Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dnmG1a27PxIHkpmqMx4IHZFT68c.roa
File: dnmG1a27PxIHkpmqMx4IHZFT68c.roa (raw, json)
Hash identifier: tVG4cy49+gsf3lT/iQkRlNbxcAnw/oDkIQ6iMuHz7MM=
Subject key identifier: 76:79:86:D5:AD:BB:3F:12:07:92:99:AA:33:1E:08:1D:91:53:EB:C7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A12F3F365E3F294447431D5C1878310D4F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dnmG1a27PxIHkpmqMx4IHZFT68c.roa
Signing time: Mon 12 Oct 2026 08:33:54 +0000
ROA not before: Mon 12 Oct 2026 08:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 124.198.131.0/24 maxlen: 24
124.198.132.0/24 maxlen: 24
147.90.182.0/24 maxlen: 24
147.90.219.0/24 maxlen: 24
185.19.40.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:3f:36:5e:3f:29:44:47:43:1d:5c:18:78:31:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 12 08:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=767986d5adbb3f12079299aa331e081d9153ebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:0c:9a:35:0b:42:e9:cc:e1:61:9e:f8:88:
08:31:1a:f4:6b:07:e5:24:30:95:a3:72:ef:a3:e0:
a7:52:61:ef:fc:02:5e:fe:78:14:94:b0:d5:e7:15:
ad:ff:fa:fb:3d:7f:ec:78:16:54:b0:2f:9c:9e:b6:
b9:41:8b:55:e8:54:bf:21:26:95:d4:ca:36:8c:2f:
a8:9e:7f:7b:00:3f:e4:07:74:41:ad:ad:1c:0c:c1:
21:3d:7e:fd:f4:b4:0d:72:f4:6d:3f:82:8f:42:70:
33:71:a9:90:07:2d:09:7c:f8:8c:cf:3d:64:72:02:
8f:07:29:cb:3d:87:36:4a:8d:bc:58:26:d7:8d:6a:
dc:02:18:31:17:60:59:d0:16:68:f2:d9:0c:30:07:
71:b8:94:0b:aa:00:be:61:61:13:0c:11:04:dd:29:
90:84:6c:b1:be:a1:36:f3:44:e7:17:49:16:8c:03:
c5:c9:7c:f9:2c:09:ac:50:be:dc:fe:3e:e2:37:de:
0d:bc:32:4a:c3:56:57:71:bd:fa:ce:33:f8:38:88:
bc:d8:70:72:93:9a:07:c3:51:e4:7f:9a:54:25:14:
61:ad:d0:d0:e9:c7:64:42:ae:8a:7c:7c:88:3c:24:
a7:5f:be:7a:91:5d:17:b7:1b:01:e7:27:56:a8:c1:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:86:D5:AD:BB:3F:12:07:92:99:AA:33:1E:08:1D:91:53:EB:C7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dnmG1a27PxIHkpmqMx4IHZFT68c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.131.0-124.198.132.255
147.90.182.0/24
147.90.219.0/24
185.19.40.0/24
203.188.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:32:94:79:25:08:17:5c:7c:1a:9c:c0:7e:a5:7d:11:06:ee:
89:90:81:6f:32:cc:9f:13:1d:1e:e5:95:cd:ec:46:a0:b8:77:
77:d8:22:04:1b:ce:14:a8:44:ed:0b:7d:d5:18:55:b0:8d:9f:
9d:bf:be:94:ab:4d:71:9e:06:35:6f:d1:fa:02:fe:41:6e:52:
fe:18:6f:49:c8:38:50:9b:40:2e:38:5d:4c:18:6f:fe:9c:c8:
a7:25:ae:18:d7:8e:04:88:35:70:2b:6d:3a:b4:d6:03:df:fd:
40:a4:3c:37:34:ef:01:4f:ce:2c:a7:3e:6b:e6:e0:8d:f5:56:
30:d0:a6:58:66:ea:f3:6b:f4:07:3e:d5:f8:3c:7e:0f:d2:22:
78:6b:aa:b9:21:55:45:19:7e:40:d4:60:00:5e:00:77:76:36:
b2:d0:aa:75:d1:0f:f6:05:6b:e5:9c:64:11:25:50:ba:7a:93:
56:b0:9f:5d:8e:c5:48:e8:80:c3:ec:51:1d:fb:a1:4f:46:6c:
8d:98:83:45:39:4d:d9:d8:87:a6:eb:f8:14:54:14:71:ab:bc:
70:a5:96:a8:9d:d4:af:32:7b:a2:37:e7:3b:5c:48:c1:fe:6a:
16:f7:aa:9d:bd:cd:9a:3a:73:43:e1:0b:25:cb:e4:c1:a6:14:
7b:a5:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:06:35 2026 by rpki-client