Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DTELV2JiGIqqRGBvJNhkXyrZSAw.roa
File: DTELV2JiGIqqRGBvJNhkXyrZSAw.roa (raw, json)
Hash identifier: ulRaUKTzhxLphvI3BuuaeySC6AYRtRYga83Ptw/BgnU=
Subject key identifier: 0D:31:0B:57:62:62:18:8A:AA:44:60:6F:24:D8:64:5F:2A:D9:48:0C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019F825854AA4EE7C6D53376818758DEE50E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DTELV2JiGIqqRGBvJNhkXyrZSAw.roa
Signing time: Tue 21 Jul 2026 01:44:14 +0000
ROA not before: Tue 21 Jul 2026 01:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210495
IP address blocks: 2a12:bec4:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:58:54:aa:4e:e7:c6:d5:33:76:81:87:58:de:e5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 21 01:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d310b576262188aaa44606f24d8645f2ad9480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:99:c9:52:f8:66:45:c5:6d:bb:dc:49:38:
4e:7c:3f:21:34:4c:26:b0:6e:ec:5e:67:c4:f6:e0:
7e:9b:2c:0b:fd:02:a8:6b:e6:99:22:a4:22:a8:42:
cf:a6:98:e9:03:ee:16:27:00:55:f7:ec:2d:7b:bf:
e4:90:25:5a:1b:39:64:dc:6f:9a:86:a6:0b:1d:6b:
b8:26:9a:d1:30:15:34:0c:1d:1a:c4:5f:4b:55:bd:
2b:77:69:85:c9:28:2b:34:ba:99:f3:00:f3:a7:2a:
61:0a:6c:dc:f8:07:ad:3c:7f:89:01:2e:65:55:c0:
6e:b9:37:e5:4f:bc:c0:2e:7b:dd:2e:8b:cf:20:e9:
e9:2c:b2:a6:f5:49:75:15:d1:59:7c:37:31:38:a0:
48:7f:af:1c:49:90:32:48:d0:a5:93:f1:69:e7:f1:
8c:04:4b:25:ec:cf:eb:04:4f:c3:10:41:c8:3e:c0:
eb:06:65:fb:16:c2:98:96:ab:98:72:34:7d:fc:65:
2c:dc:75:b3:40:d8:64:b8:87:35:b8:73:7d:7a:ee:
bd:dc:00:ff:b6:56:b6:0c:04:f1:fe:00:26:4f:71:
63:6e:0b:7d:2b:7f:52:5e:b9:b3:08:04:e4:00:44:
d3:0b:31:dc:0b:e7:a9:23:90:82:94:da:ba:2e:2f:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:0B:57:62:62:18:8A:AA:44:60:6F:24:D8:64:5F:2A:D9:48:0C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DTELV2JiGIqqRGBvJNhkXyrZSAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:30::/44
Signature Algorithm: sha256WithRSAEncryption
6f:18:cf:e3:f5:20:4c:fd:b6:76:5f:19:3b:83:5f:31:7c:cc:
b9:f4:73:62:20:7d:1c:d0:4d:3f:9b:0c:6c:80:1b:89:06:1f:
ca:34:6f:c5:ac:f8:16:e6:aa:3c:88:3b:d8:92:a7:24:a8:a2:
c8:fa:1a:b3:39:23:31:19:49:fa:35:e4:83:44:d0:87:9b:b9:
9a:38:73:81:5f:1e:77:d5:75:bf:2c:e8:36:62:c6:64:a1:10:
80:83:14:aa:3a:8d:7a:bc:49:74:80:ac:db:cd:cc:10:b4:d8:
17:41:8c:b8:76:f3:32:01:3f:a8:09:a7:3a:e2:7e:d3:c3:71:
2c:d2:90:e8:b5:bd:f8:2f:b2:86:f4:1f:bb:8c:f2:b2:08:41:
e8:1a:dc:45:ff:e7:7f:6c:4d:3e:7b:a0:48:b6:4b:5e:74:19:
99:88:9a:e2:81:ed:68:e6:80:db:f1:13:59:76:dc:97:cb:34:
27:ed:bf:c3:7f:b0:42:09:fa:87:f4:86:86:69:0f:4a:4c:4c:
84:b3:9b:28:d3:a7:64:73:15:5d:82:27:a8:18:17:ad:7a:f2:
b5:2d:7f:d5:da:9e:25:2f:1e:f1:af:cc:63:13:6f:bc:fa:cd:
f7:ba:56:a9:5f:86:f1:6d:2d:9b:7f:66:fc:30:02:8a:d7:02:
eb:4d:f2:52
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+CWFSqTufG1TN2gYdY3uUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwNzIxMDE0NDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDMxMGI1NzYyNjIxODhhYWE0NDYwNmYyNGQ4NjQ1ZjJhZDk0ODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFqZyVL4ZkXFbbvcSThOfD8hNEwm
sG7sXmfE9uB+mywL/QKoa+aZIqQiqELPppjpA+4WJwBV9+wte7/kkCVaGzlk3G+a
hqYLHWu4JprRMBU0DB0axF9LVb0rd2mFySgrNLqZ8wDzpyphCmzc+AetPH+JAS5l
VcBuuTflT7zALnvdLovPIOnpLLKm9Ul1FdFZfDcxOKBIf68cSZAySNClk/Fp5/GM
BEsl7M/rBE/DEEHIPsDrBmX7FsKYlquYcjR9/GUs3HWzQNhkuIc1uHN9eu693AD/
tla2DATx/gAmT3Fjbgt9K39SXrmzCATkAETTCzHcC+epI5CClNq6Li+bGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA0xC1diYhiKqkRgbyTYZF8q2UgMMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRFRFTFYySmlHSXFxUkdCdkpOaGtYeXJaU0F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xAAw
MA0GCSqGSIb3DQEBCwUAA4IBAQBvGM/j9SBM/bZ2Xxk7g18xfMy59HNiIH0c0E0/
mwxsgBuJBh/KNG/FrPgW5qo8iDvYkqckqKLI+hqzOSMxGUn6NeSDRNCHm7maOHOB
Xx531XW/LOg2YsZkoRCAgxSqOo16vEl0gKzbzcwQtNgXQYy4dvMyAT+oCac64n7T
w3Es0pDotb34L7KG9B+7jPKyCEHoGtxF/+d/bE0+e6BItktedBmZiJrige1o5oDb
8RNZdtyXyzQn7b/Df7BCCfqH9IaGaQ9KTEyEs5so06dkcxVdgieoGBetevK1LX/V
2p4lLx7xr8xjE2+8+s33ulapX4bxbS2bf2b8MAKK1wLrTfJS
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:28:49 2026 by rpki-client