Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/DgLvS_AEpWIL_noDyNHfaJuCxu0.roa
File: DgLvS_AEpWIL_noDyNHfaJuCxu0.roa (raw, json)
Hash identifier: 3BolUOuupGTjYf5OXk3Gx6KQ0DOVrT+2EbdV1ZI+f0Q=
Subject key identifier: 0E:02:EF:4B:F0:04:A5:62:0B:FE:7A:03:C8:D1:DF:68:9B:82:C6:ED
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0AEAD115F66BDD8AF5BBCCF23EC0E5347
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/DgLvS_AEpWIL_noDyNHfaJuCxu0.roa
Signing time: Thu 17 Sep 2026 09:22:52 +0000
ROA not before: Thu 17 Sep 2026 09:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 109.64.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:ad:11:5f:66:bd:d8:af:5b:bc:cf:23:ec:0e:53:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 17 09:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e02ef4bf004a5620bfe7a03c8d1df689b82c6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:6e:55:19:35:bc:b2:d4:a4:38:8a:fd:71:
59:3e:8c:49:c6:6b:2c:7f:da:4a:ca:66:45:8f:ec:
a3:a1:2b:06:cc:47:4e:02:b3:a0:03:aa:0c:6d:45:
ab:41:04:f4:7b:7b:50:75:bd:80:73:a6:51:a4:94:
05:87:27:53:fd:ed:f9:fa:7a:4b:51:12:c7:a7:a6:
f1:f9:cb:09:38:82:8f:f4:05:6c:ef:49:1c:9f:48:
5d:88:c9:40:5a:fc:13:b7:28:27:7c:8c:24:ab:36:
c1:02:88:f6:04:2b:b4:36:8d:0a:8b:2a:fa:03:9f:
b9:32:21:d7:7e:0a:11:dd:dc:3c:fd:b5:37:71:55:
18:fa:3b:60:85:47:b3:cd:50:b5:d2:ed:f7:9b:a2:
9c:c7:31:88:2f:b1:e4:3f:58:ad:d7:5f:d8:b2:a9:
2e:12:b5:ef:ca:4a:79:95:ed:04:22:c9:0a:7c:d8:
91:f5:c5:00:10:52:f7:e0:58:27:5d:de:ee:d8:26:
49:82:58:82:e8:97:f8:4f:84:57:45:b2:92:66:b3:
6d:b9:d8:0d:27:d5:d0:1c:d5:9b:f4:78:6d:9d:8c:
7a:94:f8:d7:f9:3d:e5:5d:2f:e7:d4:0d:36:93:c4:
35:22:53:48:fa:23:8d:39:a6:96:c4:f3:17:54:e6:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:EF:4B:F0:04:A5:62:0B:FE:7A:03:C8:D1:DF:68:9B:82:C6:ED
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/DgLvS_AEpWIL_noDyNHfaJuCxu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2a:45:14:29:fe:2c:60:1a:ff:b7:3e:c0:73:65:6f:5e:bf:
2f:98:e1:d7:4f:b5:d0:c2:a8:b3:96:40:e1:21:fc:9f:0f:7a:
94:5b:9b:02:6f:4f:1c:e2:d5:28:e5:d8:e0:df:4e:dc:d0:59:
47:d6:ef:ba:b0:58:62:1d:27:df:1c:ad:fd:c3:78:08:b7:37:
d1:ad:3c:c1:17:7e:72:93:04:e4:5a:3c:0d:5f:f1:db:fd:2d:
c4:e1:db:63:7b:1b:3e:79:8a:d6:73:48:fc:eb:c9:d4:25:7c:
80:ad:90:24:61:7e:e6:1b:e5:72:ae:13:19:34:29:77:ed:36:
97:ff:d1:8d:2b:1d:15:9b:1f:8c:ac:3b:42:23:d1:37:d4:3b:
1d:5e:f4:7d:2f:b5:39:24:40:b0:f7:cd:0c:3a:af:a8:46:30:
cc:b5:2e:10:54:82:ca:b5:f1:61:32:d2:0e:8c:6e:99:e3:07:
92:5e:5d:9d:38:79:b0:a1:c4:24:c3:90:fa:be:d2:7d:67:c4:
12:82:55:ca:32:6d:37:fb:f5:f6:92:05:49:2f:d8:61:87:ee:
ca:59:7a:ab:dd:92:05:e0:6a:9d:b9:f1:46:d1:3f:66:ba:12:
be:bc:ce:3c:62:9b:c3:78:32:43:e0:f6:d9:a6:4a:9d:ea:bd:
fe:c1:cd:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCurRFfZr3Yr1u8zyPsDlNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTE3MDkyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTAyZWY0YmYwMDRhNTYyMGJmZTdhMDNjOGQxZGY2ODliODJjNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxJuVRk1vLLUpDiK/XFZPoxJxmss
f9pKymZFj+yjoSsGzEdOArOgA6oMbUWrQQT0e3tQdb2Ac6ZRpJQFhydT/e35+npL
URLHp6bx+csJOIKP9AVs70kcn0hdiMlAWvwTtygnfIwkqzbBAoj2BCu0No0Kiyr6
A5+5MiHXfgoR3dw8/bU3cVUY+jtghUezzVC10u33m6KcxzGIL7HkP1it11/Ysqku
ErXvykp5le0EIskKfNiR9cUAEFL34FgnXd7u2CZJgliC6Jf4T4RXRbKSZrNtudgN
J9XQHNWb9HhtnYx6lPjX+T3lXS/n1A02k8Q1IlNI+iONOaaWxPMXVOb/9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4C70vwBKViC/56A8jR32ibgsbtMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvRGdMdlNfQUVwV0lMX25vRHlOSGZhSnVDeHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUCIMA0G
CSqGSIb3DQEBCwUAA4IBAQBNKkUUKf4sYBr/tz7Ac2VvXr8vmOHXT7XQwqizlkDh
IfyfD3qUW5sCb08c4tUo5djg307c0FlH1u+6sFhiHSffHK39w3gItzfRrTzBF35y
kwTkWjwNX/Hb/S3E4dtjexs+eYrWc0j868nUJXyArZAkYX7mG+VyrhMZNCl37TaX
/9GNKx0Vmx+MrDtCI9E31DsdXvR9L7U5JECw980MOq+oRjDMtS4QVILKtfFhMtIO
jG6Z4weSXl2dOHmwocQkw5D6vtJ9Z8QSglXKMm03+/X2kgVJL9hhh+7KWXqr3ZIF
4GqdufFG0T9muhK+vM48YpvDeDJD4PbZpkqd6r3+wc0a
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:22 2026 by rpki-client