Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhpqsiibaPdAIc8S5qmDGg_zz3E.roa
File: DhpqsiibaPdAIc8S5qmDGg_zz3E.roa (raw, json)
Hash identifier: dYe4Xnp8fXmMFAYIkKZ8bYwamb9Fw9E4/HebM4r9m2Q=
Subject key identifier: 0E:1A:6A:B2:28:9B:68:F7:40:21:CF:12:E6:A9:83:1A:0F:F3:CF:71
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C2DBE06C23CA2C082A97B33B152542B85
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhpqsiibaPdAIc8S5qmDGg_zz3E.roa
Signing time: Thu 05 Feb 2026 12:19:14 +0000
ROA not before: Thu 05 Feb 2026 12:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9318
IP address blocks: 37.202.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:be:06:c2:3c:a2:c0:82:a9:7b:33:b1:52:54:2b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 5 12:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e1a6ab2289b68f74021cf12e6a9831a0ff3cf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:49:1c:e6:b3:a7:76:4f:dc:48:07:bc:cd:
da:61:70:76:6c:4a:52:74:89:8a:c0:90:a2:69:9f:
a7:c5:51:00:c9:1d:af:71:eb:54:2c:f6:cb:ef:fb:
7c:54:e6:23:e6:6e:5a:06:5e:c3:63:09:a7:35:a1:
a4:15:a4:77:1b:db:0f:3e:a6:58:2e:be:98:57:ff:
8c:9a:2b:18:01:1a:06:50:c2:ce:67:8b:90:da:a0:
46:05:08:b1:14:d0:b8:44:25:c9:22:14:73:6f:57:
cd:72:fd:c0:61:90:ef:19:79:7e:27:7b:cc:a9:b1:
b4:da:8c:06:82:11:3d:37:0c:67:60:3e:37:2f:b0:
a2:25:20:36:4a:b2:d6:0a:3c:84:20:74:d3:bf:41:
2b:01:57:ba:da:a4:f6:67:be:54:5b:cc:17:73:2c:
8b:a5:fd:7e:c7:d7:c5:dc:50:d0:0c:90:3e:31:ce:
c2:16:de:52:5c:ac:65:61:e1:be:d3:68:02:9b:da:
e1:07:9d:2a:65:32:37:3e:ae:dd:1a:03:f9:3c:a9:
3f:e4:41:3b:f6:76:59:0b:3e:98:b6:fd:87:c8:da:
80:3c:67:7b:c3:3d:02:ef:9d:3d:f4:76:58:cd:4c:
bf:2c:26:04:64:96:70:2e:34:fc:99:73:d9:c3:79:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:6A:B2:28:9B:68:F7:40:21:CF:12:E6:A9:83:1A:0F:F3:CF:71
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhpqsiibaPdAIc8S5qmDGg_zz3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e2:90:e5:e3:e9:ae:84:1f:66:c5:f7:30:53:6b:b0:f4:05:
8d:c2:74:7b:ee:e0:a0:30:eb:00:73:6c:7e:50:56:a2:e6:df:
69:3b:4c:61:a7:44:71:3a:75:1c:46:c2:f9:a5:cb:f8:89:5f:
a2:31:48:85:d1:55:70:b8:9b:1d:2e:1e:b5:40:ce:0b:fb:08:
61:a2:53:41:64:f3:74:60:7f:a0:0d:19:e0:1c:53:5c:12:2b:
d5:1f:9d:80:63:b4:0a:24:4a:d2:f1:eb:a9:98:e1:d7:d2:ef:
0b:ef:85:43:42:3a:13:fe:b0:8f:e2:82:fa:d0:d7:12:1e:fe:
5f:3f:f6:2f:d9:d2:36:51:7f:01:a6:d0:2d:ef:0c:6d:84:e4:
d8:3f:c8:3c:dd:a7:1c:dc:35:99:52:b2:60:f3:d0:93:77:aa:
a7:aa:be:34:7f:3d:a9:25:a1:c9:63:0a:fd:3e:d8:5b:0d:e6:
df:2a:e2:44:bf:70:4a:1a:64:83:a3:0d:b9:d1:ad:2f:c2:e4:
13:4d:fd:11:4c:c0:33:04:1d:06:a4:9e:55:2d:5e:21:86:9c:
fd:6a:91:05:32:fd:6f:04:f7:47:97:9b:b0:7a:bb:4c:fe:11:
e6:17:70:ba:d6:6f:d1:83:0c:c8:01:1f:9d:62:2f:c9:95:d4:
d0:fa:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:31 2026 by rpki-client