:64:a3:51:24:bd:dd:
83:45:2e:34:1d:e4:96:5c:3a:8c:ca:1d:33:d3:fe:
ef:aa:72:b3:85:8d:19:b2:a1:3f:1b:d4:61:8d:13:
18:63:c8:07:38:c2:e6:e5:84:96:19:83:38:9e:37:
c7:ab:19:42:f8:cf:d7:a2:4e:1e:c3:93:62:5d:31:
89:62:74:b1:24:ec:31:e8:59:e5:b7:a3:57:b9:3d:
93:ca:5d:9e:6b:38:f8:ee:9b:ff:25:a1:df:9b:70:
dc:17:95:e9:fa:4c:d1:9d:48:67:3f:24:14:14:ac:
12:f5:e8:f0:43:04:77:5c:c4:37:cf:2d:54:e9:67:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:5E:B4:13:34:B4:81:45:14:9F:9D:CA:9B:BE:0C:7A:C5:71:E5
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/DJletBM0tIFFFJ-dypu-DHrFceU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ea:b4:e2:23:83:18:9b:ca:a8:49:0a:a7:37:d6:a2:c7:75:
b6:19:d9:c9:6b:76:e2:22:dd:e1:75:be:aa:2d:0d:9e:fc:53:
8e:45:c6:70:39:69:d4:b8:01:6d:8b:09:23:cf:24:ab:dd:a2:
fe:18:5b:83:e1:b1:87:1b:35:21:16:ef:99:b4:91:3b:be:54:
a8:af:75:31:cd:fc:1a:bc:08:1d:86:80:c7:e3:94:a5:e7:51:
2b:db:0a:74:93:0d:ef:60:8b:c1:ae:0e:c4:e8:7c:d0:a5:9f:
c3:bc:60:32:1e:dd:44:8b:cc:c8:c9:a2:63:4e:b6:de:70:b6:
38:ac:eb:1f:81:23:3a:e9:55:d6:f8:6a:18:43:1e:68:b3:63:
c2:31:df:65:1d:93:58:40:3c:68:52:d1:99:ad:00:53:ff:8c:
bc:4c:d1:c1:fc:41:f6:a3:af:70:65:2e:5d:51:0c:11:0d:cb:
ec:56:9c:6c:17:fc:69:f3:17:11:97:5c:ff:fa:76:78:47:4d:
d2:bb:d3:6e:3d:ec:60:c7:b8:d4:e8:54:ae:43:5a:4e:5b:39:
a7:38:6f:78:32:81:d3:a5:74:63:b3:c2:51:dc:57:82:3a:b0:
6d:3b:43:47:b9:ef:e7:8f:5c:bb:1f:cf:ae:3a:ac:51:b0:dd:
d8:7c:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:22 2026 by rpki-client