Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/DOyWDvxk1vvpgZxyomN6ml87eZw.roa
File: DOyWDvxk1vvpgZxyomN6ml87eZw.roa (raw, json)
Hash identifier: WZriYJcxsgealVc6omHf05Gpz8pG9Y/PF0Nah8g/pLI=
Subject key identifier: 0C:EC:96:0E:FC:64:D6:FB:E9:81:9C:72:A2:63:7A:9A:5F:3B:79:9C
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019C6C53BBDBD1F113B0ACAF082A65BD1610
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/DOyWDvxk1vvpgZxyomN6ml87eZw.roa
Signing time: Tue 17 Feb 2026 15:59:12 +0000
ROA not before: Tue 17 Feb 2026 15:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200902
IP address blocks: 195.58.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:53:bb:db:d1:f1:13:b0:ac:af:08:2a:65:bd:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Feb 17 15:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cec960efc64d6fbe9819c72a2637a9a5f3b799c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:e8:59:4a:ee:27:27:ac:52:2d:16:5e:e4:
c3:f6:29:58:c8:7b:9d:61:2b:64:0f:b0:7d:05:df:
52:76:8f:31:a3:4e:33:46:d7:d5:9c:28:a8:4f:6c:
66:66:45:db:d8:34:88:36:d8:9c:f6:bd:46:26:5b:
d0:af:5b:48:c1:b0:d7:12:ce:ea:ec:43:ff:47:93:
50:98:e6:a0:98:f7:c1:70:0b:82:5c:af:6e:e7:b4:
1d:91:82:b0:8a:bf:95:b3:38:6c:ef:17:20:c4:6a:
a2:db:19:8e:20:32:12:4f:7a:79:ae:6a:14:25:2f:
b3:4f:f8:2d:1c:be:de:8b:7e:09:45:ba:c7:04:1d:
10:8f:46:cd:7e:77:20:cb:b5:27:8f:60:87:65:ff:
c6:5e:60:14:cf:16:72:de:18:3d:9b:2b:ff:30:cb:
9f:95:37:06:70:7e:43:02:16:3f:f7:1e:c2:66:73:
b4:59:27:11:f6:18:07:c8:b0:1f:67:66:7b:86:ce:
30:f3:3e:e2:7b:1e:59:b8:76:88:d7:08:29:13:09:
7b:89:1d:80:ca:25:b7:a1:78:d5:49:8d:14:af:3f:
01:00:21:72:f5:cf:cc:ae:89:c4:1f:81:00:e3:e4:
52:2c:ae:4f:2b:2f:5e:cc:26:0d:f6:10:94:06:92:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:96:0E:FC:64:D6:FB:E9:81:9C:72:A2:63:7A:9A:5F:3B:79:9C
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/DOyWDvxk1vvpgZxyomN6ml87eZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.152.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b3:c7:3e:a3:ee:8b:33:d6:e7:26:5f:30:33:0b:0a:2f:bf:
4a:1b:dd:3a:17:c5:e2:3e:03:3d:e2:c8:45:e5:f0:7b:9f:ce:
9c:e7:e5:3a:d4:73:37:7d:78:ae:0a:2f:e7:3d:c7:89:dc:65:
91:4c:39:97:c3:14:42:a7:5b:14:a1:5a:ba:6d:83:b4:4e:3a:
75:ac:38:45:0a:b5:72:41:f0:33:fc:c0:3b:27:2c:06:97:57:
96:fb:e7:d7:f2:a7:b4:8a:0a:d1:74:e1:b7:8c:bb:19:13:12:
60:f5:72:50:ca:48:4a:f7:e0:56:dd:0e:c6:2e:d9:f9:a5:76:
8f:90:fe:59:4b:38:09:9d:8d:df:5b:e8:aa:24:92:a8:d4:42:
5b:0a:79:8c:1b:b9:df:75:0f:da:fc:c7:ac:c3:1f:1e:38:32:
06:c9:1f:ec:4b:1c:9d:df:b1:5d:d1:fb:c5:7d:bf:30:c6:41:
91:ed:96:8d:81:f1:0e:27:4c:4d:e6:a7:fe:5f:e2:58:61:b4:
68:17:7c:98:31:31:86:8f:6c:7b:43:9f:21:91:18:48:eb:03:
7c:5d:3d:b1:6c:fc:35:44:ce:da:26:4f:d0:db:3f:ac:38:ac:
31:cb:af:52:e8:18:ab:46:b5:85:3a:d8:f1:8f:e7:44:f4:5e:
23:81:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:30 2026 by rpki-client