Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/dhJildBdnZloo4poxJ4mC7kw6Ag.roa
File: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (raw, json)
Hash identifier: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=
Subject key identifier: 76:12:62:95:D0:5D:9D:99:68:A3:8A:68:C4:9E:26:0B:B9:30:E8:08
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019CF5906E02663042DA16C458A7A3E944C5
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/dhJildBdnZloo4poxJ4mC7kw6Ag.roa
Signing time: Mon 16 Mar 2026 07:33:29 +0000
ROA not before: Mon 16 Mar 2026 07:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 94.103.60.0/22 maxlen: 24
176.103.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:90:6e:02:66:30:42:da:16:c4:58:a7:a3:e9:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Mar 16 07:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76126295d05d9d9968a38a68c49e260bb930e808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:65:c8:d9:a5:95:72:3d:b4:c1:d1:0d:4b:
eb:05:45:53:b1:08:fa:26:e8:08:3d:d2:c8:22:26:
af:ca:6a:35:1a:d6:69:90:04:36:c0:6a:3a:20:69:
24:53:7d:30:e3:d5:3c:a9:b2:b7:2e:5b:ec:66:85:
67:1c:fd:c1:03:5d:84:92:5b:8b:53:00:65:1b:c3:
2a:3c:48:63:b9:b5:54:b2:ac:ca:99:47:d8:ee:a9:
23:e7:51:1c:52:ee:ff:96:8a:97:99:68:c6:4c:f9:
d8:96:3e:14:69:1b:69:d6:95:60:10:2e:d3:1f:64:
19:99:4c:c1:2c:cf:0e:a7:46:64:1e:21:d4:b2:c3:
89:38:b1:79:32:e5:04:4e:b5:fe:43:3d:70:6b:36:
91:a8:75:8e:ac:0b:1c:20:4f:44:a0:de:80:ff:78:
88:56:f4:87:fc:7e:73:6d:a0:98:c5:3a:29:ac:8d:
f3:e0:9b:4a:5d:69:d5:a8:d9:68:89:1b:7f:2a:99:
7e:21:fd:63:a2:37:b0:fa:b7:03:bd:1a:5d:1d:53:
1e:b9:45:e6:11:b0:5d:bd:60:4e:6a:6b:ce:03:28:
0a:37:f3:7f:16:95:30:1f:3e:49:13:6a:6c:3b:ca:
8d:63:f7:56:5a:ab:3f:08:5a:4d:3b:28:9c:6a:1e:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:12:62:95:D0:5D:9D:99:68:A3:8A:68:C4:9E:26:0B:B9:30:E8:08
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/dhJildBdnZloo4poxJ4mC7kw6Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.60.0/22
176.103.188.0/22
Signature Algorithm: sha256WithRSAEncryption
59:cb:1a:87:a7:8b:71:ec:f0:97:5d:97:77:b1:82:e9:c0:6c:
6a:29:94:62:9d:90:d8:d8:8f:e6:e1:b5:1b:16:63:45:32:d3:
d9:cd:a3:46:47:57:82:17:a4:1b:72:e8:05:16:aa:32:c4:37:
6e:30:ce:ea:19:ab:85:3b:81:51:73:ce:68:3a:fa:a9:d9:22:
23:ce:d1:d3:50:21:72:4d:88:80:a0:d4:fa:b0:e6:2f:fa:01:
b2:12:f5:f8:57:cf:75:05:84:91:4f:c4:4c:26:6c:85:da:68:
d0:a7:a3:55:40:f8:57:af:2f:d4:f2:74:56:a3:fc:9c:c0:5a:
72:1b:20:b6:2e:56:98:e3:14:19:fc:f0:95:de:70:20:e7:04:
36:57:a1:be:d7:98:e3:01:3b:37:18:3f:6e:d5:c5:81:e0:9a:
2e:a5:73:d5:3e:bb:3e:84:9a:e2:e6:5e:71:36:66:77:bd:e1:
f7:54:57:6b:de:c1:87:b2:76:0e:45:e5:67:09:87:08:47:e6:
eb:2e:85:ba:d3:ed:dc:90:8c:86:96:27:dc:57:3b:14:b7:a3:
30:5b:6f:3c:05:92:80:b8:7b:c4:78:c6:65:30:dc:e0:bb:6c:
2b:ce:87:86:06:7b:0f:28:9d:d2:d4:ce:92:05:0c:d9:6c:75:
f1:26:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:30 2026 by rpki-client