Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/5-DKG8fn4QobpRmv9gABaxQoiuE.roa
File: 5-DKG8fn4QobpRmv9gABaxQoiuE.roa (raw, json)
Hash identifier: DUPw9M0VyA/Xw3DEIPcetVhxVErX2fs+ure40DbwSwQ=
Subject key identifier: E7:E0:CA:1B:C7:E7:E1:0A:1B:A5:19:AF:F6:00:01:6B:14:28:8A:E1
Certificate issuer: /CN=979a046bff61a21bbb29c85ef429612685fb834b
Certificate serial: 019F23692679EEF8960C316D470B77F9D86D
Authority key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/5-DKG8fn4QobpRmv9gABaxQoiuE.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209136
IP address blocks: 192.44.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:26:79:ee:f8:96:0c:31:6d:47:0b:77:f9:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979a046bff61a21bbb29c85ef429612685fb834b
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7e0ca1bc7e7e10a1ba519aff600016b14288ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:71:2b:65:f4:3c:e6:e5:71:4d:de:f1:9a:
54:f7:15:18:f5:b2:99:3e:18:af:d6:27:40:b2:a6:
0d:0a:68:6b:54:ee:ba:ba:0c:c0:a6:95:f6:01:20:
cc:16:dc:09:eb:6f:8e:40:12:5f:7f:7a:f2:51:26:
f7:ed:ed:e9:e2:1d:ee:b0:37:d8:fa:79:0c:13:aa:
01:c0:ff:66:10:84:37:fa:16:13:b9:f3:f9:fd:6b:
3c:db:fc:de:22:b9:1c:d7:ce:e3:67:2f:b1:2c:ed:
a6:6d:66:59:4e:3d:6d:52:e4:8c:46:f8:c2:cc:74:
27:0a:e4:15:68:5a:fd:09:f0:3a:ae:d5:96:f1:69:
f3:97:33:14:90:9c:45:c0:b7:ab:e1:5b:69:a2:38:
72:57:b8:96:76:e4:c3:6d:f2:4d:38:44:21:6f:3b:
a9:dc:9c:39:6d:db:29:c2:de:f4:83:29:c1:19:c1:
61:72:00:88:26:53:12:b2:76:96:2f:a7:bf:03:b0:
39:36:09:07:8a:06:c0:d8:d9:e2:de:2d:7d:69:bf:
42:96:45:ab:6c:95:ad:8b:bf:c1:1b:f3:87:72:30:
10:09:11:86:62:1a:85:f1:7b:0e:db:e8:b4:d1:45:
c6:fb:6a:d7:89:95:b4:91:3b:5a:8f:8e:ea:7a:d0:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:CA:1B:C7:E7:E1:0A:1B:A5:19:AF:F6:00:01:6B:14:28:8A:E1
X509v3 Authority Key Identifier:
keyid:97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/5-DKG8fn4QobpRmv9gABaxQoiuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ca:04:b5:28:35:0d:48:27:59:f6:a8:b4:3a:eb:f7:35:16:
9e:39:a5:a5:98:9a:1c:69:32:6b:8e:15:83:59:0b:ec:65:82:
47:51:01:59:b5:8e:2a:f9:05:dd:19:aa:b4:08:09:1a:2a:fe:
58:cc:7d:ef:05:9f:4b:a1:8d:09:ce:01:53:74:84:19:a3:b3:
f0:f8:b4:54:ba:b5:e1:e1:17:fd:54:55:d7:f6:83:9b:be:ec:
56:7a:07:96:02:66:54:0d:fe:13:39:50:a5:a2:26:ac:a3:dd:
f1:70:70:ac:f4:d2:29:e6:8a:4f:f6:a1:38:13:63:32:51:53:
58:19:95:f4:14:cd:34:13:5a:69:f7:53:a4:78:28:bf:15:8c:
89:13:9b:82:d8:78:66:87:e7:4b:2b:d3:3d:85:2e:7e:65:b8:
00:e1:98:2c:16:0f:1e:62:60:90:4c:ee:47:eb:6f:e5:f2:70:
ee:fa:93:71:f6:08:e1:06:cf:89:69:45:ef:c9:88:20:1f:7e:
a8:aa:c7:be:2d:49:cc:cc:5d:b9:36:bb:7d:9b:07:ed:b3:14:
87:f3:84:0f:55:01:75:0b:7a:96:67:82:80:6d:f0:31:c1:ec:
d0:87:24:4a:9f:8d:5c:37:42:10:52:f0:a0:f8:eb:81:ac:3c:
8b:a5:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:32 2026 by rpki-client