Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DFuwElblpc-61INcAUywqz8qpq0.roa
File: DFuwElblpc-61INcAUywqz8qpq0.roa (raw, json)
Hash identifier: bwIoP+RLb2j6w0rLwBA9MEpk/EXA5uT/RZOFO7znja0=
Subject key identifier: 0C:5B:B0:12:56:E5:A5:CF:BA:D4:83:5C:01:4C:B0:AB:3F:2A:A6:AD
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA677290DB150944E390ECFD32A1C962E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DFuwElblpc-61INcAUywqz8qpq0.roa
Signing time: Tue 28 Jul 2026 02:04:14 +0000
ROA not before: Tue 28 Jul 2026 02:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 212.189.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:77:29:0d:b1:50:94:4e:39:0e:cf:d3:2a:1c:96:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 28 02:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c5bb01256e5a5cfbad4835c014cb0ab3f2aa6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:f0:6e:f8:97:88:c2:d5:38:90:2a:6d:6f:
eb:0b:c6:f6:66:ff:04:2d:50:8d:09:7d:06:32:f7:
85:61:0d:6d:a9:d6:c3:28:bf:36:9d:b1:6b:72:6b:
da:e8:7d:62:b4:8a:f1:ff:21:2c:63:b0:01:a0:d9:
c8:3a:7e:ad:62:0a:1a:02:79:6c:4c:1a:26:22:b7:
37:a5:d0:26:11:49:b1:a8:c4:03:78:e9:45:f8:5b:
b2:2d:e0:bf:20:c0:c9:ed:9e:fc:cc:10:36:f8:4d:
4e:58:77:be:47:c9:db:94:ba:b3:31:d4:9d:67:6e:
e0:17:c9:94:78:1c:34:aa:7f:9f:23:87:84:17:f6:
54:8b:3b:22:40:fb:f5:66:ae:e5:90:e0:66:39:5e:
8b:ed:84:10:8c:41:ca:bd:ec:a0:b1:67:77:24:f6:
e2:bf:aa:11:b5:75:d9:72:43:51:e5:00:9f:7b:2e:
e2:bd:ae:69:b6:31:e7:09:8c:23:71:42:e1:6b:b3:
24:75:9e:95:2d:84:51:c5:83:cc:32:ed:c0:b7:37:
f2:05:69:27:34:f0:6d:3b:43:fc:93:d5:af:66:56:
ac:fe:5c:d8:b9:6c:6d:fa:a5:5b:5e:b4:c5:46:c9:
5d:13:29:d1:d9:f8:65:2a:fd:c5:6f:f9:e8:7e:d9:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:B0:12:56:E5:A5:CF:BA:D4:83:5C:01:4C:B0:AB:3F:2A:A6:AD
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DFuwElblpc-61INcAUywqz8qpq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:cb:70:80:31:75:5c:0d:ec:ba:fc:23:3d:85:f3:1a:62:40:
75:e9:e6:3b:4c:b6:03:c4:6f:06:38:e2:ee:5b:74:c7:d5:f9:
b0:90:bc:5e:93:a0:6d:27:74:43:1a:ca:1f:dc:93:18:88:76:
0f:82:c9:5e:d9:b2:8f:98:e7:9b:d3:c7:33:b1:72:81:29:d9:
a9:9a:bf:0e:4c:5f:a5:f0:df:fb:8b:0d:ad:fe:31:78:6a:79:
dd:f2:11:e4:86:94:93:33:be:e8:f1:db:f6:d3:9c:28:b0:4e:
d3:de:b2:73:1f:31:50:1c:54:20:b8:8c:42:d0:c5:d0:2c:f4:
37:ac:59:21:0e:c3:b2:d8:24:4a:27:34:4d:82:85:fa:e8:6b:
09:ec:25:34:40:69:c8:12:00:4e:78:42:3b:d9:40:97:a1:18:
a5:06:7b:33:58:e1:61:38:53:6f:45:75:62:1c:7d:55:9d:6f:
46:9d:88:bd:a0:d9:a0:b2:01:ee:38:c0:06:f1:7b:d9:b8:63:
fb:5a:b3:7f:51:f4:3a:43:ad:73:9d:3c:02:7f:47:7c:60:82:
96:bd:95:e2:e2:28:e8:4b:1d:54:90:79:f0:70:1f:ec:37:03:
65:2c:b1:be:de:5a:2b:0d:12:c8:85:1e:d3:75:85:fc:45:d1:
07:2f:fc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:48 2026 by rpki-client