Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/DGq2WOYgxq7SjytIr-UQOQXVOjM.roa
File: DGq2WOYgxq7SjytIr-UQOQXVOjM.roa (raw, json)
Hash identifier: vo8lVzcZPxxaalBZy7d8pgREZYK500PxzZXHdu7U6AQ=
Subject key identifier: 0C:6A:B6:58:E6:20:C6:AE:D2:8F:2B:48:AF:E5:10:39:05:D5:3A:33
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0D411D91F927D8DB54745D1C8C7921BF0
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/DGq2WOYgxq7SjytIr-UQOQXVOjM.roa
Signing time: Thu 24 Sep 2026 15:38:54 +0000
ROA not before: Thu 24 Sep 2026 15:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 89.32.173.0/24 maxlen: 24
93.118.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:11:d9:1f:92:7d:8d:b5:47:45:d1:c8:c7:92:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 24 15:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c6ab658e620c6aed28f2b48afe5103905d53a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:8d:5a:a7:fd:db:44:d1:d0:6b:9f:bd:58:
c1:ae:d8:91:1b:5c:f4:1c:be:1b:bc:7f:1b:14:cd:
11:4b:79:fd:84:53:85:05:d1:af:d6:38:9c:1e:25:
0c:0f:3c:13:45:9b:6f:f4:7a:32:35:65:80:99:28:
dc:1e:73:82:f5:bd:a1:3f:7b:ba:3d:93:10:eb:a9:
5d:6f:b3:48:7f:f4:25:ea:49:cd:ed:f1:55:09:37:
aa:8a:e3:60:8a:d4:5b:e0:f7:34:a1:71:83:96:29:
d1:59:79:0d:d9:22:84:69:59:ad:a3:d6:14:7b:dc:
7e:c3:e2:cb:3d:bc:f3:34:f2:4d:cf:50:bd:20:d7:
8c:a1:cf:6d:3f:ec:26:91:5c:5f:cf:90:52:ec:40:
78:16:21:e8:60:7c:57:4b:f4:4e:6d:48:13:b6:bc:
b1:8f:9e:4e:3d:c1:08:71:a6:9b:30:47:57:60:f2:
7f:97:c0:f8:43:0e:bf:be:68:a8:13:3a:8d:26:af:
ea:03:af:85:a3:0a:13:0d:9b:e4:bf:2d:8a:57:22:
a3:14:68:77:ba:73:9c:5e:a1:b6:e1:ef:7c:25:54:
d0:e4:cc:0f:24:ba:8e:97:38:4e:1f:90:d4:a4:b6:
82:92:66:ff:94:95:9a:c5:a6:f7:0c:93:97:2e:5c:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6A:B6:58:E6:20:C6:AE:D2:8F:2B:48:AF:E5:10:39:05:D5:3A:33
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/DGq2WOYgxq7SjytIr-UQOQXVOjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.173.0/24
93.118.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:79:8d:b2:f8:b0:6a:53:6d:3a:a6:4d:2a:52:41:c1:32:0f:
50:6a:eb:3b:63:50:7d:4e:36:5d:c9:b6:b6:bf:11:d7:e0:fe:
84:bf:87:fd:5a:df:8e:01:8b:89:71:07:c0:d2:90:61:b1:4c:
25:0c:d2:71:c8:27:13:bd:3d:3b:f3:37:c3:09:ee:ba:da:95:
a5:fd:38:49:60:58:92:38:02:46:9f:76:42:5e:2e:a8:f0:4c:
9e:ee:1d:e6:14:d1:c0:b3:f1:d6:24:1c:1b:2e:fe:19:d7:7d:
7b:0f:f3:69:1f:3b:77:93:a8:89:2b:df:02:2e:48:2e:d4:b0:
b7:8a:96:31:ff:20:73:ff:8a:eb:56:90:a0:14:4b:57:78:b4:
e0:87:d3:df:fb:be:45:59:76:15:60:8d:c6:88:9c:eb:e8:55:
d8:be:c7:4a:51:0a:1b:0e:76:3b:56:01:ab:03:17:e0:ed:a9:
1b:7c:0c:4f:93:6a:51:7f:c8:44:b2:5a:a7:ab:4d:e6:72:2b:
3a:7b:e7:34:6f:6c:a6:94:ce:c2:ef:87:b6:aa:d0:09:95:45:
45:fb:ed:3e:58:3f:ea:89:a1:b9:66:40:2b:16:03:c8:ac:69:
1f:46:c7:e3:b4:c1:23:4a:eb:21:97:06:8c:e7:97:c5:a6:0f:
54:20:60:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDUEdkfkn2NtUdF0cjHkhvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYwOTI0MTUzODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzZhYjY1OGU2MjBjNmFlZDI4ZjJiNDhhZmU1MTAzOTA1ZDUzYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EyNWqf920TR0GufvVjBrtiRG1z0
HL4bvH8bFM0RS3n9hFOFBdGv1jicHiUMDzwTRZtv9HoyNWWAmSjcHnOC9b2hP3u6
PZMQ66ldb7NIf/Ql6knN7fFVCTeqiuNgitRb4Pc0oXGDlinRWXkN2SKEaVmto9YU
e9x+w+LLPbzzNPJNz1C9INeMoc9tP+wmkVxfz5BS7EB4FiHoYHxXS/RObUgTtryx
j55OPcEIcaabMEdXYPJ/l8D4Qw6/vmioEzqNJq/qA6+FowoTDZvkvy2KVyKjFGh3
unOcXqG24e98JVTQ5MwPJLqOlzhOH5DUpLaCkmb/lJWaxab3DJOXLlzdZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAxqtljmIMau0o8rSK/lEDkF1TozMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvREdxMldPWWd4cTdTanl0SXItVVFPUVhWT2pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSCtAwQA
XXawMA0GCSqGSIb3DQEBCwUAA4IBAQBLeY2y+LBqU206pk0qUkHBMg9Qaus7Y1B9
TjZdyba2vxHX4P6Ev4f9Wt+OAYuJcQfA0pBhsUwlDNJxyCcTvT078zfDCe662pWl
/ThJYFiSOAJGn3ZCXi6o8Eye7h3mFNHAs/HWJBwbLv4Z1317D/NpHzt3k6iJK98C
Lkgu1LC3ipYx/yBz/4rrVpCgFEtXeLTgh9Pf+75FWXYVYI3GiJzr6FXYvsdKUQob
DnY7VgGrAxfg7akbfAxPk2pRf8hEslqnq03mcis6e+c0b2ymlM7C74e2qtAJlUVF
++0+WD/qiaG5ZkArFgPIrGkfRsfjtMEjSushlwaM55fFpg9UIGCE
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:36:40 2026 by rpki-client