Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmmbP-ZzYejYxO5Fdn1VKI-aBU0.roa
File: dmmbP-ZzYejYxO5Fdn1VKI-aBU0.roa (raw, json)
Hash identifier: nCTQEDwWjxAbVaKGu45Uj35MmaDRSdcnxixSZwjlt5U=
Subject key identifier: 76:69:9B:3F:E6:73:61:E8:D8:C4:EE:45:76:7D:55:28:8F:9A:05:4D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0A07EA052BE0F7F01193677F60DEC1ABC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmmbP-ZzYejYxO5Fdn1VKI-aBU0.roa
Signing time: Mon 14 Sep 2026 15:17:28 +0000
ROA not before: Mon 14 Sep 2026 15:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 192.156.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:7e:a0:52:be:0f:7f:01:19:36:77:f6:0d:ec:1a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 14 15:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76699b3fe67361e8d8c4ee45767d55288f9a054d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:66:c2:75:c5:a4:a6:aa:60:b3:96:50:f0:
52:c7:db:89:26:20:a7:f1:b9:86:78:b6:f6:6c:16:
33:3d:e4:7d:d9:c0:86:4c:1d:e0:e8:6b:d1:a5:cb:
53:26:8c:0a:d6:69:71:e0:d5:c0:6b:66:41:b8:ec:
ba:1a:a2:e7:4e:46:54:8c:18:c3:75:e5:2f:21:47:
a2:d0:93:ce:e7:a5:a1:42:f7:78:51:ad:35:b5:45:
a8:0d:22:a6:7f:02:35:52:27:11:6e:68:a9:e7:f6:
fd:4c:f5:42:d8:23:9e:aa:16:d2:7d:2e:33:8a:44:
36:22:c0:8f:3f:c7:79:dc:1a:5e:b9:a1:fa:23:3e:
fb:5a:c0:16:4b:60:59:e9:05:76:1c:b9:2f:3b:a4:
10:83:49:6c:a3:b0:cd:7f:9a:7b:e7:02:ee:49:2f:
b5:5c:dc:c3:78:e8:1e:cd:5d:c5:25:51:af:ae:da:
dd:ea:56:de:db:db:12:c5:b9:bc:dd:96:f8:58:10:
f0:13:91:13:94:f1:69:53:89:d7:b1:d4:65:a6:5f:
53:a3:77:18:f0:a8:56:7b:42:cb:3e:07:80:b0:a3:
ca:19:c9:56:8d:48:69:e8:ab:bf:71:1d:84:f3:42:
a4:b5:2b:d2:d9:8b:c5:a3:2f:42:e2:11:e5:10:6f:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:9B:3F:E6:73:61:E8:D8:C4:EE:45:76:7D:55:28:8F:9A:05:4D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmmbP-ZzYejYxO5Fdn1VKI-aBU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.156.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f6:ad:57:a5:aa:df:2a:9e:32:a2:31:39:c2:88:ec:a9:c7:
2d:b0:13:86:c5:65:db:bb:d3:a6:84:66:3f:a8:bf:e3:f7:c7:
1f:73:69:5d:45:16:32:89:8a:c7:08:cc:ce:52:01:9b:69:c6:
53:30:a3:34:7a:6b:a5:b8:12:f8:cb:c6:a5:27:c7:e0:77:63:
89:03:a7:00:9a:46:b5:9c:05:51:d9:8e:16:b0:58:84:8c:80:
24:72:9a:1e:3d:3b:06:45:25:cb:2d:42:06:37:e8:0c:b1:a6:
01:ae:6b:fc:28:3b:68:1d:59:e9:e3:44:56:0c:27:e5:93:3f:
cf:30:a0:ad:6e:42:4f:ca:99:ca:50:47:2c:c4:b4:65:25:fc:
e7:7a:9e:30:46:99:b3:f1:e1:a0:ad:b7:a4:89:46:8f:98:71:
7d:d5:53:07:4d:df:1e:86:3b:6c:50:07:a7:14:24:aa:c7:d6:
45:ef:bb:99:df:c0:20:6a:5b:cb:6f:df:7e:97:c5:26:fb:5a:
3b:3e:68:f4:98:4a:40:b6:2f:5c:15:9a:8d:d7:54:fb:08:5f:
f3:8e:5d:8f:95:e0:96:7c:17:76:81:82:92:26:75:af:19:cd:
2e:d7:cb:e7:68:a4:0d:09:6b:a7:9d:39:be:28:ef:99:0f:cd:
bb:6a:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:12 2026 by rpki-client