Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/DZ0MP-yB-k0XdclRi6GSHev-8UI.roa
File: DZ0MP-yB-k0XdclRi6GSHev-8UI.roa (raw, json)
Hash identifier: OLquFioTpRnSbUlRpW26tAjmfT6pteRRo9SnbJKQNlA=
Subject key identifier: 0D:9D:0C:3F:EC:81:FA:4D:17:75:C9:51:8B:A1:92:1D:EB:FE:F1:42
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DE24867F56FDF9CF3CEA2665E4066BDD3
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/DZ0MP-yB-k0XdclRi6GSHev-8UI.roa
Signing time: Fri 01 May 2026 06:44:49 +0000
ROA not before: Fri 01 May 2026 06:44:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154239
IP address blocks: 178.214.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:48:67:f5:6f:df:9c:f3:ce:a2:66:5e:40:66:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: May 1 06:44:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d9d0c3fec81fa4d1775c9518ba1921debfef142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:ae:28:f0:e4:90:e7:7e:5c:f1:01:3b:b1:
d5:05:18:0d:13:02:7d:99:3f:a1:7c:4b:fb:dd:47:
28:15:ae:f2:5c:df:a5:34:0e:97:c6:4f:23:5d:ae:
b4:fe:07:af:be:c4:38:1a:e3:aa:3c:d4:4a:ba:85:
3c:65:ff:e8:fe:f7:ef:4d:df:e0:6a:2c:c4:8a:07:
16:a1:f4:0d:57:5d:5a:eb:9e:a5:7f:a0:15:e5:dc:
af:01:d4:d5:67:41:2e:93:1b:57:5a:bc:fc:ce:cc:
c0:13:21:4a:5b:69:92:21:dc:d9:1a:67:13:6e:00:
5b:2d:8f:28:bb:29:00:c6:35:f6:a6:ee:9b:ac:42:
ed:fb:9d:d7:61:76:be:d3:f4:31:0b:1c:51:37:81:
82:c2:7f:47:f2:37:ae:7c:26:52:75:94:00:f4:be:
df:16:b2:83:d4:a3:f8:13:d8:c3:be:8e:98:b2:cb:
0d:65:7b:19:22:be:0c:47:07:f1:90:38:29:34:bf:
c4:b7:5e:d8:2c:1a:2c:c0:d4:ba:f0:bd:82:c1:69:
a5:e4:69:31:7b:f8:9f:14:99:75:ba:14:01:09:f7:
b3:50:aa:c7:7a:a4:e6:e7:08:fc:a1:40:fc:3b:be:
89:67:19:7e:90:79:b1:c3:29:dc:10:c0:83:c9:c0:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:0C:3F:EC:81:FA:4D:17:75:C9:51:8B:A1:92:1D:EB:FE:F1:42
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/DZ0MP-yB-k0XdclRi6GSHev-8UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.212.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1e:97:1c:b7:22:0b:07:94:94:77:93:f5:f9:8f:c8:e5:eb:
2d:0f:6e:30:f7:52:53:ee:bf:c0:91:e9:be:34:fd:26:e9:87:
7e:a9:11:1a:c6:1d:f1:35:41:23:a0:81:f3:3a:c0:8f:f3:75:
36:4b:14:c3:37:07:67:37:ec:4b:cb:49:1f:9c:1f:46:46:d5:
05:cf:8b:96:d0:74:f4:ea:5d:b7:d6:33:00:ed:29:9a:bf:ee:
93:df:69:79:cd:81:0c:ca:f3:ef:62:ae:85:fe:95:8f:f3:d3:
14:5e:fc:3b:5d:69:6c:de:50:e1:57:f1:5e:f9:5a:0a:00:27:
36:38:85:ac:68:32:59:3e:b5:47:d5:66:cd:45:0d:51:af:82:
b3:d1:07:52:99:fc:59:e8:ec:0e:0a:9f:4a:cf:07:ec:af:32:
4a:fd:21:a5:a3:d9:fd:97:1b:81:43:c1:c0:70:7f:0c:02:17:
9c:18:99:77:e0:77:1f:9c:71:ad:93:6b:fe:d3:d1:c6:ec:ee:
30:e2:da:cf:cd:17:54:b7:c5:cd:27:01:ba:cb:21:62:ed:b5:
e2:6a:05:28:76:1f:5b:e1:96:11:99:c3:0f:87:e6:6c:03:8e:
28:c8:2d:82:2f:d4:bf:41:94:7c:4a:b3:b0:ae:6a:1b:63:44:
70:82:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:56:18 2026 by rpki-client