Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/DiwgogasK7UO37wSTbAcUhzQrAQ.roa
File: DiwgogasK7UO37wSTbAcUhzQrAQ.roa (raw, json)
Hash identifier: n0ZKFvtPwV6YDw2aDkVlZj1yZbNh8nm1eJM/OAlY64g=
Subject key identifier: 0E:2C:20:A2:06:AC:2B:B5:0E:DF:BC:12:4D:B0:1C:52:1C:D0:AC:04
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 019E75A8F30794E080E5B0E7BA8C1AC2443E
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/DiwgogasK7UO37wSTbAcUhzQrAQ.roa
Signing time: Fri 29 May 2026 21:34:26 +0000
ROA not before: Fri 29 May 2026 21:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51115
IP address blocks: 81.161.98.0/23 maxlen: 24
132.243.176.0/22 maxlen: 24
178.248.232.0/21 maxlen: 24
185.65.148.0/22 maxlen: 24
185.94.108.0/22 maxlen: 24
2a03:70c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:a8:f3:07:94:e0:80:e5:b0:e7:ba:8c:1a:c2:44:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: May 29 21:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e2c20a206ac2bb50edfbc124db01c521cd0ac04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:4f:b9:02:8a:4f:00:fa:fb:fc:c9:3d:76:
8a:2a:73:2a:06:26:11:c2:28:7c:cd:d1:a3:e1:a4:
18:8f:27:8c:b2:a0:69:6b:e6:9a:a6:5d:2d:81:33:
60:9f:39:63:0d:db:7f:67:f3:c3:f9:e3:fa:a4:95:
d5:be:28:19:9b:c4:06:c9:8a:5d:4b:a1:85:c3:db:
eb:0c:5f:e5:4c:ab:8d:a7:3c:05:1b:ef:49:72:9e:
2b:1c:6e:0e:cf:34:66:8f:ab:ff:91:9f:31:e6:83:
81:f9:06:10:6c:28:4c:74:0e:85:ac:f0:2e:00:a5:
ca:7e:c6:19:4e:2b:f5:2e:e0:8f:c0:a8:f6:aa:3e:
97:cc:05:31:2d:59:9b:29:29:01:66:af:a4:68:5a:
09:42:68:1e:8a:a4:b1:dd:ea:6a:f3:67:70:5b:17:
bc:5a:e7:8c:52:6c:10:1a:f7:3a:22:f7:5f:29:13:
dc:9f:c7:1b:e7:5f:8e:c2:74:43:8a:3d:7d:c6:fb:
65:fa:cd:3b:40:97:f6:e7:3b:f6:a7:12:01:c6:da:
b7:c6:28:4b:68:25:2c:df:b9:5d:8a:b3:a3:89:62:
0f:04:90:1e:06:41:ad:4e:ca:62:a4:8f:d8:dc:c7:
a6:94:95:53:0e:ff:fc:4a:29:de:fd:4a:39:ec:21:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2C:20:A2:06:AC:2B:B5:0E:DF:BC:12:4D:B0:1C:52:1C:D0:AC:04
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/DiwgogasK7UO37wSTbAcUhzQrAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.98.0/23
132.243.176.0/22
178.248.232.0/21
185.65.148.0/22
185.94.108.0/22
IPv6:
2a03:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
71:05:b4:b7:35:2c:ae:0a:ac:fd:55:07:3a:94:98:5a:4a:fe:
9a:f3:c0:74:42:c0:99:a3:cd:93:eb:7e:6a:c1:a2:27:57:20:
ec:d8:94:15:15:d2:b1:d6:ee:2a:9a:1e:dc:e2:cc:d0:1b:3c:
93:6d:fc:f0:42:78:ff:af:86:1b:35:12:b4:87:bc:eb:e8:fb:
05:2b:f1:8f:c9:9c:a7:e9:a2:df:b7:3b:2a:e5:a5:c3:42:c0:
ef:06:30:06:5d:0f:77:03:dc:86:cf:65:c7:77:30:42:53:31:
bd:28:0f:38:4b:08:55:de:44:01:da:ea:9e:4f:11:46:a8:6f:
a8:89:1c:f0:40:c3:3c:2d:f0:4e:64:d5:56:aa:f4:ef:c0:09:
d8:a2:63:74:22:c8:28:a4:a5:26:29:c0:a1:33:e2:d4:62:db:
a6:c6:ed:c8:66:ea:c0:1c:85:f9:e0:43:a7:eb:69:4c:8b:24:
91:ca:02:76:1f:61:bd:15:39:75:14:22:6f:f8:84:60:2a:43:
ae:2d:ad:bc:6a:50:b1:ef:6d:9d:91:20:5b:d5:ef:8e:de:41:
d2:0e:7e:d4:16:12:62:6c:9a:67:0e:bb:2c:6e:6e:4c:4f:1a:
7c:8c:a1:20:a5:68:21:29:1a:94:44:40:56:48:65:f1:38:c5:
3d:f7:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:36 2026 by rpki-client