Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/dunuEmFd6kXfKHHl9Q23ONpszHE.roa
File: dunuEmFd6kXfKHHl9Q23ONpszHE.roa (raw, json)
Hash identifier: xEQlXHfQVTehivNYjm2usMnLx3UCGWXBfr3bSmDFC04=
Subject key identifier: 76:E9:EE:12:61:5D:EA:45:DF:28:71:E5:F5:0D:B7:38:DA:6C:CC:71
Certificate issuer: /CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Certificate serial: 019F3DB339D014848DED2921EDF4378B549E
Authority key identifier: 16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/dunuEmFd6kXfKHHl9Q23ONpszHE.roa
Signing time: Tue 07 Jul 2026 17:49:43 +0000
ROA not before: Tue 07 Jul 2026 17:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219414
IP address blocks: 192.124.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:b3:39:d0:14:84:8d:ed:29:21:ed:f4:37:8b:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Validity
Not Before: Jul 7 17:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76e9ee12615dea45df2871e5f50db738da6ccc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:24:7f:9e:18:ab:66:2a:ff:44:15:2e:a4:
77:c5:86:86:ed:aa:9a:43:ed:21:81:5c:a2:25:b8:
b2:d7:66:8f:fa:c9:59:06:61:78:f0:8e:89:aa:c1:
58:09:bd:06:2c:ad:1d:6b:36:d5:f1:46:e4:c3:a9:
b5:ea:31:1b:b1:b4:91:dc:1a:3a:d8:ee:8f:8e:3e:
d6:b3:ff:a1:2c:e0:dd:1c:8a:17:f1:8c:e4:02:3d:
96:8f:f0:f9:20:39:7d:c0:7a:59:47:3a:a5:11:be:
50:b5:59:fa:1c:11:a3:44:94:23:9f:2c:f1:bc:5e:
5b:e8:32:5d:2c:27:70:74:f6:0d:dc:62:bc:9f:81:
06:ce:62:f3:1f:ff:98:da:5b:d0:7a:04:6a:65:f5:
8d:3c:90:da:2f:72:c1:53:d8:3d:fa:d6:85:66:66:
9f:8e:96:c4:4d:44:d9:35:0f:a9:0e:94:20:10:89:
18:6a:0c:11:27:83:1a:00:6b:3a:84:34:52:42:99:
38:76:a3:0c:85:7c:6b:ed:1d:3e:7c:3f:de:30:68:
46:f6:7a:53:73:e4:cf:c4:da:e1:08:ea:38:3c:fa:
ba:6d:c6:e1:bb:3c:d7:23:15:51:94:da:94:e6:9a:
2d:9a:fb:19:b2:8c:88:ae:dc:cc:f6:86:31:1d:4f:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:EE:12:61:5D:EA:45:DF:28:71:E5:F5:0D:B7:38:DA:6C:CC:71
X509v3 Authority Key Identifier:
keyid:16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/dunuEmFd6kXfKHHl9Q23ONpszHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.198.0/24
Signature Algorithm: sha256WithRSAEncryption
24:99:31:50:67:6b:69:5a:b9:c6:9f:63:2d:f3:ff:7a:40:01:
a6:1f:f9:44:80:27:ea:30:bc:58:59:56:a3:61:4d:83:43:7a:
6e:aa:48:93:a2:5c:62:12:85:12:d7:a1:f2:6b:6a:cc:a1:70:
8d:86:7a:6f:fa:d5:12:6f:bc:4d:0a:03:86:ee:5d:1a:78:63:
a3:9f:88:d1:db:18:0c:61:8a:63:b8:c2:fd:bb:04:cf:82:d5:
dd:20:84:00:19:4a:b9:1c:24:ff:f5:a5:f7:25:ef:b4:3f:d8:
2a:03:53:3c:72:fa:9d:e3:cd:f4:d9:67:b5:f9:48:3c:18:3b:
82:9e:35:fc:eb:05:ef:ec:da:cb:f4:d4:61:9a:d1:06:b6:9e:
ac:9a:61:23:91:d7:f9:d6:31:bd:c8:1c:12:18:84:6c:95:a6:
c3:7f:5f:22:7b:25:b2:dd:ac:d8:73:9c:06:23:43:02:7d:12:
75:9b:b4:79:c1:eb:7f:b6:1b:94:55:59:cd:3d:83:fa:90:5a:
66:41:7d:df:41:d5:dc:be:28:38:e3:de:15:b1:fb:3a:ae:ab:
c6:4c:8a:0f:61:88:51:5f:b7:eb:5d:30:3d:2b:b0:41:78:ee:
5e:12:60:26:1e:91:cc:b4:b6:56:36:2f:0c:c1:aa:14:3f:ec:
d3:59:9c:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ89sznQFISN7Skh7fQ3i1SeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmU5ZTA5MTZlY2Q0OWIyMGQ1NDJmZjNhNDEwZTQxNmI3
NTg1YjQwHhcNMjYwNzA3MTc0OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmU5ZWUxMjYxNWRlYTQ1ZGYyODcxZTVmNTBkYjczOGRhNmNjYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/4kf54Yq2Yq/0QVLqR3xYaG7aqa
Q+0hgVyiJbiy12aP+slZBmF48I6JqsFYCb0GLK0dazbV8Ubkw6m16jEbsbSR3Bo6
2O6Pjj7Ws/+hLODdHIoX8YzkAj2Wj/D5IDl9wHpZRzqlEb5QtVn6HBGjRJQjnyzx
vF5b6DJdLCdwdPYN3GK8n4EGzmLzH/+Y2lvQegRqZfWNPJDaL3LBU9g9+taFZmaf
jpbETUTZNQ+pDpQgEIkYagwRJ4MaAGs6hDRSQpk4dqMMhXxr7R0+fD/eMGhG9npT
c+TPxNrhCOo4PPq6bcbhuzzXIxVRlNqU5potmvsZsoyIrtzM9oYxHU8UjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbp7hJhXepF3yhx5fUNtzjabMxxMB8GA1UdIwQY
MBaAFBa+ngkW7NSbINVC/zpBDkFrdYW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnI2ZUNSYnMxSnNnMVVMX09rRU9RV3QxaGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85ODUwYzAtZDVjOS00MDFjLThjMDkt
MjBiYWJiOTc2NmM4LzEvZHVudUVtRmQ2a1hmS0hIbDlRMjNPTnBzekhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85ODUwYzAtZDVjOS00MDFjLThjMDktMjBiYWJiOTc2NmM4
LzEvRnI2ZUNSYnMxSnNnMVVMX09rRU9RV3QxaGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHzGMA0G
CSqGSIb3DQEBCwUAA4IBAQAkmTFQZ2tpWrnGn2Mt8/96QAGmH/lEgCfqMLxYWVaj
YU2DQ3puqkiTolxiEoUS16Hya2rMoXCNhnpv+tUSb7xNCgOG7l0aeGOjn4jR2xgM
YYpjuML9uwTPgtXdIIQAGUq5HCT/9aX3Je+0P9gqA1M8cvqd48302We1+Ug8GDuC
njX86wXv7NrL9NRhmtEGtp6smmEjkdf51jG9yBwSGIRslabDf18ieyWy3azYc5wG
I0MCfRJ1m7R5wet/thuUVVnNPYP6kFpmQX3fQdXcvig4494Vsfs6rqvGTIoPYYhR
X7frXTA9K7BBeO5eEmAmHpHMtLZWNi8MwaoUP+zTWZxl
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:30 2026 by rpki-client