Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/dPag7xFPzczRHzq2B8X2iWcIGDY.roa
File: dPag7xFPzczRHzq2B8X2iWcIGDY.roa (raw, json)
Hash identifier: pRxwNcwkJ3uthH1oUSTy8IHhpLZnDFgmu09LUeEQ/AI=
Subject key identifier: 74:F6:A0:EF:11:4F:CD:CC:D1:1F:3A:B6:07:C5:F6:89:67:08:18:36
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019E1180D6B6F9E3B3E2345F4A4F8482BAFA
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/dPag7xFPzczRHzq2B8X2iWcIGDY.roa
Signing time: Sun 10 May 2026 10:48:36 +0000
ROA not before: Sun 10 May 2026 10:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 213.5.170.0/24 maxlen: 24
213.5.171.0/24 maxlen: 24
213.5.173.0/24 maxlen: 24
213.5.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:80:d6:b6:f9:e3:b3:e2:34:5f:4a:4f:84:82:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: May 10 10:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74f6a0ef114fcdccd11f3ab607c5f68967081836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:d0:ef:41:d3:68:b0:29:ba:ec:df:24:6a:
8f:e8:5b:05:db:60:cb:7d:fc:0a:a5:67:7d:29:00:
20:b1:57:82:0f:5d:45:80:a6:16:2d:23:89:d3:74:
0d:91:51:d9:84:95:c2:f4:49:07:f1:19:a6:fb:79:
e8:22:36:33:e8:53:7c:ea:8a:c7:ae:85:96:9e:0e:
2b:78:c0:f6:cf:40:b8:26:eb:31:79:6c:7c:1a:e6:
a1:11:e4:c5:1e:7c:e7:05:3e:f1:c5:3a:0f:d7:97:
30:85:e5:6e:4c:4f:41:84:e0:6c:d3:ba:86:52:b3:
d0:ab:31:1f:0e:12:5c:d6:6e:f7:0e:2b:36:37:1b:
2b:69:c6:00:e0:2c:50:8d:a3:2d:ba:9c:1a:7b:f1:
96:9a:fa:3d:c4:db:74:be:61:f7:c3:11:34:55:72:
03:49:27:ff:17:4d:79:7e:08:c5:0a:4e:91:fd:e4:
86:8a:1b:eb:01:fe:a0:d9:d0:ca:70:bc:93:8c:10:
d6:89:ce:97:65:e0:43:ee:74:85:a0:ea:54:6c:dc:
09:31:b6:0d:36:e8:d7:a4:7b:5f:80:e8:58:b2:b1:
e5:b6:69:80:70:ce:32:64:00:12:25:4e:30:75:04:
8d:15:d6:1a:2d:c4:6a:fa:6c:6d:37:08:45:76:3a:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:A0:EF:11:4F:CD:CC:D1:1F:3A:B6:07:C5:F6:89:67:08:18:36
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/dPag7xFPzczRHzq2B8X2iWcIGDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.170.0/23
213.5.173.0-213.5.174.255
Signature Algorithm: sha256WithRSAEncryption
25:15:10:4e:05:79:35:d6:c3:03:61:a0:e0:0c:25:b7:b4:0a:
d4:40:f5:1d:1d:0d:68:cb:09:d2:6d:5f:43:b3:89:41:cf:f5:
48:ae:60:f9:b0:9b:51:1e:76:5b:4d:e6:b2:33:ab:74:20:7e:
87:8c:e5:29:3b:46:6e:14:b5:63:7a:e3:ba:86:8b:c6:f1:08:
10:61:27:7b:40:8c:4e:71:37:d8:71:ff:ae:29:9e:d4:0e:8f:
9a:d4:a8:12:1e:31:3f:78:09:ec:af:91:a4:45:1b:8f:64:a7:
7d:53:25:36:85:8a:52:8b:03:a2:f5:31:d5:a3:9c:52:aa:ad:
a7:6e:90:7f:13:90:b9:90:53:81:1c:dc:1b:b0:aa:b5:70:47:
3b:5d:8c:5e:0b:26:0c:34:e8:a4:eb:b0:1a:55:17:5f:87:5c:
6f:06:5a:d1:6c:67:6c:6b:b9:87:c5:8a:62:54:bf:5f:cf:76:
b2:57:b0:f4:6c:c5:87:86:de:86:64:6a:a6:48:1f:31:4e:92:
48:b5:58:f0:a0:d6:73:21:63:90:89:e8:92:8b:ed:87:1a:cd:
32:9f:7c:bb:f5:29:c9:39:f3:f3:29:b9:11:22:f8:14:c4:ab:
f8:08:cf:a7:2d:bb:ca:88:35:18:dc:3c:03:2a:c3:e8:8e:4e:
90:15:c2:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:47 2026 by rpki-client