Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DZl9VmIE-mtBDqzrDHPAPlzuTUI.roa
File: DZl9VmIE-mtBDqzrDHPAPlzuTUI.roa (raw, json)
Hash identifier: Rkg5PgdJ+WVudLaE23uu2cwy5ff4U3JgLUUW6Ngzj2E=
Subject key identifier: 0D:99:7D:56:62:04:FA:6B:41:0E:AC:EB:0C:73:C0:3E:5C:EE:4D:42
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F6543BB2220689066248FC83C61F35E23
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DZl9VmIE-mtBDqzrDHPAPlzuTUI.roa
Signing time: Wed 15 Jul 2026 10:12:45 +0000
ROA not before: Wed 15 Jul 2026 10:12:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 77.93.138.0/23 maxlen: 24
77.107.95.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.65.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.11.0/24 maxlen: 24
82.152.117.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:43:bb:22:20:68:90:66:24:8f:c8:3c:61:f3:5e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 15 10:12:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d997d566204fa6b410eaceb0c73c03e5cee4d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:bc:d3:ac:db:37:29:5d:9f:bf:2a:c3:33:
9d:fa:66:c6:a4:c2:e9:9b:ca:0c:69:19:c3:ae:73:
3e:89:ee:db:12:66:46:0d:6c:e1:89:be:3d:75:d4:
46:c6:c7:86:df:d3:9f:d7:78:fb:06:8c:59:f5:91:
c2:72:b8:e2:7e:39:9a:1c:ff:00:3f:b3:65:da:1c:
16:06:bc:66:0c:cd:7a:fe:3a:f3:48:93:39:ff:bd:
f3:4a:36:d9:7c:f7:9d:c4:bf:70:59:8f:01:2a:40:
90:6b:81:35:8c:b3:71:a2:d9:30:50:9c:8e:de:fb:
3a:c8:18:64:b2:f8:94:a9:c4:94:33:70:eb:16:1f:
e4:ce:e1:c6:11:7d:99:77:65:3a:33:a6:31:d0:20:
0b:fe:52:5f:5f:ac:d6:30:5a:70:fc:1f:b4:57:9c:
80:26:68:d5:81:da:b5:7f:84:a4:cb:ca:14:56:7c:
16:fd:83:49:2e:87:c1:e9:16:c7:c6:02:1f:cf:ba:
1f:13:62:3d:ce:ff:61:0e:c2:e2:ac:02:4b:ca:b0:
ff:00:fc:5e:bc:8f:0e:03:8e:f8:a6:bd:08:9b:d3:
27:12:77:1a:f0:41:83:f1:4f:31:4e:9e:26:99:22:
05:e1:66:82:34:b9:46:99:5c:c0:de:fc:d7:0a:19:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:7D:56:62:04:FA:6B:41:0E:AC:EB:0C:73:C0:3E:5C:EE:4D:42
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DZl9VmIE-mtBDqzrDHPAPlzuTUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
77.107.95.0/24
81.168.58.0/24
81.168.65.0/24
81.168.125.0/24
82.152.11.0/24
82.152.117.0/24
109.176.91.0/24
212.38.81.0/24
213.130.138.0/24
213.210.11.0/24
213.210.48.0/23
Signature Algorithm: sha256WithRSAEncryption
81:e8:b0:4b:3d:d6:83:f1:0b:bf:00:7b:ed:32:2b:f8:55:e4:
f4:6a:be:9b:a8:7b:32:be:eb:4c:42:82:c5:ad:23:08:c2:e7:
4c:3c:a3:07:b4:65:c9:4b:56:92:e7:0b:f2:72:13:13:b0:24:
d3:a3:e2:87:b5:77:70:83:30:2e:13:b6:a0:9c:e3:2e:54:33:
6c:24:2b:31:83:e1:0b:e6:e6:71:37:df:4a:34:0d:55:89:c4:
78:94:db:7d:80:4b:3f:40:1a:f1:d1:d2:bd:08:a4:3b:7d:f7:
b3:49:32:34:f2:fc:a5:04:1b:34:d4:86:dc:5a:30:ce:fb:e2:
35:d9:c0:f8:13:3d:be:78:d5:8f:20:72:64:18:5d:d0:c5:c1:
5c:de:02:57:c6:69:6f:4c:1e:58:05:7f:e4:bb:a9:f6:7e:42:
04:e8:3d:b8:51:87:64:d6:79:72:ba:ed:a3:37:4d:9c:db:c3:
a9:48:49:93:a2:66:25:8e:7d:6a:10:83:57:c2:96:98:f9:5b:
33:5f:64:5d:61:25:e2:d4:4f:49:8f:16:7e:02:f8:72:37:63:
90:89:b1:e7:7a:08:8e:a9:3f:73:7a:2b:7f:7c:0b:1a:1b:31:
2e:1c:fc:39:dc:6a:44:f9:b0:cf:96:02:62:18:44:a7:17:8f:
b4:f7:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:17 2026 by rpki-client