Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/DU0N-I5GJvyWrzwUmj2L1_AEZ1M.roa
File: DU0N-I5GJvyWrzwUmj2L1_AEZ1M.roa (raw, json)
Hash identifier: ZN8fdphiE3XiAL4oyd/tYR38zdzZj+4mwp0ocODidUk=
Subject key identifier: 0D:4D:0D:F8:8E:46:26:FC:96:AF:3C:14:9A:3D:8B:D7:F0:04:67:53
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01A0C42F44677CD80EB12A719F1B973B17D3
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/DU0N-I5GJvyWrzwUmj2L1_AEZ1M.roa
Signing time: Mon 21 Sep 2026 13:37:07 +0000
ROA not before: Mon 21 Sep 2026 13:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12993
IP address blocks: 37.203.32.0/21 maxlen: 21
37.203.32.0/23 maxlen: 23
37.203.37.0/24 maxlen: 24
37.203.38.0/24 maxlen: 24
37.203.39.0/24 maxlen: 24
81.94.224.0/20 maxlen: 20
81.94.229.0/24 maxlen: 24
89.111.0.0/18 maxlen: 18
89.111.22.0/24 maxlen: 24
89.111.25.0/24 maxlen: 24
89.111.26.0/24 maxlen: 24
89.111.38.0/24 maxlen: 24
178.16.16.0/20 maxlen: 20
185.34.24.0/22 maxlen: 22
185.34.24.0/23 maxlen: 23
185.34.26.0/23 maxlen: 23
185.219.156.0/22 maxlen: 22
193.108.144.0/22 maxlen: 24
193.108.144.0/23 maxlen: 23
193.108.146.0/24 maxlen: 24
193.108.185.0/24 maxlen: 24
194.9.175.0/24 maxlen: 24
2a00:17c0::/32 maxlen: 32
2a00:17c0:a0::/44 maxlen: 44
2a00:17c0:d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:2f:44:67:7c:d8:0e:b1:2a:71:9f:1b:97:3b:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Sep 21 13:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d4d0df88e4626fc96af3c149a3d8bd7f0046753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:90:00:5b:6e:2e:31:2b:44:45:c8:b6:cc:c1:
ab:e2:31:7a:6c:0c:e2:0f:6e:ed:61:0b:01:2b:c8:
34:b5:6e:c0:25:02:4f:99:78:fe:df:e7:ff:fe:f5:
80:af:c9:49:3f:6b:b9:31:6f:88:09:d4:d6:dc:78:
61:1f:df:87:c9:bd:c5:96:b9:7f:80:d4:f4:8d:a6:
e6:e0:4c:18:68:8b:2c:64:75:87:b2:3f:c7:f3:4c:
5b:ca:ba:93:7f:42:d4:b8:e9:80:71:d9:59:6e:df:
d7:39:09:52:b8:40:d9:c6:95:70:0b:9e:16:5f:13:
4d:61:cc:24:8a:e3:ce:53:ce:e7:7a:2e:f6:89:ad:
a0:9b:31:e1:94:40:6d:f8:ab:b7:e4:d4:85:d3:e0:
c2:25:e8:6a:e4:d5:af:e9:20:fc:20:1e:41:a1:83:
0e:89:79:7b:9c:ba:a0:41:d5:9b:e3:3e:e7:7b:2e:
0b:b5:f7:84:02:c3:13:8b:e9:97:ee:8f:4f:19:fe:
d6:ba:53:5b:72:f8:36:8a:65:7f:fe:f4:a4:c5:50:
35:2b:75:dd:b8:09:0d:24:a1:d1:31:e1:08:19:f4:
97:28:43:2e:76:6e:6c:89:5b:dd:bc:49:d3:f4:cc:
fa:ac:cc:e6:71:7d:b7:c8:4d:41:3f:9a:8f:86:b9:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:0D:F8:8E:46:26:FC:96:AF:3C:14:9A:3D:8B:D7:F0:04:67:53
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/DU0N-I5GJvyWrzwUmj2L1_AEZ1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.32.0/21
81.94.224.0/20
89.111.0.0/18
178.16.16.0/20
185.34.24.0/22
185.219.156.0/22
193.108.144.0/22
193.108.185.0/24
194.9.175.0/24
IPv6:
2a00:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:d7:56:c3:b3:1a:ff:51:9c:69:ca:78:a4:2c:aa:08:58:ae:
7b:7d:b5:5c:ec:a3:0e:de:a6:39:f6:16:ae:d6:23:31:aa:7f:
1b:b1:62:c9:55:1d:bd:e6:e6:14:91:ac:a4:54:0f:b7:29:41:
df:75:0d:be:24:cf:cb:7d:46:73:17:10:93:96:79:96:e5:17:
ed:25:12:dc:65:69:ee:c6:c1:05:9d:68:00:53:1a:50:d7:be:
ab:a4:8a:e7:5b:21:d5:e4:4d:7d:5b:30:2e:f9:5e:8a:cf:84:
00:be:a1:35:e0:67:b2:76:f8:47:25:48:e3:b6:b9:95:39:12:
3b:39:9c:ce:8e:58:fb:f4:47:bf:25:b9:1c:63:31:59:f4:d4:
ce:e0:c3:c4:86:99:b4:6b:f2:a0:0b:7e:eb:6e:64:a0:d3:ce:
19:64:6d:78:ad:a4:c9:29:fb:6f:92:7f:20:b5:78:09:6c:81:
81:2c:3c:f1:e8:af:e2:85:a4:b0:0e:cc:95:8f:33:9f:92:35:
ce:41:f0:0d:f9:c2:6d:5b:d8:9f:4e:e9:02:da:ce:c0:da:7d:
1b:c8:0c:e7:9a:af:94:33:be:85:70:6f:80:57:3e:2e:8a:2b:
20:68:0f:7e:5f:bb:79:fb:e1:28:b9:af:b8:b4:63:93:d7:e5:
5a:e5:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:13 2026 by rpki-client