Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DvS-513ZlJosZB_bKaG6r5we5p0.roa
File: DvS-513ZlJosZB_bKaG6r5we5p0.roa (raw, json)
Hash identifier: rbS2VBQv3cOU68LEvoV2mEQpjxb1mWtDnGp6sVJXDgo=
Subject key identifier: 0E:F4:BE:E7:5D:D9:94:9A:2C:64:1F:DB:29:A1:BA:AF:9C:1E:E6:9D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019C473CCDC96B40AC987BF4CA97B293A946
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DvS-513ZlJosZB_bKaG6r5we5p0.roa
Signing time: Tue 10 Feb 2026 11:08:13 +0000
ROA not before: Tue 10 Feb 2026 11:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.42.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:3c:cd:c9:6b:40:ac:98:7b:f4:ca:97:b2:93:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 10 11:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ef4bee75dd9949a2c641fdb29a1baaf9c1ee69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:12:b0:37:4a:67:a6:17:b6:ad:e1:01:a9:
b6:ff:39:5a:de:3c:c8:41:7f:1d:e7:aa:0e:15:13:
43:e8:36:38:5c:d1:5a:a9:d0:c8:12:a1:7b:84:e6:
09:46:12:5b:eb:93:39:b7:a5:7f:98:9a:8a:d7:57:
c8:44:de:6b:8d:a4:0f:87:18:48:bf:46:cf:42:ca:
d0:12:95:c1:10:e8:82:56:fc:9f:85:d4:c1:5b:ea:
6c:20:e1:4b:28:04:62:45:11:a7:b5:17:43:7e:dc:
53:03:3e:f3:1b:87:c3:d5:2a:18:4f:cd:e0:e5:1b:
08:56:fa:ea:48:fb:d3:40:5a:0e:8e:55:2d:e1:1d:
d4:51:9c:f0:2b:8e:7b:c8:7f:2d:58:ce:54:3c:bc:
b6:16:30:a6:51:4f:5c:e5:bd:6c:d4:d9:17:17:ed:
49:d0:92:7c:63:e1:34:a0:fd:9d:97:a2:26:9b:d8:
b1:a9:20:e0:66:91:7c:4d:1f:48:5d:e0:1d:15:ea:
33:37:d1:57:4b:08:3a:2f:64:39:22:ce:1c:3f:c4:
b8:f8:5f:58:00:fa:52:dc:16:8e:2d:78:19:3e:79:
01:00:85:b8:e8:f5:ed:02:8c:6f:10:62:b4:b6:bb:
b9:89:e8:26:dc:4e:e6:b1:3d:f1:0e:ed:4c:6a:47:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:BE:E7:5D:D9:94:9A:2C:64:1F:DB:29:A1:BA:AF:9C:1E:E6:9D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DvS-513ZlJosZB_bKaG6r5we5p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.90.0/24
Signature Algorithm: sha256WithRSAEncryption
32:75:2b:77:3f:89:3c:3b:e8:3f:a4:6a:6b:5d:f0:8e:e4:8b:
58:2c:17:a1:8a:a2:3e:a3:56:e8:45:93:91:53:aa:93:40:0b:
74:d0:06:e1:02:44:b8:87:c3:24:1e:cb:5e:00:90:29:6f:2e:
5c:a2:5d:9e:76:96:46:6e:c4:87:14:d5:98:2c:ff:5e:19:ab:
3f:60:a8:c0:77:4e:60:65:fa:10:8a:84:12:16:59:ba:eb:c0:
1e:02:70:16:a5:75:52:fe:a4:60:71:72:d5:c5:78:d5:33:76:
a4:3c:56:ef:e8:1b:4c:be:93:a6:b0:02:74:9c:45:6f:99:84:
52:2b:00:1b:31:d5:ec:96:92:90:ab:3c:a7:24:9b:e2:99:a6:
e8:e1:7d:16:de:0b:b3:fb:03:b3:3f:9a:fd:e3:23:cb:19:b1:
4e:e1:f9:47:9b:75:48:51:10:14:99:4d:80:b5:fd:4b:ca:ad:
8c:c9:11:a7:e9:c8:c5:9a:c6:8a:ff:f0:10:b7:57:a0:c9:5d:
0d:c0:93:ce:46:e5:38:68:92:b0:d2:85:9e:7d:c4:1e:44:60:
72:fb:33:39:5b:a6:df:63:92:b9:34:54:2a:8e:f9:94:3e:b1:
9a:c3:38:5c:b7:26:f1:b2:54:89:c0:63:2b:5d:60:c6:75:1d:
39:04:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:41 2026 by rpki-client