Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/dtDYTTev40_KP4gDD8l2B4FoWRU.roa
File: dtDYTTev40_KP4gDD8l2B4FoWRU.roa (raw, json)
Hash identifier: KG4iIFsSaxHV4OzMuERalzQ2ir8/nTV6jkLr4CLycfo=
Subject key identifier: 76:D0:D8:4D:37:AF:E3:4F:CA:3F:88:03:0F:C9:76:07:81:68:59:15
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 019F2368AE495A8B019BB2072ABEA33965A8
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/dtDYTTev40_KP4gDD8l2B4FoWRU.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 193.111.234.0/24 maxlen: 24
193.134.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ae:49:5a:8b:01:9b:b2:07:2a:be:a3:39:65:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76d0d84d37afe34fca3f88030fc9760781685915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:4c:d6:53:43:fd:50:6c:ba:b0:0e:c6:12:
53:54:16:31:d0:77:33:13:7b:ae:ad:fb:f7:0b:29:
4e:e4:4e:5b:c5:63:5a:bd:50:0c:3b:14:81:86:73:
3c:01:e1:6d:fc:b8:1f:5d:17:c6:62:a4:dc:d3:5d:
e8:6c:72:9c:9e:a6:57:52:d6:c6:16:82:df:63:63:
a4:83:c5:3a:6f:21:02:40:75:7d:91:fd:c7:c6:95:
0f:cb:e3:b3:d6:d3:1f:bb:7b:9d:1b:b5:ca:a1:7e:
39:2c:51:99:1c:5e:ee:35:a1:d6:4c:50:54:16:a4:
b9:d3:c5:fc:7e:9d:ec:f4:5a:83:4b:22:38:89:e8:
6d:79:88:6c:df:39:6a:40:ff:a6:48:62:e7:22:d0:
a7:d7:21:89:00:00:50:9f:32:8f:1f:df:cc:83:fc:
fe:35:bb:be:84:dc:85:2a:a8:98:25:5a:cb:a4:46:
d1:22:e0:5a:d2:86:79:a5:06:9e:f1:fc:ad:5b:74:
65:dc:5e:a7:20:fe:dc:09:2b:4d:c6:8f:7c:14:e2:
95:8a:d0:60:eb:56:ab:c3:9f:3a:b2:1e:20:90:f8:
ad:8e:8e:b5:c2:95:e9:ec:27:83:ce:76:b1:81:47:
35:fa:fe:a3:d7:ce:c8:85:9a:3c:e2:f9:54:f3:8c:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D0:D8:4D:37:AF:E3:4F:CA:3F:88:03:0F:C9:76:07:81:68:59:15
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/dtDYTTev40_KP4gDD8l2B4FoWRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.234.0/24
193.134.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:cc:23:26:1c:09:4e:dd:0d:28:db:f2:3e:b6:76:a4:84:24:
42:5b:20:14:aa:39:b2:e4:56:6e:a3:7c:17:f0:ea:09:a6:9b:
fa:e4:3d:f6:47:17:ff:49:16:7b:4b:72:a4:96:41:96:2d:4a:
2d:a3:99:7d:e6:da:56:13:49:49:ce:ef:e1:8c:93:63:f2:51:
08:d6:a4:fc:2e:f5:c1:3d:9f:9a:2e:2d:de:26:62:2b:65:76:
40:09:06:5d:b3:07:ac:45:b5:45:19:84:42:9c:28:65:01:69:
4f:73:44:57:a1:ad:32:8d:da:40:28:1a:52:e9:e8:f2:65:da:
89:bf:f2:f3:3d:be:26:8c:bc:f6:60:f8:d9:ef:c0:82:63:e6:
21:6d:69:88:7e:bb:88:0d:12:df:0e:e5:17:38:75:81:9e:f6:
70:0d:35:10:54:e4:2a:3a:fd:9d:9b:40:b8:28:d4:0e:a3:7c:
63:65:ee:ef:ce:4d:f6:cd:68:38:f8:4d:ea:81:65:80:18:32:
48:d4:1e:35:1c:8c:ad:ae:a2:28:d3:ce:c1:c9:4a:2b:62:52:
0c:9e:e7:58:44:4d:64:97:fe:9d:c8:05:34:93:ed:40:8a:3b:
fd:25:0c:fe:01:49:2c:9c:1a:0f:53:a7:ba:e4:e3:ac:45:50:
bd:be:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:10 2026 by rpki-client