Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/dHTSZG8TdSuv5jgCShEUGqyvGiw.roa
File: dHTSZG8TdSuv5jgCShEUGqyvGiw.roa (raw, json)
Hash identifier: +ZC5a7s6sH7l7SttQEXeVRNgey70bU4V9g0KHoqIO/E=
Subject key identifier: 74:74:D2:64:6F:13:75:2B:AF:E6:38:02:4A:11:14:1A:AC:AF:1A:2C
Certificate issuer: /CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Certificate serial: 019E028F2E6CA00CFC0C57F3D8D53EE37919
Authority key identifier: 51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/dHTSZG8TdSuv5jgCShEUGqyvGiw.roa
Signing time: Thu 07 May 2026 13:09:58 +0000
ROA not before: Thu 07 May 2026 13:09:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:8f:2e:6c:a0:0c:fc:0c:57:f3:d8:d5:3e:e3:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Validity
Not Before: May 7 13:09:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7474d2646f13752bafe638024a11141aacaf1a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:1a:87:cd:a2:b6:84:fe:e9:31:3f:c9:22:
d1:3a:04:cc:89:ac:60:97:7f:35:2f:d9:db:b0:0e:
b2:b5:6a:f8:c6:25:a6:9e:1e:70:49:83:fb:fb:73:
87:73:19:ec:aa:82:7f:f5:90:d8:2a:a9:ef:16:f7:
13:2f:f1:be:6c:2b:f5:56:6f:a2:58:81:e9:71:e2:
54:22:84:52:a4:e6:81:2d:96:14:bc:30:3e:73:67:
98:fb:ad:62:72:d4:21:24:d9:c4:64:61:92:43:43:
29:d8:ec:f5:83:21:b9:7e:c9:40:99:f9:60:c5:4a:
db:99:df:7a:f7:cf:30:28:bf:36:e0:0f:04:99:f8:
3c:63:2e:fc:d9:5a:24:d4:91:e8:fd:3c:92:96:fe:
b7:74:24:91:15:67:12:eb:53:9b:6d:05:ac:47:5f:
0b:a1:6c:d3:25:53:eb:3a:5c:8c:da:54:61:18:03:
bd:80:fa:43:bb:7b:d6:ca:85:0e:92:d2:9f:a2:3e:
06:8e:3b:19:28:41:6e:f9:df:41:92:d6:ac:d8:e0:
0e:35:83:de:fd:6d:45:16:3c:22:a1:00:ef:d8:10:
b8:f7:61:e8:68:c8:94:97:98:02:af:06:80:ba:72:
46:e6:8c:66:2c:cd:61:2c:7c:12:3a:7c:3c:45:18:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:D2:64:6F:13:75:2B:AF:E6:38:02:4A:11:14:1A:AC:AF:1A:2C
X509v3 Authority Key Identifier:
keyid:51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/dHTSZG8TdSuv5jgCShEUGqyvGiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fe:1d:e0:9f:16:6c:e5:ef:37:18:57:39:58:b9:79:f5:7d:
78:39:e6:69:ac:71:03:cb:69:bb:e3:d0:82:62:8b:1c:7f:59:
1b:a1:40:36:04:2b:5f:b4:1a:6e:18:d9:e9:54:3e:f5:9a:d6:
29:33:4e:e2:65:bd:ca:19:de:da:97:d5:07:51:e8:ec:21:b9:
5e:89:13:3a:16:17:c9:39:2b:48:00:cb:ad:cf:66:32:b5:41:
c0:7a:a5:a1:e3:2c:df:a5:32:49:ba:8f:a0:97:1d:05:02:5a:
aa:10:6b:3a:20:40:16:ce:66:b5:b7:79:70:87:a1:1a:c4:ab:
09:77:18:78:e5:18:5c:bb:44:45:2a:bf:68:09:4f:fa:12:54:
e9:5d:f0:3b:20:e0:3c:e7:d9:7b:a2:96:0e:5c:1a:57:41:71:
b6:5d:c5:e8:90:56:34:99:13:af:6d:e2:8c:4e:19:09:cd:82:
3e:f0:08:6e:49:8e:1d:2d:88:7b:7a:73:66:83:e2:e9:20:49:
20:90:20:52:b3:a2:6f:e4:ca:46:7c:c9:1c:19:42:2e:e2:06:
0c:4d:79:de:76:a6:f2:14:b8:6c:60:47:07:c8:0a:18:30:28:
ae:bd:1e:84:ec:5a:92:ce:8c:32:0e:8d:91:91:98:4c:35:14:
38:64:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:35 2026 by rpki-client