Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Do9uH4GuSSXjqLJT71BiWLHWT2w.roa
File: Do9uH4GuSSXjqLJT71BiWLHWT2w.roa (raw, json)
Hash identifier: 5XwT6rvHdbaAfgyXR6pxcm1s0rVkB5Q1Ryhr/DA2dOA=
Subject key identifier: 0E:8F:6E:1F:81:AE:49:25:E3:A8:B2:53:EF:50:62:58:B1:D6:4F:6C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F89A825F3362A0C0F8A1EF4F69CE0B412
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Do9uH4GuSSXjqLJT71BiWLHWT2w.roa
Signing time: Wed 22 Jul 2026 11:48:46 +0000
ROA not before: Wed 22 Jul 2026 11:48:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219211
IP address blocks: 81.181.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:a8:25:f3:36:2a:0c:0f:8a:1e:f4:f6:9c:e0:b4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 22 11:48:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e8f6e1f81ae4925e3a8b253ef506258b1d64f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:64:a9:d2:10:39:87:01:7d:cc:b6:2e:8d:
72:97:f6:94:65:ca:c2:7a:3c:7a:1b:96:c4:d2:b5:
81:4f:cc:b9:46:70:a3:bd:3a:d9:82:ff:73:17:0e:
a8:83:4c:7a:da:2c:e8:1f:71:be:ee:b5:5f:f1:9b:
dd:0d:d6:b1:71:32:2a:37:13:64:58:f0:a2:93:59:
5b:58:55:c9:4c:29:2c:fd:53:b6:d5:14:4f:e5:79:
e6:3c:1c:08:f7:6f:2a:4f:87:5c:4e:a4:ca:06:47:
de:6c:7d:10:84:fe:85:d2:33:7a:d5:1b:eb:46:00:
ee:b9:77:9a:8e:62:fd:ab:80:f5:9f:6e:47:2a:59:
71:19:fb:b9:5f:77:4e:49:41:93:ca:9a:33:eb:60:
1e:cd:9b:e1:83:a1:fe:14:ef:f2:2c:04:14:cd:5e:
6e:2e:fe:ee:0d:6f:bc:c5:4b:10:2e:d4:a8:d7:8a:
43:59:68:e3:5c:18:2a:5b:b6:44:06:3a:1a:db:2a:
6f:81:08:18:eb:8a:5c:ae:03:e9:38:9d:8f:ed:85:
af:82:c7:6e:88:8a:f3:2c:aa:e1:d5:04:63:8b:83:
b2:f1:36:fd:37:c3:2f:43:d8:13:a6:b0:c0:01:32:
0e:99:82:e1:ec:d0:50:fc:90:ed:8c:51:3d:e9:24:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:6E:1F:81:AE:49:25:E3:A8:B2:53:EF:50:62:58:B1:D6:4F:6C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Do9uH4GuSSXjqLJT71BiWLHWT2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.190.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ad:1b:b9:8b:a3:35:4f:87:44:16:6b:12:5f:ca:ec:70:ce:
be:26:62:54:06:0c:ee:79:46:3f:12:0f:95:dc:fd:d0:2f:58:
a0:a7:a3:68:0c:aa:00:0c:65:b0:b1:23:eb:ed:10:d9:68:d7:
74:d8:ec:19:7e:79:1b:ba:29:61:61:05:5c:4d:4e:da:36:e9:
90:82:b1:29:f0:9c:c4:1b:72:d6:db:0d:b8:85:1b:9f:73:fd:
03:e1:0b:11:bf:a5:cd:9d:06:8e:7b:f3:de:98:f2:9d:c1:b1:
af:b5:54:9c:af:68:1e:67:e4:57:3c:93:37:bf:34:4d:8d:a0:
8c:44:86:4b:54:6f:3a:54:ed:1e:64:13:e7:bf:4a:17:d8:20:
b3:34:cd:d2:12:c8:c6:52:7a:3b:db:8c:5f:42:33:2f:ea:26:
77:eb:a7:90:55:3b:40:01:45:45:a0:b5:d5:e8:7d:26:91:7a:
39:06:de:52:bf:9f:17:28:24:56:40:98:34:f3:98:e7:0c:4b:
fd:f2:34:48:f0:33:7d:10:e2:76:d3:e8:fe:5b:b0:eb:9c:14:
80:05:83:45:3d:cd:e6:8e:a5:10:19:8c:c6:63:44:36:38:a4:
2c:46:cf:35:0c:d4:05:de:c7:68:ae:9a:bb:9e:55:1e:2e:91:
be:44:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:12 2026 by rpki-client