Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/DbxJv-sLQ3W1fyhrdioSNv97wS8.roa
File: DbxJv-sLQ3W1fyhrdioSNv97wS8.roa (raw, json)
Hash identifier: W9ilqt7H8VyXzg6z0JRuXfb3gXCFeEGnkjjtm+EEDs4=
Subject key identifier: 0D:BC:49:BF:EB:0B:43:75:B5:7F:28:6B:76:2A:12:36:FF:7B:C1:2F
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A085AB3E7A8236BF178C27D85E6330188A
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/DbxJv-sLQ3W1fyhrdioSNv97wS8.roa
Signing time: Wed 09 Sep 2026 10:16:27 +0000
ROA not before: Wed 09 Sep 2026 10:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218737
IP address blocks: 216.23.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:ab:3e:7a:82:36:bf:17:8c:27:d8:5e:63:30:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 9 10:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dbc49bfeb0b4375b57f286b762a1236ff7bc12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:8e:ab:55:51:94:5d:67:28:03:bc:a2:9d:
82:db:d9:52:ed:3c:bd:3e:f9:10:6a:c2:75:a2:6a:
e5:74:5d:7c:22:cb:48:8b:fa:f8:93:74:8d:59:99:
e7:e4:45:e2:7e:1a:8f:99:82:7f:36:96:23:c8:f5:
19:9b:60:11:e0:08:54:2a:41:82:3b:fe:1d:6d:6a:
93:61:b4:93:f1:f6:13:3e:db:af:55:ca:f5:93:95:
8b:29:4e:fb:9c:29:8b:06:78:80:5e:7b:f5:b7:ce:
2b:f4:0e:e2:3a:92:5b:f0:38:22:ed:52:51:c5:31:
d8:d5:aa:6c:21:52:da:00:95:54:85:68:df:89:b0:
33:c3:a6:54:17:14:83:5a:98:65:04:56:7a:3e:aa:
9f:30:a1:d6:96:f3:10:52:98:29:ec:28:b5:70:1b:
f9:00:06:85:fc:6b:ce:f4:60:ba:d5:05:f9:81:ad:
a1:55:36:43:b5:e3:ec:c2:d2:f4:ef:b2:1f:10:eb:
8f:59:a8:6f:04:66:e8:e9:c9:63:52:13:8f:1a:fc:
d5:03:02:eb:58:2f:7e:19:a7:a1:c6:02:39:ae:a6:
69:6e:56:25:2b:98:4d:ec:72:74:45:d0:ef:4c:31:
c7:78:d3:16:db:cc:41:07:b6:58:4c:37:97:d8:9a:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:49:BF:EB:0B:43:75:B5:7F:28:6B:76:2A:12:36:FF:7B:C1:2F
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/DbxJv-sLQ3W1fyhrdioSNv97wS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.23.64.0/20
Signature Algorithm: sha256WithRSAEncryption
56:7e:69:1e:39:88:23:c3:d8:af:9f:18:53:d9:2a:37:f1:37:
29:ab:68:8a:43:19:c3:c3:3d:eb:13:7b:8e:22:47:3d:da:d7:
77:ad:29:0d:60:ab:48:b6:7c:05:dd:fb:19:50:1b:05:c8:41:
68:2f:f6:e2:ac:be:82:4a:78:09:3e:01:c6:83:0e:fd:56:65:
71:3e:e3:10:62:01:bb:d5:07:00:0e:90:60:99:11:af:ad:a0:
8b:5a:78:1e:2a:57:23:d9:03:c6:3b:5c:35:ff:c4:f0:1f:d7:
47:41:12:ee:9d:8b:96:5d:d6:c7:5a:2c:1c:24:ed:6d:fb:e9:
ad:eb:fd:f0:cd:9e:64:a8:67:7c:09:6b:e4:14:bf:05:43:8a:
60:0b:68:6e:41:a9:6c:72:ff:10:92:78:f3:f4:6b:68:29:c1:
29:65:77:7e:ad:94:8c:8a:a0:98:90:87:37:9a:4f:3e:5d:9b:
e7:ed:96:0b:07:e0:dc:4b:8b:ae:9a:fc:1a:07:e9:61:e3:d9:
eb:9d:5c:c6:73:fa:e1:d1:b2:97:94:86:fe:2a:d2:ef:5a:95:
4b:e6:3c:6c:82:32:0c:90:38:31:ac:24:d2:5d:90:09:54:09:
9f:68:b6:1e:af:40:28:18:2b:62:88:a2:58:85:fa:d3:4d:c9:
87:23:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:40 2026 by rpki-client