Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/Djq8k1ePNfSfTwRGV3COD3lQwG0.roa
File: Djq8k1ePNfSfTwRGV3COD3lQwG0.roa (raw, json)
Hash identifier: 2HS6N7xbdYdzDh3GmqP+yFrev4AmwjZv7w3VQWxLorM=
Subject key identifier: 0E:3A:BC:93:57:8F:35:F4:9F:4F:04:46:57:70:8E:0F:79:50:C0:6D
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 019F2F625DF857389AEB34565A05A40C5C58
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/Djq8k1ePNfSfTwRGV3COD3lQwG0.roa
Signing time: Sat 04 Jul 2026 23:06:43 +0000
ROA not before: Sat 04 Jul 2026 23:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62132
IP address blocks: 185.46.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:62:5d:f8:57:38:9a:eb:34:56:5a:05:a4:0c:5c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jul 4 23:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e3abc93578f35f49f4f044657708e0f7950c06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:aa:1d:d6:69:c6:c7:f1:02:a6:ca:c4:fd:
d9:c6:eb:9d:9d:bf:bb:3b:38:e6:d8:7a:48:66:c6:
9e:95:83:f6:5f:93:e1:0f:ca:2f:e0:92:f1:7b:f5:
c4:3b:77:11:42:b2:8a:17:59:09:13:2d:ef:40:85:
a7:c4:77:3a:12:a0:cd:94:10:37:cb:34:a2:26:7d:
90:57:fc:d4:e2:95:98:e2:93:41:b0:c0:c3:8c:eb:
68:1e:c0:39:47:62:fb:2f:30:59:a9:fd:b5:e1:5e:
06:f9:3b:1e:7e:38:7c:22:41:9c:7a:46:48:1d:f1:
35:bb:2a:53:63:01:19:1a:e2:57:4c:cb:59:92:6e:
7b:50:de:b4:66:ee:21:a9:1c:8b:fc:39:ed:2e:2f:
ed:82:48:29:22:73:2d:de:7f:8c:a9:d2:d5:04:33:
05:3b:2a:01:21:2f:89:24:12:1e:8a:81:7d:09:c4:
da:c4:b3:63:95:fd:34:d8:d7:27:3e:2e:4f:f2:f2:
76:6e:1c:7c:ee:52:32:7a:3f:4c:f0:b1:fc:d2:13:
32:84:9c:39:86:0c:2f:51:ce:c6:a3:d5:a1:b6:83:
6b:9f:59:be:da:6f:c0:87:55:10:c3:39:00:e8:c0:
5d:a8:0a:49:47:51:58:69:fe:d5:8c:7c:9b:16:8a:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:BC:93:57:8F:35:F4:9F:4F:04:46:57:70:8E:0F:79:50:C0:6D
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/Djq8k1ePNfSfTwRGV3COD3lQwG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.108.0/22
Signature Algorithm: sha256WithRSAEncryption
25:bd:c1:35:8f:13:87:31:07:c6:1b:c4:b9:47:e4:ab:0e:63:
35:4f:24:ca:9f:2a:63:4f:5c:ce:40:5d:31:43:f3:a2:96:d5:
f0:74:3b:32:a7:f7:0d:98:86:0f:0c:1c:27:1d:b6:60:88:00:
4c:37:08:a6:b9:65:42:25:63:c4:7a:94:89:08:6e:48:28:78:
45:59:a5:72:e2:f4:8b:39:d4:e9:43:46:a0:d7:a4:f7:58:6d:
e5:07:fa:10:a7:81:8e:c8:5f:47:be:62:09:a7:29:e9:47:41:
2e:65:d9:a3:b9:3c:48:e5:98:8d:62:5d:e8:a5:c6:93:0e:72:
3d:d7:a5:bd:45:a3:e0:f7:59:2a:d2:67:aa:1d:01:6e:f1:61:
9b:d9:61:55:5a:a8:fe:37:77:f6:46:16:b7:00:4a:8f:70:d5:
03:ac:4d:ca:d7:ca:69:72:63:42:18:ee:ac:bd:e7:06:44:10:
75:16:51:4a:96:25:49:e9:eb:13:5c:22:48:1e:08:e8:62:4f:
de:b8:8b:aa:7c:80:23:e9:84:5e:9d:04:02:09:7c:83:7e:3c:
34:35:44:0d:ce:f5:68:ba:c5:92:6c:20:d5:f8:37:ac:59:fe:
31:67:9d:78:10:7d:95:ac:84:69:a6:1e:5b:72:4c:05:31:c5:
3e:7b:db:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8vYl34Vzia6zRWWgWkDFxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNWVhODM3OWJjYTQ0ZjRmNmE3ZjRiNjk4NjRjZDliMDJh
MjdiMTIwHhcNMjYwNzA0MjMwNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTNhYmM5MzU3OGYzNWY0OWY0ZjA0NDY1NzcwOGUwZjc5NTBjMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0+qHdZpxsfxAqbKxP3Zxuudnb+7
Ozjm2HpIZsaelYP2X5PhD8ov4JLxe/XEO3cRQrKKF1kJEy3vQIWnxHc6EqDNlBA3
yzSiJn2QV/zU4pWY4pNBsMDDjOtoHsA5R2L7LzBZqf214V4G+Tsefjh8IkGcekZI
HfE1uypTYwEZGuJXTMtZkm57UN60Zu4hqRyL/DntLi/tgkgpInMt3n+MqdLVBDMF
OyoBIS+JJBIeioF9CcTaxLNjlf002NcnPi5P8vJ2bhx87lIyej9M8LH80hMyhJw5
hgwvUc7Go9WhtoNrn1m+2m/Ah1UQwzkA6MBdqApJR1FYaf7VjHybFoppgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA46vJNXjzX0n08ERldwjg95UMBtMB8GA1UdIwQY
MBaAFI9eqDebykT09qf0tphkzZsConsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgt
ZWNiYjk0NDJmNTg5LzEvRGpxOGsxZVBOZlNmVHdSR1YzQ09EM2xRd0cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgtZWNiYjk0NDJmNTg5
LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS5sMA0G
CSqGSIb3DQEBCwUAA4IBAQAlvcE1jxOHMQfGG8S5R+SrDmM1TyTKnypjT1zOQF0x
Q/OiltXwdDsyp/cNmIYPDBwnHbZgiABMNwimuWVCJWPEepSJCG5IKHhFWaVy4vSL
OdTpQ0ag16T3WG3lB/oQp4GOyF9HvmIJpynpR0EuZdmjuTxI5ZiNYl3opcaTDnI9
16W9RaPg91kq0meqHQFu8WGb2WFVWqj+N3f2Rha3AEqPcNUDrE3K18ppcmNCGO6s
vecGRBB1FlFKliVJ6esTXCJIHgjoYk/euIuqfIAj6YRenQQCCXyDfjw0NUQNzvVo
usWSbCDV+DesWf4xZ514EH2VrIRpph5bckwFMcU+e9tL
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:16:33 2026 by rpki-client