Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DxhjENvG5OYUJvVZsM8qLwRgMX8.roa
File: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (raw, json)
Hash identifier: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=
Subject key identifier: 0F:18:63:10:DB:C6:E4:E6:14:26:F5:59:B0:CF:2A:2F:04:60:31:7F
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019C94BB93BF7DAEB123E08F90CD84016164
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DxhjENvG5OYUJvVZsM8qLwRgMX8.roa
Signing time: Wed 25 Feb 2026 12:17:26 +0000
ROA not before: Wed 25 Feb 2026 12:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211944
IP address blocks: 93.185.153.0/24 maxlen: 32
2a00:8740:2200::/40 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:bb:93:bf:7d:ae:b1:23:e0:8f:90:cd:84:01:61:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Feb 25 12:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f186310dbc6e4e61426f559b0cf2a2f0460317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:28:de:25:36:2a:fe:e6:2a:dc:be:2c:ba:
35:15:a5:36:c4:52:f5:4e:a3:ae:d3:62:37:4b:f5:
38:97:eb:d9:46:64:69:1a:03:4a:8f:04:f9:34:4f:
e4:a3:11:44:db:2d:e4:bb:d3:04:f9:2c:68:c2:c8:
53:79:7c:20:22:cb:3f:6c:31:fc:59:a1:91:55:7c:
2d:25:00:77:16:49:73:04:0b:cd:e3:64:09:a9:60:
c1:2f:dc:bd:34:15:8c:4a:43:89:4e:2d:c0:22:a6:
7e:6b:13:c5:37:85:bd:46:ea:51:1a:f1:44:20:98:
3e:87:c7:1d:89:bd:80:72:c4:ed:b0:ed:58:f7:9b:
5d:fb:c2:46:40:36:7e:64:69:f6:89:a1:39:37:95:
94:13:f7:e2:81:f8:87:b2:5d:f6:1e:d0:e0:03:50:
83:d5:eb:8b:4d:0b:61:fc:6a:49:af:bc:6c:85:6b:
c5:ba:da:d8:16:04:81:18:f5:c7:39:68:91:a9:93:
10:f9:7a:2c:05:dc:de:65:4f:1f:1d:9d:1c:aa:eb:
54:d8:2e:c4:45:80:57:3f:84:c8:76:a6:a9:ec:cf:
23:28:b1:59:4a:a5:27:0f:53:45:f0:6d:c9:5a:84:
43:ac:fd:09:97:ba:e9:76:2c:0f:d9:ff:b3:89:d3:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:63:10:DB:C6:E4:E6:14:26:F5:59:B0:CF:2A:2F:04:60:31:7F
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DxhjENvG5OYUJvVZsM8qLwRgMX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.153.0/24
IPv6:
2a00:8740:2200::/40
Signature Algorithm: sha256WithRSAEncryption
37:a8:cd:87:b3:73:8f:e4:ec:9a:f3:5e:51:78:5b:0d:aa:a3:
eb:72:c6:51:f8:19:f5:ad:9a:24:e1:1a:bb:51:0e:a8:cf:3c:
ad:2c:3d:81:2d:3e:6c:a1:c9:5b:c5:07:a3:bb:32:4a:c2:e5:
06:98:fe:a9:ab:90:53:25:48:ee:70:75:06:9f:ae:15:73:3a:
31:d3:2d:8d:25:5a:ce:b6:37:13:fc:0a:bd:cb:eb:09:21:de:
a5:fa:b6:ea:dd:06:b5:3e:fc:de:53:70:56:b0:1d:0d:c7:24:
42:29:b3:f9:dc:d9:df:26:49:31:46:f4:34:e5:cc:ef:ef:dc:
a6:0a:16:fc:37:2c:59:4d:f3:11:99:10:db:e8:7c:c2:34:91:
3c:e3:51:ad:ca:db:87:1e:4f:3c:9e:99:52:ef:6e:3d:70:80:
78:14:5a:b1:c4:76:35:25:ee:b2:67:56:35:8b:57:1f:73:8b:
7c:2b:0c:3e:28:90:4d:00:6f:41:57:c7:10:95:3d:aa:f9:be:
51:73:5b:5d:00:50:e3:22:f4:d9:f4:a2:d3:3f:1b:27:e8:f1:
a5:1d:dd:5b:af:9c:6e:fc:fe:2d:7e:ea:29:cf:5c:98:8a:3e:
b6:62:81:a2:d3:e0:15:9d:31:45:ec:6d:cc:82:18:72:5d:a9:
25:66:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:26 2026 by rpki-client