Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/djmrHEf6AOnUXH6D3j-dskP0Zmg.roa
File: djmrHEf6AOnUXH6D3j-dskP0Zmg.roa (raw, json)
Hash identifier: U3bCf9w7k40+ELLZB1Hdgqa19bOjzOjKMfxiZiMzy5I=
Subject key identifier: 76:39:AB:1C:47:FA:00:E9:D4:5C:7E:83:DE:3F:9D:B2:43:F4:66:68
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 019C8FC2143745403CEA90C9525735D57C2C
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/djmrHEf6AOnUXH6D3j-dskP0Zmg.roa
Signing time: Tue 24 Feb 2026 13:06:26 +0000
ROA not before: Tue 24 Feb 2026 13:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19695
IP address blocks: 141.138.74.0/24 maxlen: 24
141.138.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:c2:14:37:45:40:3c:ea:90:c9:52:57:35:d5:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Feb 24 13:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7639ab1c47fa00e9d45c7e83de3f9db243f46668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:86:25:23:49:70:df:ce:3a:00:3c:05:1b:
9d:8a:16:d3:ac:cd:20:41:ff:2e:95:d2:11:94:29:
38:d6:3e:d1:b2:2a:2b:d1:cb:87:01:98:dd:a8:e9:
a9:92:57:ea:03:59:80:25:b6:d6:2c:59:b8:cc:07:
b6:76:de:b3:31:cc:b5:2c:b7:06:be:cc:68:e7:57:
a4:e8:d3:db:99:51:f9:95:1c:1f:82:94:e0:92:fc:
2e:d7:7e:8e:b1:c0:95:36:73:00:b6:ea:5a:80:be:
03:b8:4f:09:98:fd:d6:31:60:76:73:1c:83:74:fc:
e3:15:00:8a:40:c4:fa:2f:c1:8d:85:7f:5e:23:fe:
70:8b:39:fb:12:4d:ba:95:32:a4:e0:7e:eb:87:7e:
e0:7c:9c:f1:9f:81:77:8f:99:13:06:c2:7e:b9:6f:
73:c0:c6:53:8b:c0:d7:47:1c:67:d3:06:10:ff:ca:
84:4b:2e:9c:33:87:a4:ab:a8:94:7e:04:d4:d0:60:
96:70:57:f5:08:2c:1f:00:7b:6c:10:60:e3:f2:61:
d3:31:57:ec:ad:4c:d7:12:51:43:db:3f:24:7d:35:
5a:4a:e7:65:68:69:2f:c7:93:5b:e1:9f:1f:f7:31:
09:50:f8:9a:4c:37:d5:5a:fd:d0:1e:a8:92:ea:eb:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:AB:1C:47:FA:00:E9:D4:5C:7E:83:DE:3F:9D:B2:43:F4:66:68
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/djmrHEf6AOnUXH6D3j-dskP0Zmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.74.0/24
141.138.77.0/24
Signature Algorithm: sha256WithRSAEncryption
03:80:16:01:08:34:62:7e:69:28:7d:ca:cd:2a:c3:1f:ff:74:
06:d8:bf:83:e2:61:cd:c5:1a:70:e2:fc:77:0a:76:61:42:ba:
a8:5b:92:2d:85:4c:ea:5e:26:e0:34:51:cc:a0:4a:ed:26:54:
23:6e:d5:10:02:33:c7:b5:4d:39:2e:13:d4:bf:34:62:65:1d:
1b:df:52:93:e9:c0:f2:82:0c:c2:41:02:65:6e:3a:9f:43:86:
1f:95:fb:63:de:98:7b:0b:91:b3:e3:5d:8b:74:60:22:75:2f:
57:f0:cc:09:aa:2b:42:e7:a6:0d:0a:25:64:6d:be:33:56:20:
c9:9f:e2:c3:9e:b5:8a:5c:82:b9:c6:5b:b7:e1:df:28:65:8e:
6c:94:04:0a:d3:dc:e4:5e:6f:92:40:2f:98:d4:02:0b:74:5f:
2b:14:6e:fa:ab:d4:2f:27:5c:3e:14:07:10:b8:02:fa:cd:45:
ea:96:86:65:e9:d8:1b:ac:65:3d:5c:bc:92:73:b1:68:16:d7:
bb:9b:df:65:16:0b:7b:34:d8:8c:4a:5b:81:04:73:1a:f4:ad:
18:6b:6b:9f:0a:6b:fc:62:26:ca:59:c5:54:dd:0b:04:45:05:
25:28:74:00:cf:11:12:98:eb:ae:39:77:76:36:e7:8a:cd:1d:
7b:87:5e:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyPwhQ3RUA86pDJUlc11XwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5
MzFiYjkwHhcNMjYwMjI0MTMwNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjM5YWIxYzQ3ZmEwMGU5ZDQ1YzdlODNkZTNmOWRiMjQzZjQ2NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw++GJSNJcN/OOgA8BRudihbTrM0g
Qf8uldIRlCk41j7Rsior0cuHAZjdqOmpklfqA1mAJbbWLFm4zAe2dt6zMcy1LLcG
vsxo51ek6NPbmVH5lRwfgpTgkvwu136OscCVNnMAtupagL4DuE8JmP3WMWB2cxyD
dPzjFQCKQMT6L8GNhX9eI/5wizn7Ek26lTKk4H7rh37gfJzxn4F3j5kTBsJ+uW9z
wMZTi8DXRxxn0wYQ/8qESy6cM4ekq6iUfgTU0GCWcFf1CCwfAHtsEGDj8mHTMVfs
rUzXElFD2z8kfTVaSudlaGkvx5Nb4Z8f9zEJUPiaTDfVWv3QHqiS6use2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHY5qxxH+gDp1Fx+g94/nbJD9GZoMB8GA1UdIwQY
MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt
M2IxMDNkNWE2OTBhLzEvZGptckhFZjZBT25VWEg2RDNqLWRza1AwWm1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh
LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjYpKAwQA
jYpNMA0GCSqGSIb3DQEBCwUAA4IBAQADgBYBCDRifmkofcrNKsMf/3QG2L+D4mHN
xRpw4vx3CnZhQrqoW5IthUzqXibgNFHMoErtJlQjbtUQAjPHtU05LhPUvzRiZR0b
31KT6cDyggzCQQJlbjqfQ4Yflftj3ph7C5Gz412LdGAidS9X8MwJqitC56YNCiVk
bb4zViDJn+LDnrWKXIK5xlu34d8oZY5slAQK09zkXm+SQC+Y1AILdF8rFG76q9Qv
J1w+FAcQuAL6zUXqloZl6dgbrGU9XLySc7FoFte7m99lFgt7NNiMSluBBHMa9K0Y
a2ufCmv8YibKWcVU3QsERQUlKHQAzxESmOuuOXd2NueKzR17h15L
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:28:52 2026 by rpki-client