Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/DMy4O9te3FGDOiHfmdnAD5qTobI.roa
File: DMy4O9te3FGDOiHfmdnAD5qTobI.roa (raw, json)
Hash identifier: 6GA6MuFe9G8co+k7t6siAugdUllbUXR6POYCJOYkv+8=
Subject key identifier: 0C:CC:B8:3B:DB:5E:DC:51:83:3A:21:DF:99:D9:C0:0F:9A:93:A1:B2
Certificate issuer: /CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Certificate serial: 019D06203E96F48211A266658A419C28456B
Authority key identifier: B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/DMy4O9te3FGDOiHfmdnAD5qTobI.roa
Signing time: Thu 19 Mar 2026 12:44:29 +0000
ROA not before: Thu 19 Mar 2026 12:44:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215628
IP address blocks: 94.156.245.0/24 maxlen: 24
109.175.234.0/24 maxlen: 24
194.62.113.0/24 maxlen: 24
203.32.197.0/24 maxlen: 24
203.56.45.0/24 maxlen: 24
217.13.99.0/24 maxlen: 24
2a0d:6c00::/31 maxlen: 31
2a0d:6c02::/31 maxlen: 31
2a0d:6c04::/31 maxlen: 31
2a0d:6c06::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:20:3e:96:f4:82:11:a2:66:65:8a:41:9c:28:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Validity
Not Before: Mar 19 12:44:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cccb83bdb5edc51833a21df99d9c00f9a93a1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:fa:2b:5c:7e:02:93:ed:4d:bb:53:47:21:
23:f3:8e:5f:78:66:c7:20:04:88:52:45:bb:26:3c:
c3:9a:9a:33:55:86:6a:3f:b9:7f:25:5f:61:3d:42:
4a:6c:4f:fd:8e:ae:7b:04:5c:d1:64:36:b6:20:02:
c2:49:14:d5:fa:bf:5b:d6:64:4c:0a:13:1e:4f:f2:
49:ba:a2:da:83:bf:83:1c:ae:b8:7f:44:a5:fe:46:
b9:18:ee:0b:d1:03:ac:b7:8f:05:9f:b8:ab:24:10:
33:9c:0c:b7:96:6e:37:31:56:d6:02:b3:ec:96:0b:
be:b1:2f:14:99:98:cf:4c:86:82:86:9f:3f:f9:0e:
7f:e2:d9:6f:b1:bd:78:d8:f8:cc:44:d7:cd:16:27:
21:c5:04:fe:89:a3:8f:83:b1:3e:e6:7c:dc:d5:9c:
8d:d9:2c:4c:86:09:7a:12:1c:49:c0:aa:53:0d:1e:
c3:8b:d3:54:d4:1b:5e:1e:3d:87:bb:f5:34:ea:ec:
6a:5a:44:0e:28:b6:e1:27:b3:fe:45:e3:ad:bd:a3:
d3:5c:41:f5:05:4b:f8:f9:ac:65:c2:b6:63:1b:47:
5d:66:f1:de:db:9d:84:2e:e7:95:fa:16:25:6c:1a:
9b:0a:43:49:f0:95:e0:09:75:40:c0:13:32:9e:3e:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CC:B8:3B:DB:5E:DC:51:83:3A:21:DF:99:D9:C0:0F:9A:93:A1:B2
X509v3 Authority Key Identifier:
keyid:B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/DMy4O9te3FGDOiHfmdnAD5qTobI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.245.0/24
109.175.234.0/24
194.62.113.0/24
203.32.197.0/24
203.56.45.0/24
217.13.99.0/24
IPv6:
2a0d:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
4f:5e:d8:62:7e:dc:ec:77:26:97:c6:6f:70:b1:5a:d8:8c:c2:
03:a8:19:9b:f6:db:ca:04:44:d9:c4:5e:dd:f0:4b:d2:e9:be:
50:6e:e9:ba:ae:95:58:4b:56:62:cc:f3:51:25:92:b1:51:62:
32:ce:93:72:c3:e7:74:8d:34:0e:f4:36:54:f8:19:1f:e8:cd:
51:4e:8d:b1:6e:75:a9:bd:f7:af:72:d2:85:aa:67:bf:ad:de:
d7:81:39:bc:69:e7:f6:77:d3:d3:08:75:a2:9f:68:1c:be:d3:
c3:dc:71:92:44:98:b4:66:d5:cc:d7:1c:a9:c5:09:d3:06:ee:
06:05:3b:29:2e:3e:b0:3e:13:92:99:33:2b:d6:d3:3d:00:02:
eb:d0:37:8a:e1:93:42:50:5b:a0:a1:e5:3d:8e:cd:77:22:ae:
79:56:9d:94:db:a6:c8:83:ff:40:bc:e7:75:9c:f4:8a:27:5e:
81:12:9f:79:6e:87:c4:14:3c:10:55:e7:2e:1e:df:df:29:76:
4d:49:a5:ea:da:dd:4f:34:44:ae:19:3f:f6:c0:08:32:06:c3:
3b:11:dd:a6:c8:a6:3a:4f:99:23:2f:3d:67:44:0c:54:e5:03:
45:e6:0a:1b:32:bf:0a:ac:f4:e9:7d:ac:33:ea:e1:ce:78:16:
ce:8b:dd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:13 2026 by rpki-client