Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DZf9TSOhIl01Wj7q_PAfd6SKgC0.roa
File: DZf9TSOhIl01Wj7q_PAfd6SKgC0.roa (raw, json)
Hash identifier: CNq3YHFBPR2HgonCmBELHEPsZzqD94xOnuMspOcb4Sg=
Subject key identifier: 0D:97:FD:4D:23:A1:22:5D:35:5A:3E:EA:FC:F0:1F:77:A4:8A:80:2D
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019F8F1BD7FFBC47B29781F293DF5D793380
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DZf9TSOhIl01Wj7q_PAfd6SKgC0.roa
Signing time: Thu 23 Jul 2026 13:13:14 +0000
ROA not before: Thu 23 Jul 2026 13:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219151
IP address blocks: 195.228.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:1b:d7:ff:bc:47:b2:97:81:f2:93:df:5d:79:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jul 23 13:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d97fd4d23a1225d355a3eeafcf01f77a48a802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:e2:c5:f4:b6:88:dc:be:5c:f1:17:c4:ef:
83:3b:15:49:8b:fd:8f:ee:0a:d8:1f:34:f0:0d:32:
4d:d6:4a:39:86:6f:78:77:02:1b:77:07:58:ce:25:
11:ba:0e:b1:32:5e:4b:77:56:82:a0:3f:92:fc:1a:
e5:10:29:7d:f2:bc:54:9c:f6:1c:10:1f:7b:07:42:
4f:92:0b:05:88:23:e0:c3:37:48:2f:2b:d0:91:60:
fe:15:97:fb:07:28:7f:b1:8f:c6:c5:36:67:da:c5:
3e:1a:67:7c:25:7a:24:2f:35:ca:52:65:f0:7d:d9:
cf:61:e0:aa:43:0a:7f:4a:50:e5:a4:3f:e4:94:f4:
bf:49:72:bb:e9:86:c1:6b:00:1b:a7:e0:0f:96:d5:
33:fb:05:5f:d2:36:50:5e:81:3a:d3:7d:35:a9:89:
80:a4:28:e3:15:2e:51:99:74:8c:62:a0:a6:b0:41:
2f:31:4c:4c:ae:e7:5c:3b:b0:4d:2a:e9:5e:e9:1b:
95:af:78:e5:eb:ce:0b:5d:59:52:de:6e:03:df:a8:
1c:5d:77:7b:e7:0c:39:bb:ad:05:05:e0:0d:71:29:
13:40:15:c0:03:3c:52:bf:2f:05:77:b1:5e:f1:c2:
cf:86:7d:4f:14:48:8a:c0:c7:7c:af:62:3e:34:a7:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:FD:4D:23:A1:22:5D:35:5A:3E:EA:FC:F0:1F:77:A4:8A:80:2D
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DZf9TSOhIl01Wj7q_PAfd6SKgC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.228.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2d:23:21:45:b9:78:05:27:c4:52:4b:8c:32:eb:5a:0c:9e:
14:15:a0:8d:eb:c8:1e:7c:a9:59:47:82:33:9f:91:00:69:53:
eb:cb:04:71:e3:3a:77:4a:65:76:18:0a:68:e4:8e:aa:41:4e:
a7:2c:d1:5c:62:db:78:d5:d8:70:7d:c8:2c:01:af:27:3e:96:
15:99:dc:4c:f2:77:d2:13:70:55:83:d6:42:d6:fd:dc:6c:b2:
c6:73:2e:58:c0:e5:bd:6e:75:24:54:e2:0f:f4:c0:03:80:88:
e0:4c:2e:7d:4e:c4:69:82:80:e9:ed:34:01:97:da:63:9d:55:
07:74:3b:55:f8:59:e2:d9:dc:d4:da:d0:4a:2b:1b:ee:55:83:
0e:3d:49:9c:bf:49:32:a2:47:5a:64:30:39:38:05:9f:fb:5b:
72:8f:4f:29:6d:1a:49:10:9f:30:b2:d6:c1:3a:ec:2f:32:ff:
88:14:63:91:e3:b0:17:57:d2:28:bf:62:8c:dc:f4:29:9b:15:
c4:b4:c2:27:0a:92:5d:e0:f8:03:94:b2:c1:10:4d:e2:cf:47:
ce:81:23:45:b1:da:bc:8f:01:c5:4b:13:43:f2:9a:66:a8:6f:
f1:57:55:a1:29:24:65:33:ac:86:29:ba:ab:3f:33:3a:f0:f6:
9d:25:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:28 2026 by rpki-client