Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/DNL-CMoBWaXuuZ5oopG4CdGzI64.roa
File: DNL-CMoBWaXuuZ5oopG4CdGzI64.roa (raw, json)
Hash identifier: bI/MI7GB+0D8k4otM1/CYetYwcHJ1hXANaHVBCpbY6g=
Subject key identifier: 0C:D2:FE:08:CA:01:59:A5:EE:B9:9E:68:A2:91:B8:09:D1:B3:23:AE
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 019B76EB6C6186211C2E39BC9A323C478CD6
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/DNL-CMoBWaXuuZ5oopG4CdGzI64.roa
Signing time: Thu 01 Jan 2026 00:18:18 +0000
ROA not before: Thu 01 Jan 2026 00:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205956
IP address blocks: 2001:678:430::/46 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:6c:61:86:21:1c:2e:39:bc:9a:32:3c:47:8c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: Jan 1 00:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd2fe08ca0159a5eeb99e68a291b809d1b323ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:36:dc:37:63:c5:ef:4c:c8:a0:f2:53:93:
3f:04:3b:5f:6d:92:ed:e1:d1:5b:48:b1:d1:87:20:
1b:1f:05:63:f0:3c:78:2e:98:3f:31:3d:9d:e5:f4:
ab:54:2c:e9:b6:98:b1:5d:66:91:8a:9b:ee:f6:7d:
b1:3f:89:5a:fe:79:ec:43:b8:98:8f:64:3f:ee:dd:
1a:d3:e4:b3:eb:a3:75:67:ab:76:71:60:95:18:6b:
35:14:d9:8d:bf:92:d1:27:a5:99:68:dd:28:cc:61:
ab:9b:55:12:79:fb:44:09:dc:00:0b:d9:18:16:fe:
79:18:49:16:63:bc:9b:5b:cd:7d:9b:d0:46:e0:01:
4a:0a:c9:5c:bb:d6:1b:1d:6a:f4:d2:37:c8:c3:66:
62:cb:68:bd:a4:88:34:fc:30:65:27:f0:cd:50:ef:
27:d7:ff:c2:89:85:8c:08:e8:ce:0a:6f:13:8f:db:
45:6f:5f:68:fc:3f:06:16:33:d7:6b:f6:a7:0b:68:
f0:03:5f:1d:cc:e2:fc:40:43:f9:0e:d6:40:05:2e:
99:ce:fc:22:d5:09:fb:ed:a1:f9:37:a4:68:30:57:
0c:e1:ae:61:94:86:04:fc:fd:fe:91:9c:4e:1f:f9:
3f:88:8a:67:72:a0:8d:e2:56:f4:51:6b:6c:3a:5e:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:FE:08:CA:01:59:A5:EE:B9:9E:68:A2:91:B8:09:D1:B3:23:AE
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/DNL-CMoBWaXuuZ5oopG4CdGzI64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:430::/46
Signature Algorithm: sha256WithRSAEncryption
38:92:e4:ac:88:f8:59:4f:e8:8a:48:2b:0c:d3:d7:cb:b8:33:
c1:58:65:2e:95:70:f7:1c:69:84:11:09:19:b6:43:63:ea:ea:
5f:ea:88:05:df:67:93:32:c1:66:72:d6:07:04:ae:48:9a:2a:
7b:8a:b2:5f:a6:b0:b4:a2:07:74:de:45:fd:3d:c9:c2:73:e3:
2e:15:f5:f1:10:6f:ef:dd:5b:86:b9:c4:9a:cb:33:b5:6c:f6:
8a:14:45:49:95:e7:f6:51:9d:be:83:22:07:4b:0a:23:13:b0:
fb:dc:29:b0:34:01:ee:e7:56:9c:b1:46:f6:fb:f0:9f:7d:b1:
7a:0f:ff:22:2f:ca:19:cd:a1:46:be:1a:0c:41:88:23:f4:ce:
09:52:ca:18:98:64:6a:f6:1c:41:f8:c6:c9:46:7b:0a:19:c0:
f9:93:99:69:d5:10:4e:1d:5b:7c:5e:54:b9:c2:f6:33:50:2d:
73:6e:47:0c:97:4a:1a:74:d2:40:e2:95:dd:5b:7f:ff:0f:10:
fc:02:1c:38:d4:d9:82:2c:32:b4:d3:f9:bb:07:e2:ea:e8:b3:
e9:e0:e4:ed:03:73:38:89:b8:de:14:14:19:6a:99:5b:f7:1c:
d7:2c:1a:04:8b:93:a8:fc:51:f0:c4:31:05:d9:ad:1a:5e:27:
b2:9e:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:04:43 2026 by rpki-client