Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/DPKvWUzJG61KaC68guvLxBEpIxs.roa
File: DPKvWUzJG61KaC68guvLxBEpIxs.roa (raw, json)
Hash identifier: WEuAb6V00NYiqaQluRZ4bK9gn9Tpjn8DHunrHwop33c=
Subject key identifier: 0C:F2:AF:59:4C:C9:1B:AD:4A:68:2E:BC:82:EB:CB:C4:11:29:23:1B
Certificate issuer: /CN=bb075faa0a87455c5c022a90ad45f2c5f3cf9212
Certificate serial: 019F23686F9B75BA1E40454775D634DD922E
Authority key identifier: BB:07:5F:AA:0A:87:45:5C:5C:02:2A:90:AD:45:F2:C5:F3:CF:92:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/DPKvWUzJG61KaC68guvLxBEpIxs.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44945
IP address blocks: 78.108.16.0/20 maxlen: 20
185.43.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:9b:75:ba:1e:40:45:47:75:d6:34:dd:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb075faa0a87455c5c022a90ad45f2c5f3cf9212
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cf2af594cc91bad4a682ebc82ebcbc41129231b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:58:0d:d7:05:e3:dd:ee:13:17:e1:87:98:
63:a7:30:df:6e:43:b2:02:17:a0:d7:87:f7:e4:97:
09:fb:50:96:9e:bd:0b:88:08:d1:56:d0:66:df:0f:
69:1c:ab:f9:36:e8:b7:73:cb:44:7f:97:33:26:7f:
c3:5b:a3:31:96:81:1a:a6:99:29:3a:da:be:f5:71:
22:68:d7:00:c6:49:c4:2f:50:82:23:b1:07:94:9b:
e6:22:a0:66:1b:6a:19:92:0e:f2:23:37:48:49:fd:
79:3a:b5:39:ae:56:33:ee:99:c3:6e:95:25:bf:ad:
6c:43:04:2b:9f:c3:e0:f1:5e:3e:86:fb:81:08:37:
84:45:03:57:78:a6:b4:d0:4a:a8:38:c9:9d:29:26:
5c:0b:f4:21:13:b5:63:ac:51:60:24:bc:65:5f:30:
f2:a0:c0:f3:61:68:7b:39:f2:4a:7b:c7:9c:6e:c5:
c2:2e:9c:be:22:7b:a8:b7:82:1b:8c:89:e0:1d:93:
34:cb:d0:b8:7e:e0:c6:73:48:1d:aa:84:43:75:ab:
ad:09:24:a4:f2:5c:e2:67:af:c4:a5:ac:ba:b7:4e:
47:0a:b6:32:33:e6:21:74:db:54:b7:00:9f:a5:b1:
57:f7:fc:4a:1d:f6:ad:81:68:e0:91:e2:2c:20:8e:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:AF:59:4C:C9:1B:AD:4A:68:2E:BC:82:EB:CB:C4:11:29:23:1B
X509v3 Authority Key Identifier:
keyid:BB:07:5F:AA:0A:87:45:5C:5C:02:2A:90:AD:45:F2:C5:F3:CF:92:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/DPKvWUzJG61KaC68guvLxBEpIxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.16.0/20
185.43.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a2:76:ac:ed:92:9a:9c:d4:5c:bd:43:66:82:f4:e7:b0:5e:
d4:b3:f1:15:3e:4b:fb:9f:b8:ff:dc:e2:6d:c2:27:6c:34:61:
08:f2:e4:57:a9:c7:8a:9a:80:4b:b4:c8:73:03:43:a7:8f:3d:
f7:c7:29:9b:51:33:b1:5c:6d:04:e0:01:fd:4a:86:2d:02:b6:
7f:ce:b5:eb:6a:ee:c7:7f:4f:ef:59:9e:85:a8:48:ac:57:df:
a5:96:23:d0:8f:12:26:f8:a6:87:2f:78:04:fb:a7:80:a2:98:
31:24:15:d4:b9:b2:f3:bb:26:90:91:b9:5d:4f:46:b7:dd:95:
d0:32:7e:09:57:80:be:2e:bd:c4:b5:25:be:10:28:79:66:f4:
3d:5a:ee:50:a3:3c:77:04:e6:f7:1c:ed:d2:92:f3:e8:c6:48:
12:26:8a:67:98:70:83:8a:6e:5b:c6:85:ab:e1:a1:b6:5e:0e:
d7:03:01:af:55:13:d3:9a:38:c1:93:13:7a:f7:e5:8f:77:e0:
fd:07:82:fb:35:91:8c:11:df:87:5a:40:23:68:18:e5:56:f8:
77:a9:77:23:d1:9d:9f:f7:b1:61:93:90:dd:1f:fc:40:b5:d5:
28:cd:b5:e4:76:53:09:2f:00:40:02:9f:27:c9:55:43:7d:18:
a2:40:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:10 2026 by rpki-client