Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/DxXB1sVQddkWlIQL7M2Ft26ZYDs.roa
File: DxXB1sVQddkWlIQL7M2Ft26ZYDs.roa (raw, json)
Hash identifier: aIKudkaShc6wqjcTHt+BKsEmLCkGpXtihIIuVaZi7po=
Subject key identifier: 0F:15:C1:D6:C5:50:75:D9:16:94:84:0B:EC:CD:85:B7:6E:99:60:3B
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 01A0C2884BCE38493870E954EA2B6882D55F
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/DxXB1sVQddkWlIQL7M2Ft26ZYDs.roa
Signing time: Mon 21 Sep 2026 05:55:07 +0000
ROA not before: Mon 21 Sep 2026 05:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50670
IP address blocks: 1.179.88.0/21 maxlen: 24
59.152.88.0/21 maxlen: 24
77.91.136.0/21 maxlen: 24
103.216.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:88:4b:ce:38:49:38:70:e9:54:ea:2b:68:82:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Sep 21 05:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f15c1d6c55075d91694840beccd85b76e99603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2f:15:54:4b:f9:c2:8b:e8:fe:54:cb:6e:77:
bc:c1:9f:7c:90:9f:3b:0e:29:1b:91:31:56:f8:70:
e5:4f:6d:b9:ed:3c:5b:e1:5a:e5:b3:82:f7:e6:04:
b5:d6:b4:c8:14:ed:e0:e5:28:98:f9:66:32:e2:64:
84:6a:5b:96:00:5d:f2:d8:aa:bc:63:9f:23:b5:a9:
23:c5:0c:c4:66:76:7b:31:16:a6:1c:92:79:ee:37:
9b:1e:40:ba:31:b4:94:63:8f:c0:06:7e:c9:06:2e:
74:27:d8:db:b3:ad:18:5b:3c:73:0e:ea:b3:bd:d8:
2d:6f:ed:50:6b:14:19:07:4f:07:6e:ab:03:24:59:
51:b3:ea:83:22:b6:5d:fb:f4:53:44:bc:92:27:cd:
3c:2c:58:19:11:e7:c7:06:75:b8:50:86:1c:03:10:
37:a7:46:10:a5:0d:73:14:17:12:51:db:52:41:67:
cf:97:bf:ce:a9:b0:08:74:0f:65:28:a6:bb:eb:3c:
a7:7a:5f:1b:2f:96:8c:b2:a8:cd:14:07:ff:7a:3d:
cc:82:9c:de:31:14:c5:4c:a2:d2:97:18:4e:ed:f8:
1b:de:6c:18:b5:6f:b4:7d:67:4b:c0:63:8b:cc:31:
42:3e:2b:42:89:2e:4d:7e:26:04:0d:90:36:10:9d:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:C1:D6:C5:50:75:D9:16:94:84:0B:EC:CD:85:B7:6E:99:60:3B
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/DxXB1sVQddkWlIQL7M2Ft26ZYDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.88.0/21
59.152.88.0/21
77.91.136.0/21
103.216.184.0/22
Signature Algorithm: sha256WithRSAEncryption
84:89:a2:02:20:a6:a4:cd:46:1f:a5:f7:38:de:06:64:5e:ca:
4e:b0:60:db:77:a8:7b:89:c3:2b:7a:f5:2d:5f:e8:26:cb:7c:
c5:c9:19:08:1f:b1:10:35:d3:04:38:bb:d0:d7:f2:0c:7a:fd:
0a:ef:3b:f3:7e:e9:04:aa:a2:ef:b7:3f:25:46:8b:3e:fd:82:
0e:1e:7a:67:e3:9c:13:09:4e:bd:30:26:26:5c:bf:5f:0a:3d:
98:9d:60:8d:13:61:7a:99:f9:ff:d5:7a:86:a1:27:e9:dc:b3:
cf:30:24:ba:a7:b2:09:d6:62:66:9f:0b:48:e3:40:e4:5e:39:
ce:f6:07:aa:84:16:05:b4:c9:6a:8c:4e:4d:99:4f:10:95:e3:
ca:c6:87:3b:b4:a1:bc:92:81:1f:57:cd:67:5f:7f:29:a8:50:
39:fa:ab:b4:fe:18:bb:d7:5a:fd:b2:15:ae:2c:f4:9e:3d:60:
8a:ac:2d:d8:ae:16:43:8c:23:d3:3f:47:f7:28:7d:d0:5a:60:
99:5a:8c:9e:32:ab:f3:03:2d:b4:4e:6a:4e:94:9d:70:7b:d0:
66:6d:14:4f:e9:95:b5:38:e7:3d:ca:22:f5:e1:a2:ac:6f:dd:
d7:d9:12:dc:69:9b:7b:94:f0:ee:fd:24:57:ad:62:0d:a0:10:
a4:2a:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:19 2026 by rpki-client