Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DMKHyMU5UMRb0MRVwR2JSgQaM-0.roa
File: DMKHyMU5UMRb0MRVwR2JSgQaM-0.roa (raw, json)
Hash identifier: Tj7Qdle989U0d/r7Votp/SWcW8+xbz0NPbFsTEWwLJg=
Subject key identifier: 0C:C2:87:C8:C5:39:50:C4:5B:D0:C4:55:C1:1D:89:4A:04:1A:33:ED
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FA400E9856C60FBF2A9785BDF361C6299
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DMKHyMU5UMRb0MRVwR2JSgQaM-0.roa
Signing time: Mon 27 Jul 2026 14:35:50 +0000
ROA not before: Mon 27 Jul 2026 14:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 192.36.247.0/24 maxlen: 24
192.71.84.0/24 maxlen: 24
192.71.254.0/23 maxlen: 24
192.121.62.0/24 maxlen: 24
192.176.43.0/24 maxlen: 24
193.182.113.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.183.119.0/24 maxlen: 24
193.234.52.0/24 maxlen: 24
193.234.53.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
194.103.8.0/24 maxlen: 24
2a01:280:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:00:e9:85:6c:60:fb:f2:a9:78:5b:df:36:1c:62:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 27 14:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cc287c8c53950c45bd0c455c11d894a041a33ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:0c:66:ee:e1:a0:1f:31:3d:24:10:e8:86:
fc:3b:6a:fc:ba:43:91:dd:e6:53:32:23:5f:9f:12:
30:a2:90:ae:5f:23:51:65:3f:51:ee:cb:39:18:23:
35:92:32:80:26:24:8d:17:ad:5d:c3:81:9d:fb:99:
01:32:92:2e:72:8b:c3:8f:05:7a:42:95:2e:fa:ac:
d3:8a:88:91:13:7f:e0:9e:b4:2e:1f:4f:fb:56:bd:
2a:81:9d:29:59:e4:55:3c:c1:c7:ba:03:dc:38:32:
37:05:75:59:97:e7:0b:e6:94:8a:3c:bd:f0:de:69:
a3:31:fa:a4:35:25:7a:70:3d:82:32:61:52:e0:59:
98:34:2a:d6:5d:a5:5f:6a:dc:95:f2:46:e1:74:4f:
a0:0c:e3:50:2a:99:0e:7e:f6:75:d7:6b:65:41:af:
35:bc:5a:9a:1c:c6:d8:ec:8c:a7:b0:50:d2:00:66:
da:ac:b8:ef:e7:45:cd:f6:77:be:9f:07:f2:36:1e:
1f:da:18:f7:e1:28:31:4f:56:d9:47:c9:58:3a:35:
10:4f:67:70:b6:5b:8d:8b:f9:39:8c:6b:12:3b:6f:
32:47:8b:35:57:c5:ed:70:25:dc:34:e8:cb:c2:54:
26:25:86:fa:cf:9a:38:40:aa:b9:4a:fe:20:7d:c5:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:87:C8:C5:39:50:C4:5B:D0:C4:55:C1:1D:89:4A:04:1A:33:ED
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DMKHyMU5UMRb0MRVwR2JSgQaM-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
192.121.62.0/24
192.176.43.0/24
193.182.113.0/24
193.183.118.0/23
193.234.52.0/23
193.234.120.0/22
194.103.8.0/24
IPv6:
2a01:280:6::/48
Signature Algorithm: sha256WithRSAEncryption
9e:62:b9:c5:df:71:9a:da:84:a2:60:0f:51:89:e8:45:9c:3f:
24:5c:96:69:b9:2f:6b:7b:69:2c:db:98:96:a5:99:7e:23:42:
d9:02:e3:1a:4f:b6:69:36:11:1a:cd:aa:b5:38:77:ed:f1:45:
22:9d:d2:ca:0c:d0:e6:5f:39:a7:e0:3e:3b:68:fe:e7:99:40:
42:e5:83:17:f0:dd:6c:ba:46:8c:ed:ae:f4:d5:76:3d:7b:13:
2a:b9:f5:2d:3f:3c:ce:65:36:45:18:a8:a9:ad:01:3a:e3:2a:
48:bf:33:46:15:45:26:b3:3c:70:fb:d1:d7:5d:90:a7:70:16:
ea:a9:f1:00:08:5e:50:6c:47:bd:52:d3:87:83:9a:7c:40:34:
c9:1e:16:14:70:07:dc:18:9b:01:cf:92:59:33:3c:f2:0d:50:
0b:90:f1:e5:93:c8:ee:be:bc:c6:ee:98:f5:71:43:26:06:91:
ec:b8:a3:8b:4e:06:4b:d4:04:ed:08:bd:40:c0:0f:39:d1:fd:
50:78:90:de:d3:69:51:f5:ec:70:b7:3c:7a:e5:e0:31:1d:b9:
bc:1e:da:7b:0f:47:a0:28:16:43:31:67:8c:86:4c:21:df:6f:
2c:7e:dd:76:37:9a:06:cd:54:6b:3e:fe:6d:4d:54:f0:ad:fa:
3d:49:49:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:01 2026 by rpki-client