Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/dvF6DGgeQycYzO0PrasV3XyKjgQ.roa
File: dvF6DGgeQycYzO0PrasV3XyKjgQ.roa (raw, json)
Hash identifier: y+mb9vuI2SRMIEXtA5lNvvJhpmo6Layb3vm++u5RXUI=
Subject key identifier: 76:F1:7A:0C:68:1E:43:27:18:CC:ED:0F:AD:AB:15:DD:7C:8A:8E:04
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019C016A4FD85255C06FFF644D5CA564816D
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/dvF6DGgeQycYzO0PrasV3XyKjgQ.roa
Signing time: Tue 27 Jan 2026 21:44:30 +0000
ROA not before: Tue 27 Jan 2026 21:44:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205634
IP address blocks: 144.124.216.0/24 maxlen: 24
144.124.217.0/24 maxlen: 24
144.124.218.0/24 maxlen: 24
144.124.219.0/24 maxlen: 24
144.124.223.0/24 maxlen: 24
158.94.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:01:6a:4f:d8:52:55:c0:6f:ff:64:4d:5c:a5:64:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Jan 27 21:44:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76f17a0c681e432718cced0fadab15dd7c8a8e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:68:8d:df:64:57:a9:ba:38:82:79:5b:7f:
52:32:11:22:b5:82:cb:e4:77:4a:aa:19:9d:81:79:
9a:2a:7d:7d:4b:24:df:f2:25:24:c0:0f:34:f1:26:
3a:e9:fb:76:65:37:43:01:7e:ad:fe:61:91:3d:ba:
3c:4b:58:4a:57:4c:38:94:10:64:fe:90:98:86:c4:
6b:5d:c7:a8:26:18:fe:2c:11:97:f5:55:57:b2:bd:
6c:75:45:00:1a:8d:2e:66:62:98:6e:60:2f:8f:9a:
4b:b9:cd:2f:ea:24:d5:4e:38:12:5d:c8:e7:15:f3:
68:c7:01:15:6a:75:6b:5b:a7:a2:27:30:6b:ca:25:
85:16:db:28:d9:23:91:5d:5b:57:fc:31:27:ba:dc:
cd:41:c7:22:d3:3e:86:63:64:8e:09:30:25:fb:ee:
f2:cb:4d:f7:2c:de:c1:35:68:91:b3:b3:a4:28:18:
48:6e:4f:4e:5b:6e:a4:ac:e3:b3:20:24:a8:3e:d7:
a2:bb:ad:fd:75:66:68:82:bd:06:2a:14:bb:fd:92:
83:68:96:54:f3:81:c7:cc:fd:c4:de:fe:50:13:b4:
44:be:b0:67:7c:e2:34:67:52:1a:79:dc:e1:4c:eb:
01:5a:19:f8:44:2f:93:78:0d:90:0f:5e:0d:7e:a9:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F1:7A:0C:68:1E:43:27:18:CC:ED:0F:AD:AB:15:DD:7C:8A:8E:04
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/dvF6DGgeQycYzO0PrasV3XyKjgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.216.0/22
144.124.223.0/24
158.94.213.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d9:b4:86:c4:e1:aa:b0:44:f0:d2:d4:5b:92:68:c5:e9:b4:
1f:87:72:b3:1d:e6:62:6c:56:41:99:10:d5:0b:f8:ac:88:10:
c8:b4:3a:88:92:e6:2f:dd:99:1a:a7:b7:c0:a3:6c:bf:64:d2:
3b:13:33:2f:c2:35:7b:61:e3:a2:ec:99:22:15:fc:6c:87:38:
76:77:ba:e5:c7:37:df:1a:d9:32:12:da:ef:d2:c6:7d:14:19:
73:1a:59:00:79:aa:19:95:94:d1:34:0b:82:50:4f:5c:e5:31:
17:cb:94:bf:a8:e5:32:a6:90:cb:9e:31:19:87:42:28:7a:25:
df:71:2a:cf:9e:97:35:09:63:01:45:1a:6c:42:2c:7c:71:41:
66:42:29:b3:2c:69:87:f2:7d:39:4a:83:f0:36:34:42:ee:f8:
3e:6b:c3:70:10:5b:74:a4:72:95:68:36:c5:ed:72:6c:24:77:
ea:2c:0c:8b:fa:a2:52:d0:84:c6:03:bc:8a:bb:62:98:2a:c5:
70:61:45:6a:9d:ae:7c:10:9b:58:fb:77:aa:10:6e:10:c3:ec:
67:5c:ee:db:06:21:a8:a9:1d:33:c0:55:13:ab:57:57:94:ee:
6d:13:50:5c:35:9a:62:a3:08:5e:76:60:1c:74:5f:2e:93:47:
6c:ae:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:22 2026 by rpki-client