Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/DkF5o9h33RdxnCs5k7A3Hx3_WHg.roa
File: DkF5o9h33RdxnCs5k7A3Hx3_WHg.roa (raw, json)
Hash identifier: RjKMh5gW8pzBFR6f7By8eZXYSn1q9xeUUivYB7s0Dqk=
Subject key identifier: 0E:41:79:A3:D8:77:DD:17:71:9C:2B:39:93:B0:37:1F:1D:FF:58:78
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019E09187027CFBFF52105D20F06C59556FB
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/DkF5o9h33RdxnCs5k7A3Hx3_WHg.roa
Signing time: Fri 08 May 2026 19:37:36 +0000
ROA not before: Fri 08 May 2026 19:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 109.122.254.0/24 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:09:18:70:27:cf:bf:f5:21:05:d2:0f:06:c5:95:56:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: May 8 19:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e4179a3d877dd17719c2b3993b0371f1dff5878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:b5:cb:ca:e8:82:b4:92:77:93:8d:43:7d:
49:3c:4c:4d:8a:f3:36:77:d9:f8:9b:2a:dd:1e:59:
e6:19:b8:10:42:ad:ed:b8:e5:ba:53:09:42:5e:94:
c6:65:68:b8:47:78:30:76:c8:6a:61:c5:2b:e9:03:
ca:62:1d:4a:45:d2:b4:e3:bf:51:22:79:93:f9:1e:
e5:b1:e0:d0:3f:9e:55:d4:9f:f0:a8:4e:1b:81:77:
48:09:1e:09:ea:36:f5:fa:51:1e:72:40:dc:04:6d:
99:9d:e3:61:03:2f:cc:9d:39:bb:59:30:03:04:49:
22:f3:b2:fd:52:a7:9a:83:93:f5:61:8f:fb:6c:94:
13:9b:cd:eb:2d:96:2c:75:f0:50:07:ed:7a:02:72:
5b:20:83:49:49:07:65:47:21:2a:15:d1:93:90:d5:
00:a3:f1:a5:b7:6f:29:6c:ba:54:97:b1:f1:77:d3:
bc:a1:c6:9c:7d:5f:0e:89:71:6f:0b:33:35:11:d5:
84:2a:d1:db:dd:35:3e:12:e5:26:1a:1a:2f:dc:e1:
aa:60:64:30:27:a3:07:8c:c9:aa:4b:da:72:2d:ac:
97:be:90:70:69:d5:67:52:fc:5d:1d:a8:34:0a:0e:
96:55:a7:d3:89:21:8b:cf:e5:a5:68:05:6f:d0:8e:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:79:A3:D8:77:DD:17:71:9C:2B:39:93:B0:37:1F:1D:FF:58:78
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/DkF5o9h33RdxnCs5k7A3Hx3_WHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.254.0/24
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1c:ca:9a:6b:69:81:08:dd:d0:9c:26:b7:55:0d:c8:eb:b6:
cb:a0:ba:fe:41:29:65:b7:50:bd:1d:b4:d9:d9:09:1b:78:02:
c5:96:d2:1d:17:a9:b1:e9:b5:a0:4f:d8:8b:79:e4:ba:10:57:
35:94:84:48:56:c6:78:0a:6d:d3:d2:35:6f:59:b7:2d:37:f5:
ae:38:9c:4f:11:1f:bc:df:e9:f5:b5:fe:fe:e2:86:6b:d7:e4:
44:27:25:9f:13:21:b6:74:a6:52:54:5b:dc:f6:4c:f2:f1:b5:
dc:bc:86:fd:54:ac:7d:ee:c7:7a:4e:5d:1c:51:5a:fc:a6:c0:
82:03:5b:fb:ec:67:d1:a8:aa:ce:bb:36:84:67:73:47:e1:8d:
91:4f:10:d8:4e:ef:af:ac:ac:0e:ed:2a:fe:6c:2e:12:e0:0a:
3f:f4:85:d0:2f:b9:a9:54:e6:7b:d9:45:d6:1c:36:79:0b:4a:
cd:8e:22:80:10:58:1d:fb:95:ad:84:9d:cd:fe:6f:e9:bc:18:
4a:e1:9d:ef:95:f2:16:2e:fd:7b:77:00:3b:f1:83:48:b0:f1:
8b:c6:1c:84:73:47:8c:0c:bf:9a:46:8f:94:0e:e3:3e:37:01:
6d:e1:3b:91:39:19:9f:a4:b0:e9:f4:dc:8e:b0:3e:2b:f5:1d:
ec:48:dd:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4JGHAnz7/1IQXSDwbFlVb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjYwNTA4MTkzNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQxNzlhM2Q4NzdkZDE3NzE5YzJiMzk5M2IwMzcxZjFkZmY1ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+a1y8rogrSSd5ONQ31JPExNivM2
d9n4myrdHlnmGbgQQq3tuOW6UwlCXpTGZWi4R3gwdshqYcUr6QPKYh1KRdK0479R
InmT+R7lseDQP55V1J/wqE4bgXdICR4J6jb1+lEeckDcBG2ZneNhAy/MnTm7WTAD
BEki87L9Uqeag5P1YY/7bJQTm83rLZYsdfBQB+16AnJbIINJSQdlRyEqFdGTkNUA
o/Glt28pbLpUl7Hxd9O8ocacfV8OiXFvCzM1EdWEKtHb3TU+EuUmGhov3OGqYGQw
J6MHjMmqS9pyLayXvpBwadVnUvxdHag0Cg6WVafTiSGLz+WlaAVv0I5MGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA5BeaPYd90XcZwrOZOwNx8d/1h4MB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvRGtGNW85aDMzUmR4bkNzNWs3QTNIeDNfV0hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXr+AwQA
vNRjMA0GCSqGSIb3DQEBCwUAA4IBAQARHMqaa2mBCN3QnCa3VQ3I67bLoLr+QSll
t1C9HbTZ2QkbeALFltIdF6mx6bWgT9iLeeS6EFc1lIRIVsZ4Cm3T0jVvWbctN/Wu
OJxPER+83+n1tf7+4oZr1+REJyWfEyG2dKZSVFvc9kzy8bXcvIb9VKx97sd6Tl0c
UVr8psCCA1v77GfRqKrOuzaEZ3NH4Y2RTxDYTu+vrKwO7Sr+bC4S4Ao/9IXQL7mp
VOZ72UXWHDZ5C0rNjiKAEFgd+5WthJ3N/m/pvBhK4Z3vlfIWLv17dwA78YNIsPGL
xhyEc0eMDL+aRo+UDuM+NwFt4TuRORmfpLDp9NyOsD4r9R3sSN1H
-----END CERTIFICATE-----
Generated at Wed May 13 03:48:15 2026 by rpki-client