Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/dkEx4YNEDY49gU4Bi8O4shVb0qE.roa
File: dkEx4YNEDY49gU4Bi8O4shVb0qE.roa (raw, json)
Hash identifier: 1Zg+GYUEr0f6jb4dD/9ZTpGvZlRVE8LmcxRY4Ssltp0=
Subject key identifier: 76:41:31:E1:83:44:0D:8E:3D:81:4E:01:8B:C3:B8:B2:15:5B:D2:A1
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 01A09EE944528204D8F2A54E73DE3060B5EA
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/dkEx4YNEDY49gU4Bi8O4shVb0qE.roa
Signing time: Mon 14 Sep 2026 07:54:42 +0000
ROA not before: Mon 14 Sep 2026 07:54:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 31.200.0.0/17 maxlen: 24
62.29.0.0/17 maxlen: 24
83.66.0.0/16 maxlen: 24
94.120.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:e9:44:52:82:04:d8:f2:a5:4e:73:de:30:60:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Sep 14 07:54:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=764131e183440d8e3d814e018bc3b8b2155bd2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:4c:f1:2c:57:66:67:ae:d7:c7:51:5e:e0:
d8:6b:bf:02:bb:0d:b3:21:02:03:92:b0:ed:92:0f:
1e:35:71:da:fd:64:52:e7:64:9a:66:7a:27:56:99:
be:b1:a2:b9:05:c1:d4:08:48:3a:aa:c9:0a:45:d2:
fc:87:9c:3c:2f:42:b5:98:58:cd:45:c5:46:8c:1d:
a4:ae:22:15:7c:12:01:b7:4c:a8:d3:54:a8:6b:39:
df:9d:74:83:c3:b0:d5:b6:58:65:8a:3d:33:2a:e4:
83:58:80:a8:c1:f1:2a:bf:68:30:7b:e9:30:fc:b5:
4b:bf:50:f5:9e:12:80:14:28:b4:89:68:6d:93:4e:
cd:23:2a:c7:f3:ec:22:5c:94:99:a4:64:23:80:13:
4a:0b:bf:01:b4:5e:06:c8:38:d6:87:73:2b:ea:13:
5b:56:f8:0e:8f:97:96:b7:b4:48:dd:14:d7:67:ef:
be:8b:60:aa:f8:d9:54:f0:55:8d:7a:8f:9b:ea:38:
cd:2a:50:8c:58:06:8a:7d:09:fb:bd:02:b1:73:5b:
4c:bf:aa:ce:0c:93:a9:22:9f:96:72:98:6f:52:dc:
af:ad:a2:01:e8:71:17:1f:1d:f8:94:60:ff:1f:35:
85:cc:6a:2a:4f:77:14:f3:29:64:0f:c6:e4:cb:0e:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:31:E1:83:44:0D:8E:3D:81:4E:01:8B:C3:B8:B2:15:5B:D2:A1
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/dkEx4YNEDY49gU4Bi8O4shVb0qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.0.0/17
62.29.0.0/17
83.66.0.0/16
94.120.0.0/14
Signature Algorithm: sha256WithRSAEncryption
96:9e:08:53:9e:28:82:2e:b0:0e:a7:4d:e0:31:cc:4d:5a:47:
61:e5:ce:6f:09:dd:37:f0:3a:d0:08:fa:ab:17:60:af:3b:d4:
de:5a:68:3a:d1:03:48:1e:46:56:3e:57:96:0b:d4:cb:45:fc:
7f:40:30:ba:95:10:dc:89:97:93:39:48:11:2a:9e:01:ea:f8:
9b:6e:e5:f2:ea:46:5f:1c:d4:ed:b8:4e:41:f4:b5:90:e5:de:
b3:88:4a:3d:1c:81:3b:70:25:cd:72:00:d6:85:0e:fa:f7:8d:
d7:80:d6:31:96:38:ec:00:4e:2f:c8:7b:3a:da:6d:97:9f:c9:
81:07:3b:a0:46:c1:06:01:1f:8f:c4:37:88:c2:2e:61:9e:b5:
39:fb:d5:f3:b6:ff:d1:fa:60:8d:8b:a8:43:77:8a:71:3d:b0:
1e:db:3f:08:da:38:18:19:29:d5:22:16:f5:3e:87:ef:f4:24:
bb:87:2d:cd:8c:33:1b:76:e7:0f:22:31:d2:e8:34:b7:17:91:
79:81:91:b7:03:d0:98:2b:dd:42:c8:89:9c:e6:00:47:09:eb:
53:92:de:90:ab:4b:1b:f8:8f:ea:d2:38:63:3f:57:8c:4f:fd:
d4:51:0b:58:9e:01:bd:bd:ec:3b:4a:95:49:29:01:42:d0:ca:
d3:d0:2a:64
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAaCe6URSggTY8qVOc94wYLXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjYwOTE0MDc1NDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjQxMzFlMTgzNDQwZDhlM2Q4MTRlMDE4YmMzYjhiMjE1NWJkMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N1M8SxXZmeu18dRXuDYa78Cuw2z
IQIDkrDtkg8eNXHa/WRS52SaZnonVpm+saK5BcHUCEg6qskKRdL8h5w8L0K1mFjN
RcVGjB2kriIVfBIBt0yo01SoaznfnXSDw7DVtlhlij0zKuSDWICowfEqv2gwe+kw
/LVLv1D1nhKAFCi0iWhtk07NIyrH8+wiXJSZpGQjgBNKC78BtF4GyDjWh3Mr6hNb
VvgOj5eWt7RI3RTXZ+++i2Cq+NlU8FWNeo+b6jjNKlCMWAaKfQn7vQKxc1tMv6rO
DJOpIp+WcphvUtyvraIB6HEXHx34lGD/HzWFzGoqT3cU8ylkD8bkyw6g8QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFHZBMeGDRA2OPYFOAYvDuLIVW9KhMB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvZGtFeDRZTkVEWTQ5Z1U0Qmk4TzRzaFZiMHFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAATAWAwQHH8gAAwQH
Ph0AAwMAU0IDAwJeeDANBgkqhkiG9w0BAQsFAAOCAQEAlp4IU54ogi6wDqdN4DHM
TVpHYeXObwndN/A60Aj6qxdgrzvU3lpoOtEDSB5GVj5XlgvUy0X8f0AwupUQ3ImX
kzlIESqeAer4m27l8upGXxzU7bhOQfS1kOXes4hKPRyBO3AlzXIA1oUO+veN14DW
MZY47ABOL8h7Otptl5/JgQc7oEbBBgEfj8Q3iMIuYZ61OfvV87b/0fpgjYuoQ3eK
cT2wHts/CNo4GBkp1SIW9T6H7/Qku4ctzYwzG3bnDyIx0ug0txeReYGRtwPQmCvd
QsiJnOYARwnrU5LekKtLG/iP6tI4Yz9XjE/91FELWJ4Bvb3sO0qVSSkBQtDK09Aq
ZA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:57 2026 by rpki-client