Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Dq6GRoQFicXxR2ABf-mleHDvcMw.roa
File: Dq6GRoQFicXxR2ABf-mleHDvcMw.roa (raw, json)
Hash identifier: 9G7ETKKM2PyS2rxwm28nsX4pFUBRO2D7OR8dezSBqFM=
Subject key identifier: 0E:AE:86:46:84:05:89:C5:F1:47:60:01:7F:E9:A5:78:70:EF:70:CC
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 01A18322844003A1D622ADAF9175353091F1
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Dq6GRoQFicXxR2ABf-mleHDvcMw.roa
Signing time: Wed 28 Oct 2026 15:30:39 +0000
ROA not before: Wed 28 Oct 2026 15:30:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 31.210.62.0/23 maxlen: 24
78.135.112.0/24 maxlen: 24
95.214.72.0/22 maxlen: 22
212.68.47.0/24 maxlen: 24
2a09:da80::/29 maxlen: 32
2a09:da80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:22:84:40:03:a1:d6:22:ad:af:91:75:35:30:91:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Oct 28 15:30:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eae8646840589c5f14760017fe9a57870ef70cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:a7:33:ff:7b:01:ef:50:6b:67:6c:34:9d:
df:7b:1d:25:50:e1:5d:5c:7c:23:49:8b:c0:5a:85:
b1:8c:d7:68:c5:ce:8d:1a:3d:88:11:90:d1:eb:93:
83:91:f5:b9:fc:b7:23:52:c1:05:95:41:e3:04:5b:
57:02:3c:5c:25:96:d7:b7:c3:ca:47:85:b4:ad:f9:
93:6f:19:a4:5d:c4:7e:07:08:e6:c5:b5:45:9d:39:
40:c3:de:a7:e4:94:0b:28:0b:60:fd:8d:0a:ed:23:
8f:0a:87:27:da:4c:3d:36:65:e8:d3:90:f9:d0:14:
be:30:f2:87:0e:0b:d0:f9:29:7e:7a:ee:f0:cc:67:
1e:df:de:fe:65:3d:08:9e:cd:7f:56:c2:8a:e6:3e:
c7:db:9b:41:25:c5:e7:6c:c8:a7:98:e5:15:f9:04:
f6:e7:38:7c:e7:1e:1e:71:5e:12:f1:d9:8f:df:80:
82:c3:ae:e1:b2:51:f7:08:d9:87:2e:80:5a:ca:a7:
93:eb:d4:ea:f7:c9:09:a3:1d:18:e9:32:c0:eb:bc:
ee:7f:da:59:b9:f4:cd:6e:ce:5c:eb:12:bc:5d:74:
b3:ab:7f:8b:09:ba:94:d7:d0:ea:89:3d:cc:80:e6:
6c:70:d9:c3:e8:3a:e1:fd:e7:47:3d:f2:5a:37:f9:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AE:86:46:84:05:89:C5:F1:47:60:01:7F:E9:A5:78:70:EF:70:CC
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Dq6GRoQFicXxR2ABf-mleHDvcMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.62.0/23
78.135.112.0/24
95.214.72.0/22
212.68.47.0/24
IPv6:
2a09:da80::/29
Signature Algorithm: sha256WithRSAEncryption
0a:52:00:50:b7:4f:2d:e3:3c:4e:67:8f:d0:a8:98:90:86:8d:
ea:f5:58:0f:91:36:e0:cc:cb:2b:72:66:a3:29:fe:a9:0f:21:
a3:58:e5:3d:17:61:c7:34:e7:44:9a:5d:cb:02:18:a6:55:28:
04:11:a0:6a:0c:34:68:e0:6b:2e:63:6b:9f:5d:61:8b:60:6a:
af:d0:af:e1:63:67:c3:fb:7a:ea:b5:e2:ad:0a:91:06:38:f3:
d6:1b:74:11:24:38:c3:90:77:42:2a:12:8f:a9:f1:3e:f0:b4:
7b:f9:4c:d2:ce:38:b6:de:0b:4c:87:0c:13:8b:d8:7b:5b:90:
56:e0:ca:58:08:b8:c5:f7:8e:f6:05:c0:3e:eb:4a:cc:e3:e0:
ad:08:90:91:42:66:9d:d6:6b:51:5a:5a:c6:2e:b1:49:5d:d2:
8b:68:e6:9d:17:14:5e:14:a3:f1:7b:d9:f7:be:0b:e9:f8:94:
85:51:b5:d8:af:6f:ee:5e:82:b6:9f:1b:8d:cc:fc:40:c1:96:
c1:17:88:2e:90:3b:eb:67:14:69:3c:c8:57:75:5e:a4:91:a0:
bd:ae:4a:4a:19:e1:3e:43:40:d4:29:f0:5f:47:24:71:51:64:
4a:f2:34:e2:32:68:fc:ec:17:ad:9f:ad:f5:5c:e0:4b:d0:f9:
90:8f:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:56 2026 by rpki-client