Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/derjq_a2xULSiq0hLt8SXBP15vM.roa
File: derjq_a2xULSiq0hLt8SXBP15vM.roa (raw, json)
Hash identifier: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=
Subject key identifier: 75:EA:E3:AB:F6:B6:C5:42:D2:8A:AD:21:2E:DF:12:5C:13:F5:E6:F3
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019CE7366D78B403D912979B44F793A49BEF
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/derjq_a2xULSiq0hLt8SXBP15vM.roa
Signing time: Fri 13 Mar 2026 12:40:29 +0000
ROA not before: Fri 13 Mar 2026 12:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198622
IP address blocks: 89.117.184.0/24 maxlen: 24
213.252.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:36:6d:78:b4:03:d9:12:97:9b:44:f7:93:a4:9b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 13 12:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75eae3abf6b6c542d28aad212edf125c13f5e6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:aa:31:b4:91:f2:99:79:fa:4b:66:c3:7f:
86:1e:a8:0b:2f:0d:42:0a:83:b6:5b:39:d4:45:3f:
28:51:c5:6f:9b:d6:61:0c:cd:d4:5d:eb:90:07:25:
69:6d:c8:74:52:04:25:c1:9b:d3:5e:eb:68:e9:18:
60:45:c7:ef:8f:7e:7f:cd:64:92:b9:c7:10:eb:0a:
9e:9c:e4:0f:93:44:85:45:f5:62:c4:d4:d0:d6:89:
82:59:61:60:88:cd:52:a4:38:73:eb:ca:36:5f:d5:
78:cf:18:d0:53:c8:0a:f3:41:67:2f:db:07:fa:28:
e5:16:dc:47:9b:3a:cd:9f:aa:78:85:69:aa:f1:3d:
72:ed:cc:b6:c0:f7:bb:cf:bb:c3:f1:5f:ce:28:77:
9d:7b:b7:cc:11:84:27:4a:5a:1a:81:4a:64:a7:da:
aa:04:68:85:db:b8:44:50:d3:30:5b:ae:2e:d7:2a:
85:d6:e0:be:79:9a:81:7d:32:56:b8:63:4d:aa:e2:
ba:00:1e:44:50:56:05:cd:19:0c:a5:79:16:1b:e7:
9a:12:e2:1c:78:47:54:86:ce:32:5c:3f:0d:64:14:
f6:c9:3e:87:3d:6a:4c:92:4b:4d:af:ba:cd:3e:59:
54:44:29:17:25:ad:00:fc:c5:e3:2a:93:27:83:e1:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:E3:AB:F6:B6:C5:42:D2:8A:AD:21:2E:DF:12:5C:13:F5:E6:F3
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/derjq_a2xULSiq0hLt8SXBP15vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.184.0/24
213.252.255.0/24
Signature Algorithm: sha256WithRSAEncryption
72:23:e2:6c:a2:53:7b:9a:63:8b:b1:ad:ed:c7:b8:ae:9d:a6:
d2:2e:bd:a3:e4:2d:4d:96:dd:86:0e:6b:15:2f:86:e1:19:1a:
6b:d7:bf:2e:db:bf:bb:de:15:8f:f5:65:24:8f:e9:14:fa:ae:
51:bf:b6:f0:13:7f:1e:7d:d5:13:6e:a4:5d:62:a1:4e:1a:98:
45:2f:a2:07:5c:0a:c0:71:3e:fe:9a:c2:fb:3e:70:93:a4:5e:
46:a3:a8:15:d2:c2:d2:c0:0c:a8:cf:be:42:11:45:89:1c:d1:
91:91:72:a7:b0:ea:9d:37:78:9a:9e:69:3a:bd:91:58:68:31:
4e:1a:c7:6b:77:8f:96:f2:4f:06:70:1b:83:8d:ec:0f:e3:bd:
4c:fe:4d:41:b4:2b:3b:9d:d2:97:5d:aa:c3:08:97:c1:1a:bc:
0d:45:cc:28:86:6e:72:9f:a3:b6:38:af:11:d0:91:08:6a:31:
77:40:d3:2a:0f:be:ab:04:32:89:7f:89:4d:1f:80:fd:5b:00:
83:3d:26:c6:2c:fc:ed:5c:8e:4c:cc:14:b8:33:7a:68:a7:1d:
d3:1d:1b:3f:86:c3:b3:16:55:e5:d9:b2:73:2c:cd:d8:63:96:
d8:68:2a:79:de:c7:32:42:32:84:79:29:e6:2b:07:f5:f2:39:
92:0e:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:57 2026 by rpki-client