Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/DVWgWy-a_sJG5kYu8Lg4M6nNxp0.roa
File: DVWgWy-a_sJG5kYu8Lg4M6nNxp0.roa (raw, json)
Hash identifier: 4VTuZFcYknTd5MGA2sRCKVSTZyQtXFdL48joLAVUgBU=
Subject key identifier: 0D:55:A0:5B:2F:9A:FE:C2:46:E6:46:2E:F0:B8:38:33:A9:CD:C6:9D
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF8DF38630691365BE809655E9E5EEF
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/DVWgWy-a_sJG5kYu8Lg4M6nNxp0.roa
Signing time: Tue 16 Jun 2026 10:27:34 +0000
ROA not before: Tue 16 Jun 2026 10:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f8:df:38:63:06:91:36:5b:e8:09:65:5e:9e:5e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d55a05b2f9afec246e6462ef0b83833a9cdc69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:2c:90:73:c9:ef:4f:43:ca:7e:3b:1b:b3:
83:9c:48:27:e6:ca:67:3b:bb:ec:15:d3:fe:07:96:
57:bb:26:58:f5:9a:e9:72:7f:50:8e:e9:c4:d4:89:
44:4e:ef:c0:7a:57:1e:80:17:0d:ca:d2:5d:ed:77:
b5:58:1f:26:4c:7d:c9:66:92:b0:92:f0:a9:b5:40:
b8:0e:1e:74:b2:32:c7:dc:3c:40:d0:11:17:60:c2:
e0:07:5b:9f:9c:96:dd:7e:bd:ea:cf:db:32:f5:2d:
ab:2e:dd:ae:da:d2:ce:c9:6f:c2:af:21:90:4f:74:
0f:44:73:1e:ca:f7:46:23:d4:24:75:cd:c7:56:1e:
d1:21:90:d8:8d:20:d1:e7:11:f1:b3:ca:c4:c6:f0:
0d:6c:90:3f:6f:83:1f:f5:46:e3:d1:8b:db:31:3f:
0c:df:1c:66:dd:1c:08:e5:3b:db:d8:6a:2e:76:de:
60:3f:1a:60:78:c5:1e:b8:65:22:11:09:9d:c1:18:
71:ba:d8:79:67:0c:0d:02:8d:61:7d:b4:4f:05:46:
70:54:37:c7:51:75:99:69:b8:26:b5:96:b1:cf:f2:
cc:d5:99:70:e0:7a:7f:28:07:bb:bb:4f:5c:53:13:
44:3a:b5:06:98:e2:11:02:7a:94:e2:4a:af:5c:05:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:A0:5B:2F:9A:FE:C2:46:E6:46:2E:F0:B8:38:33:A9:CD:C6:9D
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/DVWgWy-a_sJG5kYu8Lg4M6nNxp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
6d:cc:04:4d:d8:bb:1e:90:d5:14:29:7f:ee:30:d2:7d:db:18:
ea:00:c0:02:90:2a:da:78:cd:80:e4:9b:52:b2:58:99:c9:5d:
22:62:a5:a9:79:89:1e:51:a1:99:0e:df:ab:4c:17:1d:ed:41:
16:42:d9:54:04:38:d7:64:c2:3c:fd:bc:50:92:64:3c:f3:cc:
0a:44:20:ca:1a:40:42:b7:b5:6b:c4:42:cf:06:68:44:2b:44:
ae:42:57:54:1d:d3:de:90:8d:ca:7a:56:4c:5a:27:83:0a:d7:
9e:ff:9e:dd:2a:bd:2a:0d:81:0d:eb:d4:d2:9a:ba:44:cf:cf:
77:17:6d:ab:c1:5d:87:da:bd:d4:04:de:84:fd:3c:40:43:a1:
2d:09:eb:35:bc:88:78:44:80:28:32:c9:d9:7a:0d:e0:ab:dd:
bc:fd:ea:3b:37:5a:1c:ac:3d:3c:6e:ef:51:8b:d5:93:5c:0e:
da:a7:0c:7e:92:c5:8d:f3:20:46:0f:fd:f3:35:8d:9a:79:b8:
67:72:93:a1:be:32:61:9a:94:75:d4:dc:0a:1b:10:b9:85:cd:
55:e7:6e:6e:63:88:36:05:c5:9d:9e:f7:4b:53:36:3f:6b:60:
39:86:78:c4:9c:91:d7:23:c3:18:d9:99:10:0a:16:c6:4a:e1:
c4:78:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:28 2026 by rpki-client