Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/D-vJ6tzswMtAxUctqs3eKwCIQgE.roa
File: D-vJ6tzswMtAxUctqs3eKwCIQgE.roa (raw, json)
Hash identifier: FtYMj9BfRfKWBdNTN6VHaFoX0MlyoSotTb2G7IMIiC0=
Subject key identifier: 0F:EB:C9:EA:DC:EC:C0:CB:40:C5:47:2D:AA:CD:DE:2B:00:88:42:01
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F8D34C97884FC0FCAE5D885EF4C4A0785
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/D-vJ6tzswMtAxUctqs3eKwCIQgE.roa
Signing time: Thu 23 Jul 2026 04:21:14 +0000
ROA not before: Thu 23 Jul 2026 04:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213817
IP address blocks: 195.58.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:34:c9:78:84:fc:0f:ca:e5:d8:85:ef:4c:4a:07:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 23 04:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0febc9eadcecc0cb40c5472daacdde2b00884201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:96:fd:37:03:fa:aa:a2:70:6e:5e:51:ff:
6b:ea:1b:9e:de:8f:44:93:f6:0d:8b:0c:1c:1a:b6:
3c:92:e0:7e:17:1f:17:3e:13:29:16:51:31:f6:c3:
72:e7:b5:f0:d4:40:36:c7:6c:73:6a:6d:a9:71:b4:
57:67:10:4e:7e:7a:7e:fe:55:b8:68:36:21:d8:7c:
0b:ef:d1:47:d9:d3:f3:f0:b1:22:a8:e0:17:81:49:
60:ad:e4:c4:26:ba:3c:9f:eb:9b:fc:bd:62:37:a9:
53:40:5d:93:68:a1:b6:16:ef:fe:b7:6a:22:f7:1f:
c4:ec:c1:db:6a:ef:0a:d1:76:e5:6b:83:c8:28:14:
12:09:5c:7f:3f:5b:14:1b:3e:ff:cb:53:19:b7:f2:
e9:0d:ef:81:97:bb:9b:75:6f:77:76:29:9f:36:8f:
4e:f5:98:23:18:79:bd:b1:6b:7c:db:bb:1c:39:e7:
20:d6:dc:88:8b:7c:eb:ba:80:cd:f6:ca:43:84:93:
d7:ef:ca:e5:6e:37:85:2e:20:34:32:ee:c7:f1:29:
bb:7e:57:a3:91:dd:b1:88:1f:c5:cf:22:40:de:e0:
a4:48:c0:db:9e:f5:d4:fd:36:ba:93:7e:f5:a4:55:
3c:64:5b:c2:cb:f8:85:15:05:21:5c:d1:04:f5:54:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:C9:EA:DC:EC:C0:CB:40:C5:47:2D:AA:CD:DE:2B:00:88:42:01
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/D-vJ6tzswMtAxUctqs3eKwCIQgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.44.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e6:b2:4d:d2:d3:3b:5e:2b:66:01:cc:e5:4b:20:19:a3:c0:
72:73:53:a9:30:dd:af:89:d2:f0:3c:3b:78:fe:34:d6:bf:2f:
d0:8f:7c:0b:fd:74:20:ea:67:8d:08:27:a9:19:36:9f:05:f8:
7d:ae:18:cb:33:08:5c:16:ca:48:b5:4a:e7:6d:23:46:55:3e:
ea:46:75:d9:70:b4:7c:93:03:8a:69:ec:30:2a:38:78:d7:f2:
49:24:13:e1:08:f5:70:cb:c4:ce:5c:08:5a:7b:b4:55:46:7b:
9e:98:3f:04:ea:b9:b0:c3:18:7b:f9:6e:27:1c:ca:aa:f7:3d:
43:8d:7e:38:f9:69:d4:3f:b9:8d:03:0c:f6:23:f5:9f:18:c1:
a5:50:96:05:16:13:e5:9e:02:1f:bb:38:55:70:f2:cc:ef:f8:
5b:79:98:de:d0:22:68:01:25:ff:cb:a0:af:52:69:fa:03:2d:
e2:20:4f:71:7a:78:2a:4b:0a:cf:21:41:41:2a:1b:6f:6d:f3:
c7:2a:23:9e:a8:58:ef:b5:c8:79:43:85:1c:4a:d8:30:e4:29:
83:82:c2:5a:31:51:af:25:27:e5:82:db:c2:25:f0:cf:73:a6:
e7:dc:3f:8d:a5:96:35:98:f0:17:8f:63:e7:69:a0:27:66:9c:
3e:b2:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:09 2026 by rpki-client