Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/DuK-X94vEyQXwQTx2UrcvTrl7-o.roa
File: DuK-X94vEyQXwQTx2UrcvTrl7-o.roa (raw, json)
Hash identifier: bToJifrBzv+uADv31V3jbLvhdQ1mslbzhsv/yAd1Zlw=
Subject key identifier: 0E:E2:BE:5F:DE:2F:13:24:17:C1:04:F1:D9:4A:DC:BD:3A:E5:EF:EA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019E0218FA5C6A3B89CED673FC40915B3ABD
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/DuK-X94vEyQXwQTx2UrcvTrl7-o.roa
Signing time: Thu 07 May 2026 11:00:51 +0000
ROA not before: Thu 07 May 2026 11:00:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 159.148.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:18:fa:5c:6a:3b:89:ce:d6:73:fc:40:91:5b:3a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: May 7 11:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ee2be5fde2f132417c104f1d94adcbd3ae5efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:60:ec:05:f4:23:67:17:14:0f:a8:e1:26:
e4:d8:7e:dc:4d:4b:c6:19:e0:0d:c7:88:06:aa:d4:
0e:33:69:bf:89:5e:31:34:29:ee:06:ce:47:c5:15:
ac:7c:e1:15:f0:6d:80:1d:a8:bb:16:86:f1:ff:9d:
60:5b:82:9c:34:a0:8a:45:46:b4:9e:ac:f6:ad:40:
eb:c9:82:08:ab:f5:54:16:54:93:19:1d:04:57:8c:
08:62:e5:30:8e:d3:5b:c0:25:4c:c0:6a:a5:18:1d:
f8:91:82:e5:fa:70:f8:bc:74:c1:be:c2:19:06:97:
65:13:85:64:9d:70:48:03:0a:34:c2:22:9d:8b:27:
b8:f6:51:62:9c:f8:66:1d:38:94:f5:bc:c6:95:6d:
62:55:31:8d:28:02:c6:23:cc:34:dc:b6:a7:b4:2b:
8a:24:72:57:95:0e:4a:06:68:b8:fe:59:dc:28:3a:
bf:98:e8:3a:85:93:e1:4f:f8:0e:0c:bc:1d:31:48:
c0:27:92:c4:0f:8f:ed:69:0e:0d:5a:2b:30:52:97:
e4:c1:d2:e9:85:65:66:1a:01:7c:72:7c:91:d7:86:
2b:20:fb:82:18:9c:90:b4:06:97:cb:85:b2:4f:a0:
aa:79:0d:80:e9:83:e2:d3:8d:72:f0:8d:db:28:88:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:BE:5F:DE:2F:13:24:17:C1:04:F1:D9:4A:DC:BD:3A:E5:EF:EA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/DuK-X94vEyQXwQTx2UrcvTrl7-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.131.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0a:1c:b9:45:e9:f2:64:fe:e1:49:56:79:dc:13:96:ce:ef:
e8:c6:51:b7:a8:cb:58:af:b3:57:cf:fc:f0:00:9a:e5:4f:52:
ea:19:f9:cb:c0:51:9b:7d:78:96:10:7f:ae:0b:08:61:39:43:
ed:ef:23:26:ed:f7:17:83:8e:b8:03:3a:36:08:b8:92:74:c0:
4f:23:fe:64:7c:fb:75:dc:97:ca:67:5c:5e:6f:70:78:a6:df:
95:50:13:4f:c6:82:30:f4:7d:8d:39:bc:d0:0f:cb:a1:58:64:
53:c4:ff:05:ff:04:f2:5f:83:95:1e:80:ee:ef:ea:bc:11:72:
e2:1a:b5:4a:bf:27:c2:29:4e:d4:d7:bf:c9:4f:ca:e1:41:8a:
7f:e9:e3:dc:eb:ec:85:c1:5e:b2:d0:e8:6f:2f:e4:b7:29:ac:
f2:a8:4a:87:84:6c:02:5f:34:86:2b:2d:19:71:a7:89:e5:45:
23:e6:90:f4:69:b8:33:c2:45:e7:2f:ba:1a:bd:4a:70:b5:3a:
3e:b8:70:17:10:a0:a2:df:4d:8d:2a:db:5a:69:f4:e0:cc:59:
93:55:1e:8d:a6:e9:76:06:b7:12:29:b9:23:17:9b:17:e5:b8:
ec:99:31:20:09:dd:70:3b:ff:59:b6:9e:1f:ee:b1:7a:2b:de:
5c:0b:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:23 2026 by rpki-client