Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa
File: dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa (raw, json)
Hash identifier: n7M2DLVhupTXknxIXP5S/bJ1i2MjgUBbOoeKbEgGiQg=
Subject key identifier: 74:16:39:8E:07:5B:D5:C2:4E:D5:DA:BA:5E:CF:A6:1B:93:AB:56:52
Certificate issuer: /CN=db11520db30e58560013baee6106ca245f194a4a
Certificate serial: 019F2369008CE1C354F2D801B2DA3407DA8E
Authority key identifier: DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61145
IP address blocks: 185.8.112.0/22 maxlen: 24
194.38.12.0/22 maxlen: 22
2a03:38c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:8c:e1:c3:54:f2:d8:01:b2:da:34:07:da:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db11520db30e58560013baee6106ca245f194a4a
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7416398e075bd5c24ed5daba5ecfa61b93ab5652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:c8:39:6e:d5:94:af:c3:28:59:3d:b3:78:
21:c7:94:46:ab:a7:01:6b:bc:41:53:d6:99:5b:4e:
bd:87:a5:fd:d4:c9:da:43:4b:68:7b:7a:cd:ed:08:
0b:75:58:99:d3:e1:85:ca:cf:2c:b2:03:67:28:18:
21:1b:46:0d:d2:db:a8:66:48:1e:16:9f:94:5a:e4:
14:6e:da:af:ea:59:86:91:74:3c:69:4b:49:b7:25:
a1:af:3b:4a:35:ca:69:53:c4:a2:a9:30:31:f0:6d:
64:5a:94:7d:3f:55:52:1b:60:eb:85:32:d9:67:92:
34:bf:5e:b2:19:29:9d:5b:7e:2e:8f:bc:2d:72:32:
5b:3f:39:5f:8b:42:36:96:22:92:0b:c8:76:9f:71:
71:fe:2f:5a:30:ab:6a:95:ee:9f:c8:6e:44:ae:2b:
7b:e0:87:a6:78:15:94:e5:57:9d:af:2b:0f:2a:bd:
a7:6e:eb:36:cc:e6:d8:a2:eb:fd:09:3f:29:ea:86:
c7:85:7e:07:b2:a0:a1:58:ad:9a:3e:19:a4:69:8c:
68:3f:6c:23:be:3e:e3:e4:2a:23:a8:64:09:69:45:
08:7e:09:7d:1b:ea:f0:55:a8:0d:33:f3:2a:e2:c9:
87:e6:a1:88:cf:91:1a:ee:c4:cb:67:2d:43:36:72:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:16:39:8E:07:5B:D5:C2:4E:D5:DA:BA:5E:CF:A6:1B:93:AB:56:52
X509v3 Authority Key Identifier:
keyid:DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.112.0/22
194.38.12.0/22
IPv6:
2a03:38c0::/32
Signature Algorithm: sha256WithRSAEncryption
64:a3:72:98:77:4c:73:4b:d7:6d:23:b1:22:a1:b0:b9:8e:4a:
6f:cf:46:88:76:a7:d6:f6:cf:4b:19:ee:a4:d1:fd:ec:52:a3:
b6:f1:c7:5b:35:3a:7b:4e:ae:e1:6a:9e:7e:b9:66:28:33:a0:
38:4d:f9:43:81:a3:6d:e9:83:3c:d0:9c:59:80:fd:3b:8e:76:
4d:e9:67:8f:21:4a:fd:c4:d4:0c:8e:78:78:61:cf:68:69:98:
27:70:51:1a:59:1b:56:8f:59:4f:bc:06:0e:f1:da:cb:f0:67:
d4:c1:2f:31:41:00:c9:c5:06:6f:08:02:d2:c9:6e:af:41:55:
22:35:d7:ae:c4:19:86:e0:53:92:ca:05:87:2c:d8:46:bb:6d:
f0:83:fd:3c:eb:3d:45:5a:b7:27:cd:9c:a9:c5:59:d8:15:9f:
56:c9:4a:49:1d:0e:f0:b4:44:46:27:f9:01:f5:48:65:44:f8:
17:5f:79:7a:f0:52:56:bd:01:1d:3b:28:dd:d6:b6:06:a7:ad:
a2:4b:ec:45:67:be:97:61:8b:c8:ea:5c:d7:61:d0:25:cb:62:
1f:81:61:5d:91:a0:cc:79:fa:e4:f7:b8:14:f3:0c:b3:f3:1d:
9e:38:bb:9b:a5:7f:5c:7d:11:04:46:1a:a8:b3:55:06:95:f2:
57:eb:fc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:53 2026 by rpki-client