Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/D7vB6QBvIYmkuKgJexKoP7rMKRQ.roa
File: D7vB6QBvIYmkuKgJexKoP7rMKRQ.roa (raw, json)
Hash identifier: qZyOv2Gb3Yc8d2ppE8LjMRwjXi+sbeF9izWkejUX++E=
Subject key identifier: 0F:BB:C1:E9:00:6F:21:89:A4:B8:A8:09:7B:12:A8:3F:BA:CC:29:14
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019C8F6109AB58F3F5AA5B9A3E88AA4C3FF5
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/D7vB6QBvIYmkuKgJexKoP7rMKRQ.roa
Signing time: Tue 24 Feb 2026 11:20:27 +0000
ROA not before: Tue 24 Feb 2026 11:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138997
IP address blocks: 64.118.128.0/19 maxlen: 24
216.195.192.0/19 maxlen: 24
2a01:4240::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:61:09:ab:58:f3:f5:aa:5b:9a:3e:88:aa:4c:3f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Feb 24 11:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fbbc1e9006f2189a4b8a8097b12a83fbacc2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:3d:19:70:e5:6d:b2:f9:7d:c2:a1:4a:c1:
52:00:9a:71:f6:d4:fc:ac:67:be:a2:49:3c:78:3f:
86:a9:de:29:4e:57:f7:0e:ae:47:c0:86:0d:4c:cc:
ce:62:ee:ef:8b:3e:52:dc:7d:1b:3c:91:ea:19:37:
93:85:5c:54:1d:ea:9e:d5:51:78:d9:74:e9:c2:8e:
17:52:88:33:48:1d:94:89:86:53:5c:65:76:74:fb:
3c:56:64:e3:c5:57:50:f6:c2:a6:67:29:d3:ed:44:
07:69:81:e8:de:f8:80:11:f2:72:9a:9d:c4:9b:e5:
d6:1b:4a:54:25:9a:83:af:55:da:47:58:f3:43:cd:
fb:ec:ef:ca:6d:10:53:43:cd:39:79:2b:bd:8f:33:
68:74:19:9c:9c:1c:ad:bd:8c:2d:5f:f7:39:08:de:
e4:b0:7f:9e:7b:83:f9:48:74:a4:17:2c:53:05:f4:
2d:df:40:f4:23:8a:7c:23:23:5d:5f:53:b4:75:96:
2d:64:5a:34:c1:ca:49:b0:26:7a:1b:98:b3:30:e6:
f4:c9:5e:90:56:87:f3:4d:2b:7c:80:2b:88:0e:ed:
9d:52:9e:9b:4c:09:6a:37:0b:56:8b:41:39:8d:1d:
b5:46:48:10:07:77:11:32:c5:9a:80:c1:d2:f3:f8:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:C1:E9:00:6F:21:89:A4:B8:A8:09:7B:12:A8:3F:BA:CC:29:14
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/D7vB6QBvIYmkuKgJexKoP7rMKRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.118.128.0/19
216.195.192.0/19
IPv6:
2a01:4240::/30
Signature Algorithm: sha256WithRSAEncryption
36:50:d3:3d:87:4f:41:50:64:3c:d4:da:39:52:2f:57:b3:3e:
13:c9:9b:ca:e3:87:9a:71:4f:3e:01:20:de:2e:8c:2d:68:1b:
9d:61:72:f0:ac:91:15:7c:fc:98:3a:db:72:c9:a3:31:32:33:
09:ba:68:a6:9a:31:5d:1b:fc:b3:89:f4:b9:cc:a9:e0:34:1f:
13:fb:1a:98:b6:05:1d:97:a3:11:51:70:6c:6d:8e:91:ee:19:
00:eb:64:36:c8:2b:b5:d1:44:b7:17:ab:1d:58:e2:d7:71:fb:
ca:c4:8b:24:3a:be:f4:e8:3e:88:cd:28:86:03:66:51:72:3d:
22:8b:a3:26:57:46:41:09:a9:da:57:38:e9:7f:75:85:67:bd:
82:db:9d:ca:e7:2e:6b:5a:ea:2e:98:c4:0a:47:23:35:e5:e1:
61:3c:25:20:23:45:75:a2:96:95:b9:c0:58:91:0d:cc:a1:8a:
ad:80:28:68:0a:d5:49:a1:3c:e8:24:0c:9a:a0:e2:14:42:9a:
fa:46:5a:65:fc:3e:d6:ac:f0:47:81:c9:86:dd:ff:05:18:02:
a1:e4:11:6e:3e:a3:7d:7e:4d:09:ff:35:77:fb:d9:4e:91:ba:
39:03:b9:b1:59:70:8a:56:56:71:50:5e:0b:64:2a:c5:e4:fe:
91:73:48:6a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZyPYQmrWPP1qluaPoiqTD/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwMjI0MTEyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmJiYzFlOTAwNmYyMTg5YTRiOGE4MDk3YjEyYTgzZmJhY2MyOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXU9GXDlbbL5fcKhSsFSAJpx9tT8
rGe+okk8eD+Gqd4pTlf3Dq5HwIYNTMzOYu7viz5S3H0bPJHqGTeThVxUHeqe1VF4
2XTpwo4XUogzSB2UiYZTXGV2dPs8VmTjxVdQ9sKmZynT7UQHaYHo3viAEfJymp3E
m+XWG0pUJZqDr1XaR1jzQ8377O/KbRBTQ805eSu9jzNodBmcnBytvYwtX/c5CN7k
sH+ee4P5SHSkFyxTBfQt30D0I4p8IyNdX1O0dZYtZFo0wcpJsCZ6G5izMOb0yV6Q
VofzTSt8gCuIDu2dUp6bTAlqNwtWi0E5jR21RkgQB3cRMsWagMHS8/iq9QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA+7wekAbyGJpLioCXsSqD+6zCkUMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvRDd2QjZRQnZJWW1rdUtnSmV4S29QN3JNS1JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFQHaAAwQF
2MPAMA0EAgACMAcDBQIqAUJAMA0GCSqGSIb3DQEBCwUAA4IBAQA2UNM9h09BUGQ8
1No5Ui9Xsz4TyZvK44eacU8+ASDeLowtaBudYXLwrJEVfPyYOttyyaMxMjMJumim
mjFdG/yzifS5zKngNB8T+xqYtgUdl6MRUXBsbY6R7hkA62Q2yCu10US3F6sdWOLX
cfvKxIskOr706D6IzSiGA2ZRcj0ii6MmV0ZBCanaVzjpf3WFZ72C253K5y5rWuou
mMQKRyM15eFhPCUgI0V1opaVucBYkQ3MoYqtgChoCtVJoTzoJAyaoOIUQpr6Rlpl
/D7WrPBHgcmG3f8FGAKh5BFuPqN9fk0J/zV3+9lOkbo5A7mxWXCKVlZxUF4LZCrF
5P6Rc0hq
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:32:27 2026 by rpki-client