Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/DbKSgaJwD4s0pMi5dIKaS74GVd0.roa
File: DbKSgaJwD4s0pMi5dIKaS74GVd0.roa (raw, json)
Hash identifier: T+MZOVnJ5hOhtVk6sS/9F3yH/t9bf3m1uORMjvQu1Mw=
Subject key identifier: 0D:B2:92:81:A2:70:0F:8B:34:A4:C8:B9:74:82:9A:4B:BE:06:55:DD
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019F84B1D33728B17939A542860FF3191F89
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/DbKSgaJwD4s0pMi5dIKaS74GVd0.roa
Signing time: Tue 21 Jul 2026 12:41:14 +0000
ROA not before: Tue 21 Jul 2026 12:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205230
IP address blocks: 131.222.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:b1:d3:37:28:b1:79:39:a5:42:86:0f:f3:19:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Jul 21 12:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0db29281a2700f8b34a4c8b974829a4bbe0655dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:51:17:e2:55:52:c3:d0:07:28:99:9a:ba:
b9:f5:67:15:0a:df:cc:f0:49:5a:14:e6:b5:d8:fb:
1f:e6:0e:9b:90:9b:25:c4:da:a9:5e:e6:42:c2:43:
7e:97:c0:1f:8c:3e:fd:b2:31:29:cd:8f:61:28:21:
fe:94:2c:63:8d:1e:aa:3d:06:d7:01:80:fb:e7:34:
96:7c:de:27:c6:37:76:51:8d:3e:a9:bb:76:94:41:
21:1f:e5:fc:ec:6e:af:e0:11:24:53:92:9b:38:4a:
4c:8b:64:7f:8c:77:67:ba:bd:37:6e:56:e8:d5:89:
83:c2:77:96:1d:a4:bf:7d:0a:26:69:f1:0b:bd:bb:
ca:de:1a:11:5a:97:dc:ff:e7:c0:44:67:ee:ae:66:
c5:20:48:3b:e7:16:71:e7:c7:0c:3a:e0:27:7f:a3:
ef:1e:7e:48:0d:1f:6a:24:82:48:04:e1:f4:e3:fb:
9d:12:be:96:4a:2f:f0:22:47:d9:d4:d0:94:92:fc:
53:86:10:0d:3b:cb:ee:8e:36:7c:18:41:2f:ab:85:
03:9a:c5:f9:1e:07:96:6a:84:30:5b:e6:d1:87:55:
e2:39:c3:3c:16:72:d8:f9:fd:36:dd:3a:c9:f0:6b:
3d:58:f5:e2:9e:03:2f:55:c0:00:e6:0a:b7:3a:f4:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:92:81:A2:70:0F:8B:34:A4:C8:B9:74:82:9A:4B:BE:06:55:DD
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/DbKSgaJwD4s0pMi5dIKaS74GVd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.242.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1d:45:0e:b5:67:df:8a:e3:56:fb:bf:5d:a2:64:45:67:79:
d8:e8:9c:a1:08:5b:5a:59:fd:5d:ff:3e:98:7e:01:a0:ad:62:
31:33:44:4b:92:77:d8:12:93:a7:8a:df:0f:db:c7:5b:50:3a:
18:fa:8e:3e:76:a3:7b:e2:04:c9:41:5c:e2:27:8f:23:16:53:
c7:05:8d:56:0e:0b:85:f3:62:08:73:68:46:ca:2a:c0:23:94:
d3:36:dd:bc:10:e4:7d:f0:da:fc:1e:2c:d7:99:b0:62:fa:7e:
7a:f9:68:d0:21:30:00:43:e0:ed:75:07:d7:eb:a3:72:67:e3:
df:cf:82:59:39:d4:79:5a:b5:37:c3:ba:76:32:d9:8d:ea:63:
53:4f:f4:f8:6d:b4:93:1f:66:90:20:6f:7c:a1:a9:d0:66:94:
75:e6:05:2e:54:a0:8e:4d:74:fa:ab:55:7f:5d:ae:7d:00:de:
39:72:e2:8e:72:42:c1:39:e9:af:a9:4a:fc:94:76:14:54:d5:
7a:2f:43:88:a2:73:fa:9c:e1:6e:70:30:02:68:74:36:4f:82:
d1:67:dd:7c:11:2a:8b:03:6e:4b:40:95:d3:68:b8:f4:bc:70:
70:63:c6:71:8a:0e:80:85:f6:1e:de:d3:38:5f:4e:d2:44:8f:
58:84:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:44 2026 by rpki-client