Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/DXKenSrT9xGc94_WmIARLEPdCIs.roa
File: DXKenSrT9xGc94_WmIARLEPdCIs.roa (raw, json)
Hash identifier: MvNX7IGPaBvhZ7fEZBqQLcrXLbGtOY9ZxwgGwB7MHtM=
Subject key identifier: 0D:72:9E:9D:2A:D3:F7:11:9C:F7:8F:D6:98:80:11:2C:43:DD:08:8B
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 019E3B1ED46D93B79CA452DB824ED70121DF
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/DXKenSrT9xGc94_WmIARLEPdCIs.roa
Signing time: Mon 18 May 2026 12:45:36 +0000
ROA not before: Mon 18 May 2026 12:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a0c:6a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:1e:d4:6d:93:b7:9c:a4:52:db:82:4e:d7:01:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: May 18 12:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d729e9d2ad3f7119cf78fd69880112c43dd088b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:0f:a2:82:19:50:f3:68:71:bb:08:e0:77:
13:f0:e3:4b:5b:64:3e:01:9f:40:da:43:7f:6f:84:
dd:fb:8d:b5:e7:11:aa:54:c9:d4:6c:6c:b9:d9:cc:
a4:0d:5a:1e:a9:9b:93:f6:a6:8f:80:75:f1:dd:5a:
94:36:22:4d:7d:71:3c:46:0a:24:df:96:f1:27:33:
1a:06:5f:ad:92:1c:7d:69:79:06:26:c6:86:9c:4b:
1c:37:7a:4c:b1:b9:95:24:76:70:a7:06:b7:dc:04:
d3:d3:de:a6:18:8c:da:c5:bc:41:12:ff:62:7c:93:
a6:ee:6e:c2:05:41:0c:7e:8f:df:cd:3e:d8:28:65:
9c:1b:0c:bb:50:77:1c:c1:23:77:20:28:88:d8:f9:
54:a6:9e:3d:c9:4c:23:1f:15:d7:f2:53:75:80:b6:
cb:ca:a1:b9:26:45:f9:4e:5d:21:f6:21:df:75:ac:
47:0f:1b:25:25:5c:68:8f:95:b2:2e:9e:88:6f:4a:
c2:9f:9d:60:b9:21:50:78:2a:90:38:38:4c:98:64:
b2:cd:c4:2d:47:68:38:c3:8c:ef:85:a9:f9:1c:20:
42:3e:7a:1f:ac:30:98:30:1e:1c:b7:ba:2d:60:de:
b3:89:97:a2:a2:d1:9b:0b:9c:99:f1:87:e8:07:09:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:9E:9D:2A:D3:F7:11:9C:F7:8F:D6:98:80:11:2C:43:DD:08:8B
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/DXKenSrT9xGc94_WmIARLEPdCIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6a80::/29
Signature Algorithm: sha256WithRSAEncryption
41:01:4e:61:45:09:ff:84:5d:d1:dc:34:59:4c:71:a2:d7:23:
82:6c:9c:ac:34:e1:9b:bb:cc:14:07:d4:82:de:32:7a:67:17:
b7:56:5f:c4:d3:cf:fa:4e:44:45:ec:02:75:1c:59:90:d5:75:
ae:7c:36:09:b2:b6:12:2e:4c:3e:2d:f8:bc:d7:99:26:c7:d2:
ee:70:9c:9a:9e:01:a9:41:f2:31:21:2b:df:3e:1a:e1:6f:f1:
3a:60:de:ff:cf:e0:b2:50:dc:34:85:3c:fd:0e:6d:7e:3c:74:
be:35:a1:cb:b0:95:29:85:c2:e2:87:c3:3b:9d:7c:2b:67:b3:
71:c6:29:be:46:56:f6:70:25:f5:2f:e9:69:76:68:67:40:d3:
77:58:67:bc:63:d4:d5:69:86:01:59:db:77:0b:22:2b:bd:20:
bc:0a:1f:af:c4:74:cb:a2:0d:ff:86:0f:9a:c2:90:1e:38:de:
28:05:62:8a:5c:d3:7f:02:bc:7b:41:9e:8e:d9:c3:99:33:ce:
ca:15:ba:97:b1:d6:73:6b:95:8c:0d:e5:a3:75:f5:48:5e:99:
3c:a6:59:76:4b:0d:3a:16:82:f5:be:46:af:fb:f1:fe:07:8f:
b4:c8:17:dc:9b:99:53:b0:8a:a2:e6:f3:c1:76:4f:49:5a:11:
29:e8:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:32 2026 by rpki-client