Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/DmiIWYA8l_Pm_pE-NQx0PmnkGHY.roa
File: DmiIWYA8l_Pm_pE-NQx0PmnkGHY.roa (raw, json)
Hash identifier: p9rAJwBabpdSFCQdVwLVtupyuaaKb92iEcDP7az74zo=
Subject key identifier: 0E:68:88:59:80:3C:97:F3:E6:FE:91:3E:35:0C:74:3E:69:E4:18:76
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019F80036651DD91D0613BE3459AED0AEA78
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/DmiIWYA8l_Pm_pE-NQx0PmnkGHY.roa
Signing time: Mon 20 Jul 2026 14:52:14 +0000
ROA not before: Mon 20 Jul 2026 14:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202759
IP address blocks: 93.89.218.0/24 maxlen: 24
141.105.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:03:66:51:dd:91:d0:61:3b:e3:45:9a:ed:0a:ea:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 20 14:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e688859803c97f3e6fe913e350c743e69e41876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:3e:4d:68:f5:c6:2b:57:e7:d8:af:3d:25:
bc:76:5e:c3:95:ed:ab:10:05:01:c4:4d:96:81:03:
48:95:95:d6:f7:6a:71:81:fc:cc:3a:3b:f9:b6:db:
b0:94:3b:33:1d:e0:2d:20:4d:9b:42:ac:88:2f:72:
a7:9e:b6:46:42:f5:21:b1:4e:6a:a6:ba:79:25:5d:
9e:e5:ff:82:ef:72:f2:80:b3:f0:48:b2:a0:86:ed:
72:c1:36:e6:28:30:c6:da:09:6e:3a:b4:c1:a5:38:
43:46:6a:a2:d2:22:34:4e:7e:0d:6a:f3:a5:49:7c:
99:74:13:9c:0c:a4:a5:75:8b:0f:fe:a0:74:22:63:
9b:47:46:7e:f0:c5:de:f6:5f:de:b4:f8:d2:82:e7:
32:e4:46:92:86:7a:48:89:7e:22:b6:14:9c:ad:ff:
d1:16:b0:56:6a:fa:f8:37:33:71:d4:9a:63:67:a6:
da:68:da:57:7b:c7:58:b8:5e:87:fd:2f:a7:b8:ba:
aa:8b:22:e9:b6:c9:de:8a:99:5e:fe:8b:9d:fb:58:
54:17:56:26:b6:4f:ef:30:57:3d:1d:5e:b0:cc:ff:
58:a8:f7:b4:ea:ee:b1:b6:e0:69:9e:c3:15:02:b4:
91:9d:67:24:af:72:b1:dd:dd:53:b7:78:c7:3d:32:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:88:59:80:3C:97:F3:E6:FE:91:3E:35:0C:74:3E:69:E4:18:76
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/DmiIWYA8l_Pm_pE-NQx0PmnkGHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.218.0/24
141.105.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b2:bc:dd:46:28:e9:ea:6a:c0:d4:e7:39:c2:66:3f:36:86:
d6:fb:ae:a8:53:fa:fd:b3:19:c5:eb:dd:6c:08:cb:7c:28:c2:
10:49:c1:77:c5:b7:37:57:81:06:1e:61:0c:76:0a:79:87:84:
13:7d:e7:4b:64:f7:30:61:c8:13:6c:be:81:89:d4:75:cc:57:
93:48:a3:ed:d9:69:b8:d4:fa:b3:e2:a0:5f:24:89:3e:73:eb:
ba:69:83:14:c8:6e:20:88:3b:3f:11:18:d4:09:dd:ec:aa:79:
fb:95:2a:88:04:5d:cf:0e:32:c4:23:f0:c0:7a:24:a6:2a:8e:
c0:a2:22:a6:9e:23:14:a5:da:28:c6:58:f8:73:8d:c4:e5:92:
0b:d4:19:d4:3f:3a:b2:70:c1:0b:e4:e0:ca:45:97:92:af:9c:
27:57:8e:7f:3f:73:85:af:d7:ea:74:a2:2e:db:25:ef:3f:32:
c7:ed:5d:1d:ba:c3:04:59:aa:ea:b9:4f:63:71:99:07:3e:7a:
ea:61:3e:c0:d9:ec:9a:37:19:71:6b:c6:72:a5:77:ba:b0:ff:
2f:92:8b:b1:37:73:c5:2d:40:6c:1c:a2:8c:bc:51:af:f8:57:
c4:a7:34:77:82:64:54:8e:33:35:21:6c:2b:5b:30:0b:3d:05:
1d:1a:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:00 2026 by rpki-client