Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/DPUSg-65E5pGBfQknbaQ9m47_3M.roa
File: DPUSg-65E5pGBfQknbaQ9m47_3M.roa (raw, json)
Hash identifier: ClUAKLPZiNYWTKi85MVHz2KzXTOpRQcs0ZPE7a03qYg=
Subject key identifier: 0C:F5:12:83:EE:B9:13:9A:46:05:F4:24:9D:B6:90:F6:6E:3B:FF:73
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019E1C3159B0C93EF8B00C2940492FF19AC9
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/DPUSg-65E5pGBfQknbaQ9m47_3M.roa
Signing time: Tue 12 May 2026 12:37:36 +0000
ROA not before: Tue 12 May 2026 12:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 89.23.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:31:59:b0:c9:3e:f8:b0:0c:29:40:49:2f:f1:9a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: May 12 12:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cf51283eeb9139a4605f4249db690f66e3bff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:28:05:1a:04:c1:50:35:93:c1:84:ac:49:
e9:3a:af:44:9f:37:2d:00:d5:44:52:e5:22:ef:8b:
6f:fc:c7:17:4c:ac:ac:f8:4e:d8:1b:d9:0f:0f:47:
bf:c8:dd:75:e5:0d:b5:ce:62:b7:0f:09:c7:99:2f:
d0:d5:2b:34:ea:0e:fb:05:7a:27:78:6e:d8:5a:9c:
37:85:70:8a:13:47:8a:13:3b:7c:4e:12:43:ea:ce:
02:8a:cd:bf:c3:21:66:83:fc:c9:2d:ea:7a:be:cd:
ab:0d:3e:4c:ea:52:af:7d:35:a1:ca:05:10:df:a6:
e3:80:11:1a:f1:31:c0:35:2b:20:3f:94:99:0c:77:
0b:21:8c:79:55:4d:a0:47:2e:16:e7:3a:c8:c8:da:
c7:59:fb:4a:ef:a7:a5:b4:7b:56:01:38:ab:c8:0a:
d2:7b:92:6f:e5:a3:de:00:0c:c4:b5:b8:7e:39:12:
73:4c:12:5b:9c:8e:f8:84:a2:59:45:23:59:22:4e:
bc:9f:d1:fe:d6:ee:e7:64:5e:b3:d6:5b:ba:cb:0e:
6e:f7:05:35:3d:8c:c1:95:fc:fd:d3:40:ba:65:83:
8c:cc:bc:f3:c7:a0:f0:86:96:13:65:0a:e3:ab:d8:
95:93:66:bd:93:4c:9b:4e:e5:c9:9c:a6:c6:62:d3:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:12:83:EE:B9:13:9A:46:05:F4:24:9D:B6:90:F6:6E:3B:FF:73
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/DPUSg-65E5pGBfQknbaQ9m47_3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.93.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a0:83:d1:ef:22:fe:a9:42:6f:9e:a3:b6:1c:ca:37:60:e4:
70:b7:98:c1:b0:69:9c:92:a6:d7:bd:33:04:2e:22:2d:5b:b7:
46:7d:ae:9c:32:c6:77:19:06:a8:14:28:b5:fe:ff:e3:2b:20:
a9:70:0d:b2:36:c7:5a:13:9a:58:62:fb:6a:fa:97:4c:e3:cb:
58:36:e4:23:fd:f1:6d:40:82:6b:b0:a5:4c:6d:6d:4a:22:fb:
9f:4a:34:c7:22:28:e3:7f:9a:a8:74:78:5e:ff:ee:21:b3:a0:
81:b8:fe:1f:6d:94:15:5f:25:ad:51:40:3f:c9:f3:65:cb:2f:
02:83:98:3d:61:7b:71:0b:02:dc:f4:79:c0:c6:67:08:78:4d:
28:8d:fb:b1:9d:8b:be:78:53:d7:22:b6:5f:9f:95:5c:0e:b6:
5e:04:83:6a:45:bb:40:3c:df:1a:1e:09:4a:26:3b:5b:91:5f:
e8:2c:a1:0b:0e:fb:c3:0a:2e:67:9a:09:9d:da:98:07:30:2b:
03:4a:c3:a1:aa:4a:dc:18:88:1b:5d:78:36:c3:13:7a:ce:88:
62:e1:ee:10:06:d5:5a:c4:a0:4e:d3:ff:55:d5:e7:20:5f:7b:
c0:6b:d4:05:c6:0a:da:9f:ca:2e:26:9e:fa:24:0b:c3:63:cb:
05:5c:36:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:03 2026 by rpki-client