Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/DphGqvZQrkP0lkUlvlMiKlE5y0Y.roa
File: DphGqvZQrkP0lkUlvlMiKlE5y0Y.roa (raw, json)
Hash identifier: CLYeeAHjhgfN3HTjVosWu6pT5KYLJeLfJmbxJK7H16E=
Subject key identifier: 0E:98:46:AA:F6:50:AE:43:F4:96:45:25:BE:53:22:2A:51:39:CB:46
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019DAF07A40E8C7C647AD3F6148C5E42C5BF
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/DphGqvZQrkP0lkUlvlMiKlE5y0Y.roa
Signing time: Tue 21 Apr 2026 07:53:26 +0000
ROA not before: Tue 21 Apr 2026 07:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209439
IP address blocks: 95.111.140.0/24 maxlen: 24
95.111.151.0/24 maxlen: 24
149.232.189.0/24 maxlen: 24
2a00:8b80::/32 maxlen: 32
2a09:3dc0::/30 maxlen: 30
2a09:3dc4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:07:a4:0e:8c:7c:64:7a:d3:f6:14:8c:5e:42:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Apr 21 07:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e9846aaf650ae43f4964525be53222a5139cb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:88:68:f4:2d:e0:aa:1a:43:3c:ea:6b:0e:
b3:24:72:36:c4:80:86:d3:7b:53:ef:e8:8f:57:00:
4e:40:fa:aa:0d:61:e9:7a:80:bc:e8:cb:10:92:4c:
d7:33:59:9f:f2:75:b1:61:ae:49:f3:b0:40:00:98:
a6:ca:4c:79:88:6c:ad:4b:4f:6f:90:1d:ce:34:41:
d3:86:99:ab:43:87:70:17:e3:33:90:23:d0:d8:af:
fc:7a:ff:b9:4e:12:20:53:86:a4:69:30:23:99:6d:
70:27:5f:53:80:3c:a6:b4:8c:54:5e:44:99:10:40:
1d:62:e2:b0:38:bd:6a:6e:ca:6e:33:51:96:12:68:
88:7d:d6:df:0e:e7:da:87:9e:d0:ad:8a:14:51:c3:
26:0d:e7:9d:05:72:19:89:43:06:78:35:36:8a:da:
11:05:3f:c9:c7:42:12:de:1d:ce:99:20:d1:e8:76:
26:d9:af:c8:c9:3a:6c:8a:5c:66:76:3d:b3:fb:de:
76:7c:cb:d1:4f:79:26:c9:a3:e3:5d:df:6e:12:47:
dd:64:bc:25:85:10:b8:b5:e0:18:54:83:fd:43:a4:
83:e6:48:e0:78:2e:2e:e5:1f:e6:72:cf:82:f6:64:
e9:fe:32:f5:e9:6a:06:cc:3c:fd:cf:be:7b:4a:2e:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:46:AA:F6:50:AE:43:F4:96:45:25:BE:53:22:2A:51:39:CB:46
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/DphGqvZQrkP0lkUlvlMiKlE5y0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.140.0/24
95.111.151.0/24
149.232.189.0/24
IPv6:
2a00:8b80::/32
2a09:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
90:09:b0:89:3d:cb:2d:ce:89:50:e3:cc:34:ce:36:24:98:ff:
ca:15:a0:60:32:89:1f:a1:ad:87:6b:18:df:b9:41:a3:51:7f:
71:93:62:41:1f:9c:68:0d:44:6a:a7:2e:09:59:bb:6a:d4:af:
80:ec:0b:fc:c9:bd:fa:f5:84:0d:e2:98:c6:d2:61:44:d6:9e:
71:26:78:32:35:ff:79:98:52:f1:9a:e7:cf:eb:a2:55:24:6e:
8c:d8:49:1b:ed:af:41:0f:03:10:2e:1d:87:40:82:e8:1f:d1:
7b:8c:56:05:69:9a:f7:4f:35:96:fe:00:45:99:5e:bc:3b:c9:
55:f0:e1:bb:cb:67:a2:fa:4e:48:c2:80:ce:c8:a5:1d:c5:5f:
46:1a:fb:3e:9f:3a:cf:fe:6e:b9:36:6e:9a:1e:23:ec:49:3f:
db:48:8b:44:95:0e:23:d3:6f:cb:96:5b:ab:86:d9:80:e7:0d:
03:a7:b5:bb:7c:e4:0c:09:40:5b:4b:58:e5:4e:e1:1b:06:d3:
38:ec:79:3b:50:94:37:be:69:82:97:71:7c:91:4f:61:70:49:
98:e0:75:4e:dd:5f:00:aa:39:38:7c:62:2b:e4:e4:38:e8:26:
74:5c:f3:85:44:bc:af:c8:fc:9a:f3:24:9d:b5:b8:0c:d6:cd:
a9:ad:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:50 2026 by rpki-client