Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa
File: dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa (raw, json)
Hash identifier: LtFziGiCB6ZSk0IFD9YNBjwpbHldhOQjU/Bt2FiebEA=
Subject key identifier: 76:96:2C:47:D9:38:45:43:DA:CD:F5:63:51:3E:98:2F:7C:24:87:A6
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019C9FCFE1B943C289BB6D319661E9422B71
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa
Signing time: Fri 27 Feb 2026 15:55:26 +0000
ROA not before: Fri 27 Feb 2026 15:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:cf:e1:b9:43:c2:89:bb:6d:31:96:61:e9:42:2b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 27 15:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76962c47d9384543dacdf563513e982f7c2487a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:73:37:d7:98:32:c0:2e:f9:62:ea:bd:09:
4a:0c:a8:c5:8c:4f:99:13:fc:aa:a1:7a:4a:6b:49:
94:6e:10:35:cb:fe:93:fc:cf:f7:0c:13:f6:46:4c:
e2:43:14:c0:0f:b9:bb:e3:a0:8b:d6:13:ae:5f:11:
68:77:25:6a:94:de:9e:6d:73:87:32:df:5a:f3:de:
1b:69:cc:d9:cd:2b:83:f9:a1:11:d3:e6:3e:3c:1b:
d2:9e:28:bb:55:09:74:4f:96:d3:77:5e:1c:09:42:
8a:3d:d1:fb:9c:8c:14:df:38:37:1b:4b:9d:3c:78:
5a:c4:30:db:3f:5d:d7:28:1f:76:4f:b3:10:6b:46:
6c:28:d6:1f:06:29:7a:36:41:a5:b1:8d:7a:b7:c0:
3c:a3:6e:cd:c6:bb:1a:de:00:ad:69:74:67:fc:4d:
cc:74:3c:cb:3c:bd:12:85:63:64:26:c6:ae:06:be:
a2:9d:e9:be:92:50:40:77:7c:b2:59:bd:e9:9b:88:
3e:de:5a:fe:f2:ff:64:70:1d:3b:77:b9:57:a2:b1:
c8:e9:76:65:5f:2b:e3:27:a3:f8:a9:11:ae:de:91:
b9:cd:08:11:25:38:8f:84:44:d0:1c:52:d7:09:9b:
e9:e9:e0:db:d4:56:a1:54:9a:cb:de:f7:42:43:c7:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:2C:47:D9:38:45:43:DA:CD:F5:63:51:3E:98:2F:7C:24:87:A6
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.235.0/24
91.92.47.0/24
93.152.205.0-93.152.206.255
93.152.209.0-93.152.216.255
93.152.220.0/24
93.152.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:32:e5:47:31:27:64:de:84:27:8b:b4:95:97:a4:3b:96:14:
07:ea:f4:40:aa:8f:cf:07:ed:ba:a9:17:73:0f:95:0a:7a:c8:
9d:14:10:b1:04:ff:78:1b:b1:c5:d9:b7:98:f9:5a:87:cf:f7:
d8:2a:78:25:96:82:3f:08:97:a0:ac:58:d1:36:ee:3a:b3:76:
fe:a6:9c:58:55:a8:ac:e2:2b:03:aa:ac:dc:99:b7:6b:94:55:
57:c6:eb:54:55:f7:1b:db:e6:92:8e:a2:cb:e7:65:f3:1f:a1:
36:f1:00:57:0d:d6:c6:a2:a2:38:df:bb:b4:32:bb:90:fe:c9:
c5:40:f3:1e:a8:00:21:a9:ac:0f:3f:c1:83:a8:57:18:6a:cc:
5a:89:3e:f3:97:8f:bb:47:2f:0e:a2:94:95:d2:35:cb:42:d3:
c5:49:8c:ec:e2:2f:73:1e:f8:53:31:58:dc:a5:38:8d:d7:43:
57:88:35:96:84:75:63:85:a8:56:87:d9:8e:8c:2b:be:bf:05:
61:4f:ef:b4:12:92:8d:d2:5f:07:56:1a:dd:99:c3:11:30:d9:
75:f7:35:97:0e:1c:48:1d:75:53:cd:6f:56:de:3b:91:fe:b2:
9f:b4:2b:13:99:7a:4b:e0:06:c0:a4:a3:58:62:20:28:52:90:
96:f9:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:07 2026 by rpki-client