Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/dDhEj936C5bCcUHIbQMP4Pb8dEY.roa
File: dDhEj936C5bCcUHIbQMP4Pb8dEY.roa (raw, json)
Hash identifier: 5GyK5gX18+nvsOtIfl006NYzOeLXLJjPZfAAJJKzLLU=
Subject key identifier: 74:38:44:8F:DD:FA:0B:96:C2:71:41:C8:6D:03:0F:E0:F6:FC:74:46
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01A17CA5D71521A6BD4DB1E48D0D1CC0D2E0
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/dDhEj936C5bCcUHIbQMP4Pb8dEY.roa
Signing time: Tue 27 Oct 2026 09:16:45 +0000
ROA not before: Tue 27 Oct 2026 09:16:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28725
IP address blocks: 80.78.150.0/24 maxlen: 24
94.74.220.0/22 maxlen: 22
212.96.180.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:a5:d7:15:21:a6:bd:4d:b1:e4:8d:0d:1c:c0:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Oct 27 09:16:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7438448fddfa0b96c27141c86d030fe0f6fc7446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:b6:f6:e4:2d:c7:60:96:2a:e4:1f:84:4e:
fb:91:67:10:70:50:89:c6:90:02:9e:76:40:12:38:
a9:37:ad:06:35:40:5b:2b:2f:7a:fd:fd:ab:ea:b5:
7f:1d:bc:91:af:ae:11:9d:7c:c8:f6:3e:f6:96:a9:
d9:46:4c:5c:06:93:2c:b5:a3:cf:08:aa:8d:fc:67:
fc:7f:ee:81:7f:d5:50:ad:8c:08:b1:43:93:2e:78:
d6:d5:e6:5c:d5:a1:56:56:2a:70:73:95:49:4d:c9:
fd:20:2a:ae:84:8e:d1:6b:d7:e7:c0:a1:7b:b0:66:
5b:08:b1:7a:84:31:f8:5d:59:e1:9d:80:50:26:87:
8e:ef:e9:70:33:89:20:e1:aa:96:9e:1e:95:36:73:
83:1f:2c:81:7d:4c:a0:b0:9d:83:b8:14:eb:b8:e9:
ed:85:b3:91:aa:b1:ea:a3:e4:46:78:79:25:90:69:
00:4c:68:80:c3:a6:51:f0:55:29:4e:57:dd:7d:7e:
32:df:72:87:98:56:6a:40:b6:58:f2:90:34:b1:7c:
9e:e9:69:4b:e6:c4:76:dc:05:d0:f5:05:31:59:23:
3e:49:f2:b9:90:d5:79:2d:26:f3:1a:0b:c4:8a:d8:
41:e2:6f:ae:b5:d8:b6:51:0b:f3:8b:03:45:61:c0:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:44:8F:DD:FA:0B:96:C2:71:41:C8:6D:03:0F:E0:F6:FC:74:46
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/dDhEj936C5bCcUHIbQMP4Pb8dEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.150.0/24
94.74.220.0/22
212.96.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:de:19:16:99:66:c4:7d:18:15:2f:c3:d9:b8:1c:71:94:b7:
de:85:d1:7a:79:af:df:b1:8f:4b:3e:ee:3a:6e:e7:a9:51:ee:
5f:3f:61:d5:65:dd:dc:3c:63:82:ae:f3:1b:d3:bf:a3:1b:11:
15:39:12:f1:39:86:75:a2:2d:84:14:f3:0d:20:0a:5b:06:91:
aa:89:73:3f:4c:ab:fe:a2:4c:61:c1:90:fa:bb:45:3b:3f:e2:
00:4b:a2:35:f5:05:24:db:86:40:30:bf:59:cb:a3:66:c3:36:
e4:fb:b2:9d:4d:e3:f0:f3:2d:60:c1:dd:18:ba:c9:e6:40:f1:
9c:a3:71:00:d0:3b:4e:07:53:0f:f1:3c:a4:fb:43:0d:52:8a:
02:2b:ef:30:3b:d9:27:dd:3e:66:fc:26:aa:13:9e:ad:b8:a3:
87:71:91:a8:43:d1:61:d9:94:98:ce:8c:16:d2:96:76:a7:66:
82:72:f8:56:e6:6a:f7:da:17:d4:96:80:b5:3c:6e:19:76:bc:
39:4a:3f:16:73:89:ea:ed:26:15:6f:6c:fd:5b:d4:ee:8f:33:
f9:89:ac:92:ee:0a:69:b4:f3:99:64:9f:c5:ad:d8:18:d9:06:
b8:e4:46:78:8e:55:11:3b:c9:ae:c0:0a:b5:78:26:a5:b3:9b:
d7:1a:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:02:29 2026 by rpki-client