Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Dc_0K6J35DRTY1XTHDTyxm8LlAU.roa
File: Dc_0K6J35DRTY1XTHDTyxm8LlAU.roa (raw, json)
Hash identifier: Iv6PeXKcQjE5FkO+L1ty6SQP5+7GfiUVx5dcyUKPgIU=
Subject key identifier: 0D:CF:F4:2B:A2:77:E4:34:53:63:55:D3:1C:34:F2:C6:6F:0B:94:05
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F7E1999230B80747621BCE1051C914815
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Dc_0K6J35DRTY1XTHDTyxm8LlAU.roa
Signing time: Mon 20 Jul 2026 05:57:14 +0000
ROA not before: Mon 20 Jul 2026 05:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 185.157.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:19:99:23:0b:80:74:76:21:bc:e1:05:1c:91:48:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 20 05:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dcff42ba277e434536355d31c34f2c66f0b9405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:24:86:3f:07:5a:5d:8f:e7:74:e1:c8:44:
2e:04:0e:29:59:7f:ca:6c:a9:a2:8d:7c:a6:b3:47:
a8:c5:04:ca:de:ca:d1:7c:cc:eb:02:b2:d3:1b:14:
c9:62:65:d9:9c:54:86:34:15:64:ec:51:08:45:53:
a1:e0:3c:f4:ed:d6:0e:15:26:10:27:c9:51:ce:51:
ea:64:fd:d8:c9:3c:2d:0d:a9:95:73:81:4a:8d:47:
b3:96:1c:3e:6b:55:61:3d:3b:91:15:6d:f1:6f:d6:
ee:26:42:42:44:93:7d:70:76:56:8a:4f:7c:bc:0c:
ed:af:cc:3d:5f:f3:40:0d:62:11:49:f2:8f:ba:28:
d4:e3:73:e3:57:09:49:dd:35:d8:3e:33:75:36:49:
53:d8:b4:cd:f5:6b:a6:4a:c2:68:6d:92:2c:dc:02:
e7:c8:2d:de:e6:1f:bb:58:42:74:25:28:a2:27:e0:
1c:02:2a:51:f2:52:8e:1d:4d:b8:04:ab:58:c6:e6:
90:60:03:69:eb:50:b9:cb:21:03:f7:af:20:a4:12:
35:bd:e3:90:57:e9:24:e1:a5:5c:83:ff:16:35:34:
f7:4a:12:5d:f4:95:d3:7e:38:ac:c9:4d:d6:18:a4:
d7:6e:bb:c8:cf:41:37:78:b9:b1:a5:e1:43:88:ef:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:F4:2B:A2:77:E4:34:53:63:55:D3:1C:34:F2:C6:6F:0B:94:05
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Dc_0K6J35DRTY1XTHDTyxm8LlAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
45:78:2c:46:96:c6:c4:9b:eb:d6:19:df:bc:21:2c:1b:cb:32:
a1:38:41:c7:94:2b:e1:d2:d3:1b:69:46:92:9d:ef:f2:26:c1:
08:92:c6:77:cb:cb:2b:22:0f:33:3a:e6:91:37:85:18:01:34:
f6:22:16:bf:c1:9c:63:59:c9:82:64:83:0f:2c:d1:c2:e8:c9:
e6:fd:75:c7:1d:41:ed:e6:1b:c9:3d:50:da:bd:a4:ec:bd:29:
30:d4:84:8e:0e:71:f0:09:6e:d5:03:1d:5b:44:d9:3c:b0:98:
6d:2a:ce:66:f0:eb:d8:97:d9:21:5b:be:ec:6e:63:8a:f3:79:
8c:48:24:80:5a:80:06:35:35:5a:ac:94:6d:3e:58:d6:d4:b2:
a5:6a:1a:30:f7:53:cb:a7:b8:09:56:8d:78:00:81:b4:fe:b8:
1e:24:7d:60:a9:90:93:1f:f6:86:00:cc:d0:74:ae:b3:8b:ba:
06:24:c3:28:8b:ba:6e:9c:85:9f:ca:08:34:2a:35:1d:e5:9f:
95:f9:95:e3:53:2a:4b:d7:ee:88:a3:30:7f:db:bc:1f:52:e7:
77:05:de:f8:56:5c:bd:88:50:15:50:49:e0:86:16:20:76:1b:
a9:8e:65:ba:38:12:50:6e:b7:b2:bd:bf:a7:6e:45:80:73:87:
20:d0:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:59 2026 by rpki-client