Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/DtPI8rayiCn6GbGO39gWY47x3Rw.roa
File: DtPI8rayiCn6GbGO39gWY47x3Rw.roa (raw, json)
Hash identifier: 5zQ8VMa4ZokifMiUt0TgaGFAoggGyd1YDaTZPDx6mJ0=
Subject key identifier: 0E:D3:C8:F2:B6:B2:88:29:FA:19:B1:8E:DF:D8:16:63:8E:F1:DD:1C
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019CFFD7A9838A1EDC8EB8F53C7608EBEBAE
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/DtPI8rayiCn6GbGO39gWY47x3Rw.roa
Signing time: Wed 18 Mar 2026 07:27:29 +0000
ROA not before: Wed 18 Mar 2026 07:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46548
IP address blocks: 194.1.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ff:d7:a9:83:8a:1e:dc:8e:b8:f5:3c:76:08:eb:eb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Mar 18 07:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ed3c8f2b6b28829fa19b18edfd816638ef1dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:d2:e3:40:85:9e:a1:ba:ac:67:d1:6b:8c:
4a:87:f7:57:96:16:96:81:af:56:5a:a0:6b:5e:41:
fb:c6:47:63:87:bd:10:fd:b2:4a:fd:78:c2:6a:2b:
10:23:68:45:43:f4:aa:34:3b:12:68:93:ed:ad:0d:
8f:4c:74:53:dd:47:7f:0b:a3:3d:b2:f0:79:2d:c9:
74:57:46:0d:bb:b1:12:11:a1:8b:02:7d:92:fd:31:
bb:fc:aa:3f:ed:9f:10:78:99:10:4b:7f:71:d0:93:
30:b7:c6:a0:d7:ff:91:e4:77:0e:4d:46:4f:28:e7:
80:23:62:29:4f:26:4e:da:a6:54:e6:cc:5c:15:5f:
23:a7:8f:1a:1a:34:e4:78:2a:0a:87:21:44:f5:f5:
16:18:b9:62:14:d4:71:20:da:fa:55:65:9a:cc:1e:
a5:46:e8:72:13:ba:27:44:05:89:4a:a2:4b:50:bb:
81:d5:ac:37:8d:42:68:3b:a8:08:82:ac:ef:b9:c6:
e3:62:81:5b:9b:a6:14:f2:fd:cc:76:74:8e:90:1a:
ad:6c:5e:ca:f0:25:f2:e8:17:79:a8:0d:42:0e:5d:
e3:14:d6:5d:e6:a3:c4:74:61:3d:10:92:70:dd:2a:
5f:c6:5b:ed:09:10:dc:82:10:e9:e0:73:50:40:1a:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:C8:F2:B6:B2:88:29:FA:19:B1:8E:DF:D8:16:63:8E:F1:DD:1C
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/DtPI8rayiCn6GbGO39gWY47x3Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:64:a2:ac:f9:6b:e4:12:9f:3b:1d:ec:78:9a:4a:d6:10:ea:
bd:e5:9b:57:34:a9:37:58:49:71:75:9f:b1:f3:0f:d3:e2:fd:
82:03:b3:03:e0:e7:f5:6b:02:1b:04:e1:85:b6:9d:54:46:55:
f1:53:e1:9f:0a:2f:ff:cb:aa:4b:13:52:7d:4e:5c:9e:57:33:
19:7d:43:58:27:45:ad:b3:1d:21:40:5e:19:fe:f4:6c:91:c9:
dd:0d:c9:6f:52:51:f5:2b:c8:8a:5b:84:63:44:23:14:43:9d:
30:35:f9:54:56:9a:6f:78:4b:4e:91:20:e6:6a:17:03:f8:12:
8e:a7:c1:5c:dd:6d:4a:e4:c9:21:27:42:6b:b9:8f:17:94:a9:
7f:a3:c9:19:6a:fa:69:24:b8:40:af:15:4c:f3:40:1a:7a:14:
9d:ad:07:b0:ec:37:5f:9c:c5:fa:2d:94:c7:f5:e9:20:3c:e7:
0a:c5:8c:46:08:7a:e0:72:d9:bf:14:1b:86:a6:e2:32:2a:9e:
cc:10:0f:13:ad:47:e5:aa:a3:3a:bd:86:6a:91:f6:b2:87:93:
c5:e6:da:33:21:1e:3e:b9:a5:d0:50:55:71:27:6a:cb:f2:e3:
52:c1:c7:2a:98:36:6c:65:f0:91:e0:26:a1:34:4c:e6:54:70:
21:aa:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:18:48 2026 by rpki-client