Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DmdiXqODQYe4KqAb8ylF5-VbpSE.roa
File: DmdiXqODQYe4KqAb8ylF5-VbpSE.roa (raw, json)
Hash identifier: FSglTywFJ0+HAhHPjk3hh3TT79xIChFjKgbMtyWw+6g=
Subject key identifier: 0E:67:62:5E:A3:83:41:87:B8:2A:A0:1B:F3:29:45:E7:E5:5B:A5:21
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A0CEC52F011FCB5B5FA9FB181DEFCF5CAB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DmdiXqODQYe4KqAb8ylF5-VbpSE.roa
Signing time: Wed 23 Sep 2026 14:57:04 +0000
ROA not before: Wed 23 Sep 2026 14:57:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41494
IP address blocks: 194.102.178.0/24 maxlen: 24
2a03:5e81::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c5:2f:01:1f:cb:5b:5f:a9:fb:18:1d:ef:cf:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 23 14:57:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e67625ea3834187b82aa01bf32945e7e55ba521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:69:67:b3:5f:57:c0:7d:9a:56:a7:a5:a9:
11:2c:b6:39:d2:a4:6f:6f:c5:51:ea:89:f9:0c:ae:
47:db:5f:cc:b8:a0:86:64:68:9f:51:24:b3:1b:84:
43:ba:11:7a:d0:2b:1c:8f:05:95:3f:50:d4:de:72:
29:a3:fb:40:b7:d2:83:80:a8:d2:88:fa:42:22:4b:
cd:ed:b3:d7:8a:4e:c3:62:21:d8:dc:e0:5f:a0:b1:
bb:c5:ba:16:f7:89:b3:df:f5:39:d1:b0:9a:11:5a:
1c:7d:fe:e9:85:c8:63:86:61:8e:7b:d8:28:3d:69:
0d:86:73:d2:32:37:0c:84:bf:c7:4f:00:50:70:13:
03:c0:22:bc:46:fd:0f:a4:c3:f0:28:c5:a4:e0:b0:
e1:b9:dd:ee:9d:15:3c:08:bb:99:02:cb:da:e3:5d:
1c:7f:83:1c:61:4b:1b:01:d7:ca:1c:02:3b:43:1d:
52:69:3f:50:b5:6a:54:21:b4:a6:df:41:a8:7b:86:
e9:4a:9d:cc:dd:96:a8:d5:e5:cb:8b:08:4b:b5:61:
c5:3c:82:a6:0d:cf:2c:af:74:bc:e7:ff:af:cd:85:
ca:7b:46:a9:1f:50:17:c0:3d:35:f4:9b:c0:58:ca:
f7:f5:2b:24:c1:88:5d:0a:53:86:06:ae:cc:96:b9:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:62:5E:A3:83:41:87:B8:2A:A0:1B:F3:29:45:E7:E5:5B:A5:21
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DmdiXqODQYe4KqAb8ylF5-VbpSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.178.0/24
IPv6:
2a03:5e81::/48
Signature Algorithm: sha256WithRSAEncryption
0e:4a:43:f5:f7:5d:61:18:66:1e:ca:fd:2e:b6:48:bf:bd:25:
46:e7:10:aa:13:5c:ad:ba:8f:f6:f6:cc:be:59:51:96:06:61:
a2:58:44:58:13:65:e0:ef:4f:b3:5e:00:51:48:29:93:2c:09:
c4:63:16:05:b7:97:43:de:89:b8:80:73:5e:4e:d7:02:80:fe:
22:ae:ec:a2:7a:5d:25:d1:8f:5d:0f:fb:75:ca:67:c2:5f:2b:
1f:ad:09:29:5c:10:f4:ab:51:b0:87:6a:91:21:27:53:67:88:
87:47:a0:a2:03:66:31:51:ad:e4:e0:e4:56:fa:0f:37:85:9b:
4d:da:bb:1c:1a:ab:b8:68:f0:3c:5d:ed:60:00:7b:2d:49:e6:
92:37:cc:d9:98:1a:7d:0c:ad:c0:29:94:73:04:39:7b:3a:e7:
38:c7:25:39:ae:b2:d0:9f:f0:c7:03:46:5d:fa:b2:08:3d:ae:
36:ae:11:72:10:12:03:4f:bf:4a:3a:26:ae:98:06:54:7c:65:
1c:53:29:fb:08:0e:2c:82:f1:33:ee:f1:dd:1c:bd:b5:99:bf:
50:dc:0f:b9:9f:eb:76:a7:0c:03:58:63:cd:ac:18:a1:d3:56:
ae:6c:ae:c1:d3:2e:dd:f7:5e:95:7c:17:36:5f:7f:7e:2e:b5:
74:d2:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:46:04 2026 by rpki-client