Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DGMzPgEdejLW-htfo1vJt8KVel0.roa
File: DGMzPgEdejLW-htfo1vJt8KVel0.roa (raw, json)
Hash identifier: ajl6a4mjOEBppddquByx1KNQwmFJeoelzK1POxewzmE=
Subject key identifier: 0C:63:33:3E:01:1D:7A:32:D6:FA:1B:5F:A3:5B:C9:B7:C2:95:7A:5D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F8A40D89739D843CA0889CA96D46B0554
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DGMzPgEdejLW-htfo1vJt8KVel0.roa
Signing time: Wed 22 Jul 2026 14:35:33 +0000
ROA not before: Wed 22 Jul 2026 14:35:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 45.150.168.0/22 maxlen: 24
45.151.196.0/22 maxlen: 24
193.31.104.0/22 maxlen: 24
195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.124.0/23 maxlen: 24
195.138.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:40:d8:97:39:d8:43:ca:08:89:ca:96:d4:6b:05:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 22 14:35:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c63333e011d7a32d6fa1b5fa35bc9b7c2957a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:24:5a:68:b1:ad:83:90:3f:fd:04:b5:78:
5b:98:0b:6d:70:3a:a7:56:e5:70:c2:63:22:10:b4:
f7:83:b2:2e:b9:c3:a7:cb:71:1c:3b:b8:87:6c:6d:
80:40:c4:61:47:0f:d2:33:59:e7:5d:4e:30:8a:f3:
59:00:20:0b:e8:92:63:59:36:64:25:e2:48:e6:ca:
55:3f:ce:e1:fa:18:46:fd:45:e5:cd:89:c4:32:b1:
14:36:af:46:c2:59:8d:58:c2:a0:e4:e2:20:a9:22:
9d:06:72:75:dc:92:1a:29:a0:1c:0e:11:71:ed:29:
7c:a1:3b:f7:b2:8b:b1:a2:10:a0:c0:e3:f5:7b:32:
60:31:63:d4:3c:87:90:09:02:f1:a7:29:72:2d:3e:
76:35:9d:b1:e7:e1:b9:67:fa:6e:93:19:41:2a:4d:
e2:f4:96:99:11:a3:5f:e3:99:f7:f1:b6:59:d7:d3:
a2:aa:e5:b1:f9:c0:7a:1b:0e:1f:dc:ec:11:56:d0:
c8:b8:a1:4b:69:f9:14:a1:a5:4b:05:4a:5f:59:5d:
23:9e:44:da:fc:31:fd:79:0e:fd:80:98:12:8c:70:
15:93:c8:29:80:fe:1b:82:45:4e:1b:e9:c4:c3:71:
b3:aa:11:43:21:bb:9a:aa:fe:58:50:2d:c7:62:b6:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:63:33:3E:01:1D:7A:32:D6:FA:1B:5F:A3:5B:C9:B7:C2:95:7A:5D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DGMzPgEdejLW-htfo1vJt8KVel0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.168.0/22
45.151.196.0/22
193.31.104.0/22
195.138.109.0-195.138.110.255
195.138.113.0/24
195.138.115.0/24
195.138.124.0/22
Signature Algorithm: sha256WithRSAEncryption
61:61:a6:eb:04:58:d9:3c:2b:b2:f5:0c:5c:42:75:4c:3d:12:
5c:b2:0c:88:9d:54:f6:fe:38:32:28:dc:a1:1b:f0:ee:92:03:
0a:6e:0e:a3:f8:47:89:4b:a1:db:ea:a0:b5:ce:2a:da:a3:a7:
b7:81:2b:28:54:f1:f4:50:f0:00:de:e9:a6:83:82:99:52:d6:
42:e0:9f:93:22:4e:13:6b:c7:3e:62:84:ca:46:93:15:51:15:
f0:e2:21:33:4d:01:01:92:28:ff:61:50:bb:b2:b4:5a:8c:09:
ec:b6:77:ae:c8:98:45:05:e0:6d:4b:0b:df:69:70:38:25:84:
f4:c5:b0:91:28:ab:f2:f4:a6:6c:f0:ef:a4:48:c7:00:5d:b2:
ac:c9:7f:19:cc:95:21:23:90:c7:f6:80:c6:3f:63:f2:cb:93:
3c:72:36:8e:2c:6d:a5:f8:48:69:ef:40:11:06:e3:05:fe:aa:
4f:f6:f3:92:b4:c9:4d:b5:87:88:63:81:37:25:8c:14:5a:22:
31:9c:b9:0d:f6:04:e9:60:85:73:f9:b7:84:3c:1e:60:58:4b:
2c:e0:56:46:81:f2:fa:02:77:08:95:53:ae:3c:d9:f8:a9:0a:
39:d9:87:00:e1:03:18:b3:bd:39:95:83:83:4a:ab:89:d1:db:
52:89:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:28 2026 by rpki-client