Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa
File: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (raw, json)
Hash identifier: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=
Subject key identifier: 0E:09:B4:C8:9C:51:18:A9:16:CE:E0:A6:B5:70:15:FD:26:A9:E4:2E
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 019F236905928C995C5E686206A331296741
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44066
IP address blocks: 185.197.165.0/24 maxlen: 24
185.197.166.0/24 maxlen: 24
185.197.167.0/24 maxlen: 24
2a0a:7bc0::/32 maxlen: 32
2a0a:7bc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:05:92:8c:99:5c:5e:68:62:06:a3:31:29:67:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e09b4c89c5118a916cee0a6b57015fd26a9e42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:95:a1:5a:2f:be:c8:59:05:de:43:22:a0:
68:c9:0f:40:3a:0a:a9:e3:4e:ac:e6:b6:fc:eb:2c:
c3:8e:77:9b:db:b2:12:d2:a9:c9:05:eb:c4:af:84:
16:28:67:94:0d:ca:a9:ae:cf:c3:62:09:1b:22:e7:
2d:de:16:ce:d4:4a:1a:77:17:bd:8f:dc:9c:ec:bb:
5a:05:4a:fd:84:27:b5:18:35:90:e7:73:06:b8:9f:
f0:50:fc:7e:ad:8d:c4:64:fe:f5:09:a1:9d:54:19:
9a:84:eb:d3:91:6e:6b:51:a3:16:45:df:db:97:0a:
a7:f0:5d:ba:85:18:9d:29:60:cd:10:a9:08:e0:a2:
4f:e8:c7:34:b5:89:6c:9f:6c:d7:ff:19:7d:39:a7:
79:fd:43:db:b0:0e:f5:6f:fb:41:aa:34:41:ed:b7:
64:8d:f5:00:fd:b6:e7:ee:3f:d3:ef:52:b0:fa:c7:
fd:26:d4:f0:cb:1f:a6:85:c7:9c:1c:20:3a:64:28:
b7:68:29:e9:19:d8:3f:80:bd:1c:5b:dc:84:56:a5:
ba:e3:9a:5a:25:6a:e6:f9:e2:74:e3:86:1e:eb:f5:
46:48:08:06:5a:c5:57:5a:fe:cf:15:ec:ce:55:d1:
64:03:2e:b9:8c:8f:a8:2b:01:a5:51:d7:fd:93:4d:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:09:B4:C8:9C:51:18:A9:16:CE:E0:A6:B5:70:15:FD:26:A9:E4:2E
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.165.0-185.197.167.255
IPv6:
2a0a:7bc0::/32
2a0a:7bc7::/32
Signature Algorithm: sha256WithRSAEncryption
62:fd:03:74:31:0e:fe:65:ca:be:cf:c3:51:81:bd:c6:06:bd:
56:c4:b3:62:f0:09:ad:86:50:ac:a8:c6:ec:36:e6:d0:65:44:
3c:a8:3e:25:c2:a9:c2:2f:ea:ce:48:e2:55:c1:b2:cb:19:a9:
d1:4d:2d:57:44:45:4b:c1:c9:17:fb:8d:e0:bd:d8:92:f2:4c:
63:71:66:e4:22:36:03:d7:6a:9e:e2:9e:ac:e6:c6:1a:34:b8:
3f:74:4b:7a:ea:c3:58:c0:82:ce:4f:c3:7d:28:db:bc:b9:6a:
99:4f:36:39:96:6c:e2:eb:d9:7b:d7:53:70:a6:0b:f5:84:ca:
a9:97:f6:17:7b:8a:c2:4c:98:fe:12:10:37:ac:65:d0:dd:99:
c8:84:47:0b:f8:44:5c:14:cc:d7:53:b2:68:df:98:db:fc:5c:
0a:4a:51:8c:80:55:d0:13:18:4f:a7:f3:cb:f0:d6:51:5e:81:
1d:d9:17:0c:d0:e5:25:78:f3:7a:45:89:74:4a:95:b7:ca:09:
85:ec:45:72:6c:b3:cd:7d:fe:e4:fd:b9:62:fa:96:5f:a4:75:
a1:13:eb:a6:b1:54:36:fe:88:4f:cd:e8:f0:98:f8:57:cf:93:
b9:2e:03:7a:b2:33:94:7f:e8:bd:a9:85:26:16:38:53:82:96:
08:f5:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:41 2026 by rpki-client