Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DOqGw9OkypsP0t8HdKQ8JOoSCLM.roa
File: DOqGw9OkypsP0t8HdKQ8JOoSCLM.roa (raw, json)
Hash identifier: IHSTCQsm3+PIvgMDr7Gix3GUnSFVfmmww3NQ6/ITWtY=
Subject key identifier: 0C:EA:86:C3:D3:A4:CA:9B:0F:D2:DF:07:74:A4:3C:24:EA:12:08:B3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D80A1861A44CB17F6605B9E4BEEB
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DOqGw9OkypsP0t8HdKQ8JOoSCLM.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a0e:6c40::/29 maxlen: 29
2a0f:33c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d8:0a:18:61:a4:4c:b1:7f:66:05:b9:e4:be:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cea86c3d3a4ca9b0fd2df0774a43c24ea1208b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:99:e7:8e:52:3e:9a:94:eb:ab:a4:3a:45:
e3:a0:7b:53:9a:ec:e8:9d:09:69:96:c0:ea:34:be:
84:b8:06:8d:16:01:20:59:36:37:7a:f4:47:53:79:
d7:0c:a4:1c:0c:11:55:4f:8c:a6:83:68:59:5d:17:
a8:36:64:eb:77:90:cf:93:b7:08:a0:68:ce:c0:72:
7a:2f:96:17:a9:d6:9a:c1:7c:54:99:6c:15:10:63:
0f:45:3e:06:d2:45:f9:6f:33:b6:b8:62:be:c5:47:
e0:76:41:b1:b4:7c:ed:f5:95:ad:56:b4:00:21:0a:
09:70:37:c7:d2:90:6f:08:c0:4e:37:63:18:c6:e4:
eb:82:ce:3b:87:62:0a:74:d9:33:52:4e:f0:07:f3:
7c:6f:de:da:85:5a:3b:bf:63:c8:d0:63:34:5b:aa:
60:3c:c8:6a:31:62:bb:6f:d1:90:19:7b:28:e1:66:
ca:85:50:c1:01:4e:3f:18:64:7f:52:9d:d6:6f:c0:
4a:97:3e:e0:1f:f0:a8:7a:6e:ec:81:c6:ab:3e:80:
06:34:c8:12:24:47:b7:cc:d4:4a:66:1b:5d:2b:42:
9e:f4:1c:aa:83:35:59:d8:c3:5c:c0:d5:dd:c9:d0:
34:9e:ea:a8:83:fa:04:f2:db:de:54:d1:1d:9e:fe:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:86:C3:D3:A4:CA:9B:0F:D2:DF:07:74:A4:3C:24:EA:12:08:B3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DOqGw9OkypsP0t8HdKQ8JOoSCLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6c40::/29
2a0f:33c0::/29
Signature Algorithm: sha256WithRSAEncryption
88:6b:62:46:8c:2b:22:c0:f1:c1:f3:f2:c4:2c:4f:64:cc:b8:
0e:27:85:37:17:3c:2b:86:d5:4b:02:6e:39:0a:c5:c2:50:de:
93:7e:20:89:83:45:f8:bf:ff:25:c9:ce:05:43:95:25:97:39:
bb:34:75:e2:b2:7a:b8:6e:aa:5d:ed:65:10:1b:d6:13:7f:ed:
87:15:8d:23:59:dc:74:af:9f:0d:e6:cd:ff:9d:65:9c:5c:dd:
11:7f:56:5a:2f:79:fa:91:5d:ce:77:dc:85:6d:e1:5a:28:74:
3b:c8:22:3b:99:3c:2e:1f:6d:b8:bf:e7:92:8c:32:99:be:d7:
f0:a5:2d:3f:b8:39:37:e1:dd:64:06:d2:ef:30:45:81:76:b3:
f3:31:09:fa:21:30:cc:f6:ef:c4:07:43:ea:e8:30:09:7a:cf:
80:9f:a6:36:cf:46:0d:13:cd:ab:db:84:bb:6a:e3:1c:52:de:
5e:95:26:de:69:44:5e:2a:22:dd:f9:ba:50:fd:a5:a5:5f:b8:
59:03:f6:bb:be:62:6a:bb:06:45:14:a0:a0:9f:60:e6:2e:24:
2f:04:5a:42:98:ea:33:94:9b:22:09:8f:fd:da:7c:78:f4:8f:
83:68:7f:2f:28:9f:fe:7c:ec:d2:6c:f4:b4:f2:f6:8a:4e:d5:
54:41:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:26:50 2026 by rpki-client