Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dDkdnS_DgizAKU-YVbEl4zCoqwI.roa
File: dDkdnS_DgizAKU-YVbEl4zCoqwI.roa (raw, json)
Hash identifier: 1sMVH0e6a3bvvWJf/WjRLTcaBKLs/C+SNjijNcT6NJk=
Subject key identifier: 74:39:1D:9D:2F:C3:82:2C:C0:29:4F:98:55:B1:25:E3:30:A8:AB:02
Certificate issuer: /CN=7660143814c34d292c75abcdb45f81819534edc1
Certificate serial: 019B797ECCC7F9F9422303781171DE7138F7
Authority key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dDkdnS_DgizAKU-YVbEl4zCoqwI.roa
Signing time: Thu 01 Jan 2026 12:18:31 +0000
ROA not before: Thu 01 Jan 2026 12:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29478
IP address blocks: 2001:67c:14c8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:cc:c7:f9:f9:42:23:03:78:11:71:de:71:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7660143814c34d292c75abcdb45f81819534edc1
Validity
Not Before: Jan 1 12:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74391d9d2fc3822cc0294f9855b125e330a8ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:71:e8:8e:2c:6f:b1:bc:e8:09:f5:8f:4c:
b5:38:6c:02:6e:1d:42:21:33:dd:ba:26:6e:2f:0d:
4d:7d:62:66:a0:86:51:15:0c:34:96:af:5e:14:65:
9c:a9:08:c8:28:40:1c:99:b6:95:9d:00:fa:c0:97:
4f:f3:4d:63:37:73:21:d1:6e:38:d8:ba:da:bd:51:
c4:a3:b0:cd:b9:f3:d3:af:71:1d:3b:af:c3:88:77:
c8:de:ae:1f:81:2d:5b:aa:5f:11:60:88:53:b0:86:
1b:57:fa:b5:38:34:bd:68:eb:2f:29:ad:97:30:48:
9d:68:19:34:bf:11:58:33:eb:a6:7a:cc:ed:16:59:
4f:23:f2:5d:0c:6e:60:49:7b:b8:22:81:ec:3d:09:
07:be:e5:d7:0a:15:02:01:55:bc:7c:01:5f:47:9a:
97:3e:ea:18:1d:ba:0a:a3:d8:fc:02:e2:8a:74:9a:
83:75:7d:6d:f8:cd:3e:6b:f2:f6:09:6e:d2:eb:60:
03:2e:00:d3:d3:3c:db:e6:ab:11:0d:7d:eb:93:4c:
ef:23:c9:91:d4:50:10:a3:96:87:2a:c4:4c:9d:2f:
75:15:b1:1a:36:ae:ed:ca:ad:eb:97:9b:73:e4:7c:
90:dc:24:c4:d9:0d:28:a2:4f:e7:3f:f3:8f:e4:92:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:39:1D:9D:2F:C3:82:2C:C0:29:4F:98:55:B1:25:E3:30:A8:AB:02
X509v3 Authority Key Identifier:
keyid:76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dDkdnS_DgizAKU-YVbEl4zCoqwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:14c8::/47
Signature Algorithm: sha256WithRSAEncryption
24:a3:36:b6:59:d2:8c:eb:db:38:12:70:ca:f1:14:bd:f2:dc:
93:c0:77:73:63:7b:7c:35:bc:11:f2:8d:af:b9:18:97:af:d5:
30:bf:0a:24:2e:92:97:73:58:87:94:30:b3:02:76:da:74:da:
49:52:c0:83:65:0a:e5:74:76:81:d7:83:94:2b:09:34:52:20:
89:2a:7d:4e:05:55:c4:dd:e1:a7:07:38:f0:a0:52:00:ae:74:
76:4e:34:91:fa:f9:e3:a8:94:0a:36:82:28:c2:dc:bf:34:29:
99:9a:86:fe:a6:f2:6e:df:8a:61:b6:10:c5:02:fd:5d:3f:da:
d1:e7:19:19:4a:a7:cd:b7:77:c8:8b:1a:fc:8a:60:14:0a:0a:
a7:6e:36:82:c8:c6:a9:9d:d8:4f:33:ac:59:77:00:fe:e6:e3:
53:04:53:f3:a0:f9:4c:71:1b:5d:80:28:4e:7e:25:04:5c:23:
7b:56:f9:27:55:60:3b:0c:13:e2:a2:26:f4:7f:6d:82:aa:7a:
60:1c:07:2f:e8:04:cf:67:71:af:29:7a:93:5d:96:b2:10:3d:
92:fe:96:cd:e1:1d:62:45:0c:15:03:03:e0:5e:42:df:bb:41:
87:d2:9e:81:fa:56:49:40:88:6d:48:6a:58:59:bb:b4:2d:35:
0c:81:a0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:46 2026 by rpki-client