Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/DwB6hCkbMaFBKRZqWfmt03tZkaQ.roa
File: DwB6hCkbMaFBKRZqWfmt03tZkaQ.roa (raw, json)
Hash identifier: lu5eBLytjQ0/qRj8GGmMDiIsTss70m+efSZgH9kQHuY=
Subject key identifier: 0F:00:7A:84:29:1B:31:A1:41:29:16:6A:59:F9:AD:D3:7B:59:91:A4
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019D67EA5DA47EB7674413D9C6BEFFC4E424
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/DwB6hCkbMaFBKRZqWfmt03tZkaQ.roa
Signing time: Tue 07 Apr 2026 12:28:25 +0000
ROA not before: Tue 07 Apr 2026 12:28:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 79.135.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:ea:5d:a4:7e:b7:67:44:13:d9:c6:be:ff:c4:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Apr 7 12:28:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f007a84291b31a14129166a59f9add37b5991a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:ab:41:da:64:ee:7f:d1:93:d4:91:e6:ff:
c6:e9:42:4b:37:f9:41:78:38:39:e5:56:ba:aa:ac:
77:f5:ed:01:ed:43:5c:38:27:b0:2c:ee:00:69:a5:
64:53:ef:20:2a:ba:25:bb:82:e9:ae:52:6c:d8:fd:
4b:1b:9e:94:ea:ee:1f:eb:d6:fa:de:df:af:b2:13:
44:01:11:20:92:5f:67:74:d3:9f:e2:cd:53:8a:fb:
f0:b1:c4:86:c0:a3:a2:55:72:ba:11:9c:f6:7f:0a:
fb:b5:a8:12:85:b7:ac:96:10:7b:57:6d:86:86:f7:
50:79:63:7d:69:73:a9:c8:0f:06:80:19:0c:95:38:
69:b4:e1:c1:7a:cd:29:8b:25:26:50:09:1c:4d:97:
24:c2:14:8d:f7:75:ae:cd:eb:2e:dd:aa:34:0f:a3:
1f:e5:80:7f:20:cc:66:6c:f4:b2:33:03:46:cb:2e:
bc:e0:b1:6b:79:67:b2:bc:05:d9:37:78:02:e6:b5:
80:c2:e8:0c:69:32:ed:d7:fc:81:86:24:fb:4f:ba:
fe:f4:53:4c:f6:07:32:42:92:29:6a:c1:f5:04:a0:
93:a5:bd:40:bd:91:50:e2:a6:04:11:24:35:1e:f3:
5e:17:3a:21:65:47:b7:31:f8:31:94:3f:d8:8f:de:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:00:7A:84:29:1B:31:A1:41:29:16:6A:59:F9:AD:D3:7B:59:91:A4
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/DwB6hCkbMaFBKRZqWfmt03tZkaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.102.0/23
Signature Algorithm: sha256WithRSAEncryption
36:86:03:8e:30:6e:1f:f3:24:48:50:6d:36:40:ae:fb:f6:af:
dd:a9:04:4d:e2:94:10:1a:0f:1e:f6:4b:32:64:7e:a3:9c:58:
17:c9:54:c8:75:8e:ff:8c:fc:d6:cf:e3:48:e0:56:f9:c3:13:
5d:14:f9:a8:0a:d3:58:6d:85:33:a3:ce:81:19:88:8d:95:e1:
98:85:ad:5f:39:6c:2b:36:1e:c0:54:4d:c8:f4:9c:c8:7f:59:
67:91:95:c9:1e:e5:02:9e:e6:55:c7:da:31:d4:b5:58:ac:2d:
92:e8:1d:bc:f5:15:bb:aa:a2:d9:ff:ed:e2:29:1e:e9:66:18:
d9:10:a2:e2:30:98:3a:ae:e1:64:f1:db:04:af:1d:44:03:e3:
81:25:88:0e:bc:f1:c7:70:76:d7:71:75:7b:d8:04:03:80:02:
47:a5:cc:24:cd:0f:00:0d:fa:a7:c0:df:5a:4f:6c:81:3b:b8:
29:66:14:61:42:3d:c8:0c:1c:79:df:f0:67:94:7e:e4:02:bc:
18:c7:cd:75:62:50:c4:ef:8c:b7:b8:d3:c9:d0:d4:2e:0b:a8:
ba:af:0a:72:87:12:1d:8a:cb:66:f0:5e:b9:66:43:e5:aa:d1:
53:f0:cd:c2:b0:a7:2a:62:22:10:cf:66:aa:be:2a:0b:8c:72:
03:81:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:43 2026 by rpki-client