Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Dt_mH6uvRWelczvh1yu_eMtHoMk.roa
File: Dt_mH6uvRWelczvh1yu_eMtHoMk.roa (raw, json)
Hash identifier: PWufy4pMNSD6m+mg/DJkgDfDbexiLypCDku0P0dLiuI=
Subject key identifier: 0E:DF:E6:1F:AB:AF:45:67:A5:73:3B:E1:D7:2B:BF:78:CB:47:A0:C9
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 01A0AA117B0A06AFFBA5A71DE55F7054CAF2
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Dt_mH6uvRWelczvh1yu_eMtHoMk.roa
Signing time: Wed 16 Sep 2026 11:54:27 +0000
ROA not before: Wed 16 Sep 2026 11:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 80.70.216.0/23 maxlen: 23
80.70.216.0/24 maxlen: 24
80.70.217.0/24 maxlen: 24
80.89.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:11:7b:0a:06:af:fb:a5:a7:1d:e5:5f:70:54:ca:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Sep 16 11:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0edfe61fabaf4567a5733be1d72bbf78cb47a0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:95:f1:bc:6c:d7:78:92:6d:06:e9:62:5b:
a8:3a:43:1a:c0:49:3d:be:38:c9:64:0d:2d:03:db:
2d:2f:4d:e2:cf:f9:a2:a3:10:37:fc:f0:d6:d5:2b:
f6:3c:10:bb:27:75:a8:e9:ef:f3:0a:7f:19:d6:27:
f0:b6:b4:8f:08:c5:d2:26:a7:57:0e:8d:6c:72:b5:
b9:83:48:77:2d:a1:52:62:f1:41:4a:b9:d4:71:cf:
46:9a:29:a1:60:bc:98:1e:7a:c9:fd:04:c2:65:ed:
67:39:6a:ff:db:a1:e7:4c:c8:9f:66:49:24:b7:77:
d4:d5:ba:db:6b:28:5e:1c:f4:bb:b6:a4:eb:e5:9b:
41:a8:83:f2:92:7a:52:d6:15:5d:cf:c4:70:9c:4f:
5f:96:02:58:3b:c3:4c:a4:64:57:0c:a5:70:fb:b4:
cb:6a:be:35:98:e7:ac:8f:a9:db:47:6f:aa:ae:e9:
3a:95:ca:ee:4b:fc:a2:1d:e8:ed:60:34:04:f9:d7:
a0:6c:91:ab:ec:25:da:47:a2:6e:3c:a1:7b:a0:80:
6e:61:be:a1:50:46:3d:3a:14:a3:47:14:5b:43:fd:
33:2b:e1:c6:5f:7a:33:73:1d:8e:5b:d4:e7:f1:70:
8d:22:01:72:8f:a8:26:76:59:e1:33:82:5e:81:86:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:E6:1F:AB:AF:45:67:A5:73:3B:E1:D7:2B:BF:78:CB:47:A0:C9
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Dt_mH6uvRWelczvh1yu_eMtHoMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.216.0/23
80.89.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8a:c0:87:f5:c4:c6:f5:21:1b:f0:8f:0a:18:11:d8:73:71:
ae:68:28:fd:e3:30:24:a6:16:31:dc:aa:89:94:81:cf:a4:c1:
bf:74:60:59:4a:40:07:0f:16:a7:fb:85:b3:9c:9e:99:b8:d7:
92:b2:e4:5b:58:94:ff:bc:43:b1:00:9e:6c:fb:cf:63:10:d2:
bb:56:11:ee:5a:93:f6:67:5f:8e:c4:97:b7:7c:2d:9a:5a:89:
0d:a8:3a:c7:f6:c9:7c:65:72:b0:6a:9d:d1:51:21:49:19:cd:
db:38:49:a2:ac:3e:a1:45:3d:53:16:36:63:a4:36:e3:68:c2:
9d:03:9d:3a:eb:69:a7:8d:54:32:08:fc:dd:d7:34:89:b3:30:
7e:f5:78:f8:c0:b9:ab:3f:5e:30:1e:17:03:04:c9:b8:fd:b1:
34:23:39:70:af:23:ba:9c:0b:cf:86:ac:70:ea:a2:d7:68:e7:
9e:f9:70:b3:27:94:9d:e4:b0:4e:da:38:ca:85:2e:1d:a8:17:
bd:0b:ce:1f:45:5c:89:30:e1:7f:8f:52:d2:a9:9f:6c:6e:0b:
3e:c9:93:7c:f2:33:1a:50:62:da:cd:49:5a:88:df:18:dc:7d:
70:64:fa:f0:fb:46:4f:fa:c6:4f:8c:6f:96:82:e6:33:90:80:
cb:e1:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:26:10 2026 by rpki-client