Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/DZDtk5zAseX3RttCqx21h-tssJM.roa
File: DZDtk5zAseX3RttCqx21h-tssJM.roa (raw, json)
Hash identifier: mP82NkPNH+Q37YwPsild1BBhqz68QqINOHKIZRAaZLY=
Subject key identifier: 0D:90:ED:93:9C:C0:B1:E5:F7:46:DB:42:AB:1D:B5:87:EB:6C:B0:93
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A4540FB1D5E887935A1557EDBF209250
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/DZDtk5zAseX3RttCqx21h-tssJM.roa
Signing time: Tue 15 Sep 2026 09:09:27 +0000
ROA not before: Tue 15 Sep 2026 09:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 89.36.174.0/24 maxlen: 24
89.44.81.0/24 maxlen: 24
185.206.128.0/22 maxlen: 22
188.92.27.0/24 maxlen: 24
194.32.162.0/24 maxlen: 24
195.211.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:54:0f:b1:d5:e8:87:93:5a:15:57:ed:bf:20:92:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d90ed939cc0b1e5f746db42ab1db587eb6cb093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:58:b0:c6:f5:e6:e0:a0:c5:4b:39:6a:94:
77:83:86:31:92:4c:c3:d6:37:52:53:d2:be:76:7e:
44:72:3f:38:e3:08:09:dc:d4:64:f0:75:e6:d3:69:
88:52:37:32:0a:db:e3:9d:a8:e2:34:1a:83:bc:50:
d5:3e:b8:4a:72:9a:02:97:25:17:74:64:64:dd:8a:
48:ed:6c:2d:14:a4:23:6a:96:d0:02:24:29:f0:91:
18:8e:ef:1e:da:24:c1:ad:d5:dd:a6:c4:b7:64:98:
f6:b9:e3:fc:02:a5:57:fd:48:89:95:94:95:79:a0:
6b:9a:78:cc:51:d6:88:88:42:ab:95:cf:15:c7:51:
0c:34:d3:23:01:f9:1f:b0:69:b8:19:4b:73:a3:6b:
c0:7e:1d:ab:b7:fd:36:fc:30:85:64:88:4e:14:31:
07:51:87:29:58:16:20:7f:e4:51:ed:f3:43:be:c2:
76:d6:6c:2d:e9:e1:47:99:39:9a:38:5f:e7:4e:82:
43:f4:9a:26:5e:24:c5:e1:00:91:25:c4:d0:d3:37:
3b:58:21:90:43:89:22:05:dd:11:21:44:ba:77:d4:
72:7b:86:f8:e6:fd:e7:6d:97:b5:69:a4:98:c6:7d:
53:05:0e:3e:4b:55:07:47:90:95:7d:a7:36:a4:3c:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:ED:93:9C:C0:B1:E5:F7:46:DB:42:AB:1D:B5:87:EB:6C:B0:93
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/DZDtk5zAseX3RttCqx21h-tssJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.174.0/24
89.44.81.0/24
185.206.128.0/22
188.92.27.0/24
194.32.162.0/24
195.211.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ad:c1:08:ba:f4:20:84:dc:67:95:aa:8f:b4:71:3a:45:ae:
9b:4d:e1:0c:aa:07:2a:d0:a3:45:ed:96:a9:94:a4:aa:06:9b:
fa:74:97:5b:3b:b7:73:9a:91:a2:a9:7d:65:69:c2:8d:b6:6f:
3d:85:d6:e2:35:02:9b:07:23:29:07:c4:29:f4:37:4f:f5:e7:
07:bf:99:6c:db:81:09:0a:ba:df:79:30:92:1a:2c:59:49:f6:
9a:04:5a:d7:b6:4a:99:a5:ca:12:8c:d3:ae:8e:5f:a7:94:0e:
65:22:de:4c:a8:7a:aa:bb:ea:35:d3:54:4a:9b:e7:fb:fe:9c:
29:f3:f7:73:58:05:49:d3:65:f6:49:e5:7d:3e:b5:23:fe:95:
34:fa:ea:30:4d:30:d7:72:76:a4:4c:16:b9:0c:e8:fd:16:3b:
8e:90:9b:6c:93:b5:46:14:51:d7:76:96:d1:78:1b:55:b9:b6:
b3:99:77:8c:c8:0d:6d:e4:3b:fb:a7:c8:ac:07:4d:d9:c6:2a:
8d:41:18:83:42:42:26:57:3a:cb:d0:69:7e:a9:66:b1:22:b8:
59:d9:71:64:b4:bb:29:9e:b5:76:0f:48:50:71:da:6f:27:f8:
5e:12:8f:aa:3b:6b:23:99:33:4b:ed:40:8e:20:9e:ef:6f:de:
af:7a:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:08 2026 by rpki-client