Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/0DosBvc1nYTBnk-k7-9MkqoJuso.roa
File: 0DosBvc1nYTBnk-k7-9MkqoJuso.roa (raw, json)
Hash identifier: HpDjKyJ1RrZFlilOHlA6dkNWt1QM+OdtMilpqKGSWkQ=
Subject key identifier: D0:3A:2C:06:F7:35:9D:84:C1:9E:4F:A4:EF:EF:4C:92:AA:09:BA:CA
Certificate issuer: /CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
Certificate serial: 019F5BE9DC226FC620523FEEA8DE227D3011
Authority key identifier: E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/0DosBvc1nYTBnk-k7-9MkqoJuso.roa
Signing time: Mon 13 Jul 2026 14:38:00 +0000
ROA not before: Mon 13 Jul 2026 14:38:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43284
IP address blocks: 91.213.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:e9:dc:22:6f:c6:20:52:3f:ee:a8:de:22:7d:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
Validity
Not Before: Jul 13 14:38:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d03a2c06f7359d84c19e4fa4efef4c92aa09baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:54:41:d4:94:5a:fd:08:f0:04:8e:96:2b:
27:87:20:e3:dd:9a:18:b2:7a:51:8a:84:1c:af:df:
85:a1:5e:89:69:be:d0:1e:52:cc:b2:68:25:a1:f5:
7c:f1:c0:8f:6a:20:a6:c1:37:96:fe:94:e0:90:b9:
c8:d0:20:7e:b2:f3:a2:4f:e6:f8:4b:2a:94:ea:c0:
02:fd:95:d4:f9:2f:ca:6b:ac:04:1a:c2:a9:0f:d7:
4e:6a:05:09:c8:97:30:4f:2f:88:2c:51:6a:17:48:
2e:01:22:12:c5:16:0e:7f:fa:5a:f2:a5:da:8d:30:
ad:c7:53:9a:07:f4:79:74:36:80:64:cc:fc:17:95:
3d:3b:4b:96:5b:0a:79:bf:54:8a:35:e8:c2:32:4f:
8e:93:2f:c2:4b:42:89:13:fb:c1:db:ff:87:d6:34:
ed:c6:4a:04:43:45:30:1a:d2:4b:41:da:e1:8c:ca:
5b:7c:84:77:f6:88:b4:50:40:d3:00:9f:be:23:10:
c0:f0:f0:94:68:9c:d3:3a:2c:7d:a6:6c:f9:4c:82:
4f:f8:ba:1f:38:d8:bc:40:17:75:7c:54:fa:76:a4:
21:37:f2:c1:ee:66:28:7f:b4:33:c7:73:35:58:63:
8f:77:d5:53:0a:4b:70:dc:2d:8a:21:b8:24:fa:99:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:2C:06:F7:35:9D:84:C1:9E:4F:A4:EF:EF:4C:92:AA:09:BA:CA
X509v3 Authority Key Identifier:
keyid:E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/0DosBvc1nYTBnk-k7-9MkqoJuso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.24.0/24
Signature Algorithm: sha256WithRSAEncryption
19:99:10:4a:86:f8:f0:57:a5:ea:23:59:3c:5a:d7:cc:02:f7:
24:55:28:5b:ae:16:a8:9b:cf:bb:f1:1e:46:ba:c5:d0:c2:b6:
d6:7b:09:55:2c:d1:e3:9d:01:78:dc:25:3a:2f:29:d9:78:83:
fe:2b:f7:8e:b9:a0:ae:be:be:e0:23:ab:6c:0a:f0:8d:59:bb:
43:06:0b:a6:35:b9:44:35:1e:94:85:2d:81:df:32:13:5a:4b:
b1:96:63:91:7f:14:52:ef:8c:75:b8:3f:a6:7c:cd:aa:2a:32:
87:f6:52:a4:f1:38:13:b3:51:21:66:f4:b1:b3:c8:c1:4b:c3:
73:b0:39:e3:17:dd:16:06:04:bc:6b:dd:a5:b1:e2:2d:d5:3d:
23:15:5e:28:14:a1:02:7b:8d:32:98:9a:ca:c1:2f:bd:61:d4:
3f:a0:bb:e6:8a:53:52:4c:03:3e:6b:04:da:44:fc:94:fc:89:
e0:88:00:65:93:29:a4:8b:92:b8:67:8a:59:1a:87:f3:8e:ce:
35:f4:6a:6d:04:91:2f:2f:e8:bd:59:a0:59:91:91:b5:c9:07:
58:60:10:98:1e:70:24:3e:f4:85:84:90:8d:04:e5:1f:12:ad:
8e:b6:20:4a:9b:bb:10:54:71:8b:09:d6:bc:5b:1b:9a:1f:9c:
12:27:4a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:14:11 2026 by rpki-client