Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DKTazLzMyN-d8x2nUDViUZ0dyIY.roa
File: DKTazLzMyN-d8x2nUDViUZ0dyIY.roa (raw, json)
Hash identifier: xdgCGHDRzvShfqJT11XfaHewGYPVny+mzu4rbwwtSk4=
Subject key identifier: 0C:A4:DA:CC:BC:CC:C8:DF:9D:F3:1D:A7:50:35:62:51:9D:1D:C8:86
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C90340FCC219742CEC484A6BEE7EA429
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DKTazLzMyN-d8x2nUDViUZ0dyIY.roa
Signing time: Tue 22 Sep 2026 12:07:08 +0000
ROA not before: Tue 22 Sep 2026 12:07:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.214.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
217.60.17.0/24 maxlen: 24
217.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:03:40:fc:c2:19:74:2c:ec:48:4a:6b:ee:7e:a4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 22 12:07:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ca4daccbcccc8df9df31da7503562519d1dc886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:d4:11:b3:1e:75:4e:99:4a:c5:9a:27:eb:
33:e9:e9:d0:51:2a:22:27:41:7a:ef:84:38:08:71:
b9:74:a8:0b:9e:7b:05:d2:15:dc:ee:53:22:23:2f:
fc:5f:30:27:a5:8b:aa:83:f5:05:98:79:0e:de:d8:
3f:db:b6:ea:5e:04:7b:b1:95:ce:77:e5:0f:4f:bd:
5b:3d:5e:33:5e:16:39:8f:b7:40:a4:25:66:00:28:
6f:42:e9:fd:b0:24:79:82:67:a1:07:6c:dd:b4:e7:
7e:5d:ed:1f:a3:ec:2b:72:51:83:19:25:e2:99:0b:
45:b2:b0:cf:93:ae:40:d7:56:13:3c:95:c4:db:4b:
4f:41:5a:cb:3a:0a:0c:a8:f3:27:d1:26:ad:12:ef:
57:db:79:4c:52:e6:b8:cc:84:c4:6d:de:2d:45:dc:
fe:c6:37:f0:80:0e:fc:45:b5:21:9a:66:e9:29:98:
39:6d:ec:32:44:0c:a6:de:3e:1a:11:93:61:cd:34:
19:13:15:ce:40:ea:6e:d1:b6:3b:26:6d:96:9e:80:
2b:a3:69:f7:7d:50:64:4e:da:b2:27:96:2a:90:97:
f8:ff:36:d7:fd:38:9c:10:5b:47:f0:c4:3a:72:79:
2a:eb:b0:ea:69:da:40:a2:e8:2d:27:88:94:da:ca:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A4:DA:CC:BC:CC:C8:DF:9D:F3:1D:A7:50:35:62:51:9D:1D:C8:86
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DKTazLzMyN-d8x2nUDViUZ0dyIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.214.0/24
31.58.245.0/24
31.58.247.0/24
31.58.250.0/23
217.60.17.0/24
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
21:dc:a6:3d:88:db:ae:3e:e5:2e:11:12:e3:bd:3f:9b:22:be:
b2:4a:36:6f:fc:08:d2:6b:8d:03:f4:66:d3:81:88:54:9f:2b:
f6:18:81:6a:c5:ad:fa:d6:d9:51:bc:e7:8b:09:cb:d5:a8:97:
43:41:60:30:c5:d6:52:0b:d1:94:ac:9a:bd:f6:65:01:c3:dc:
e7:66:f6:8d:bb:2d:a2:52:c6:38:81:73:36:6d:0e:fa:ca:23:
41:8b:e4:b8:2f:7a:89:38:29:45:24:d4:9a:fe:76:41:9f:87:
1b:b9:73:95:54:6f:0b:54:75:9a:81:3b:19:d3:76:51:3c:2d:
79:95:77:c1:d7:2b:48:32:56:03:98:13:b1:c6:04:22:fa:5e:
49:85:04:b7:23:26:fa:63:98:fe:b9:01:44:e5:0d:33:19:04:
71:82:65:46:fd:9e:a6:6c:1b:e5:f5:93:c3:37:9f:63:69:7a:
67:50:76:a1:10:7a:2a:27:e4:18:1b:e4:92:f3:23:3c:3e:36:
fa:de:3d:31:20:b7:a9:4e:5b:c0:b7:e6:e1:a5:e1:a4:51:d1:
55:31:0b:12:35:ce:4b:85:c4:13:5d:78:53:e3:d8:f5:5e:30:
63:26:1c:2c:22:2d:9d:2a:ff:4d:0c:d5:63:8a:23:46:6e:10:
86:84:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:24 2026 by rpki-client