Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/DYkV04gki79D3asculnZRcHU37Q.roa
File: DYkV04gki79D3asculnZRcHU37Q.roa (raw, json)
Hash identifier: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=
Subject key identifier: 0D:89:15:D3:88:24:8B:BF:43:DD:AB:1C:BA:59:D9:45:C1:D4:DF:B4
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019E16D1A11F8DC95851E258CCB19B6F503B
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/DYkV04gki79D3asculnZRcHU37Q.roa
Signing time: Mon 11 May 2026 11:34:57 +0000
ROA not before: Mon 11 May 2026 11:34:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8473
IP address blocks: 81.88.72.0/22 maxlen: 22
81.88.78.0/23 maxlen: 23
109.169.100.0/23 maxlen: 23
109.169.102.0/24 maxlen: 24
109.169.108.0/24 maxlen: 24
2a01:460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:d1:a1:1f:8d:c9:58:51:e2:58:cc:b1:9b:6f:50:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: May 11 11:34:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d8915d388248bbf43ddab1cba59d945c1d4dfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:d9:48:af:2e:a9:3f:31:c6:08:17:4d:6d:
b4:8f:51:a2:d4:6e:75:7d:f2:5f:5e:f8:43:83:b1:
6c:a6:69:2c:52:d4:23:15:e3:54:87:b6:58:f8:bf:
a1:2e:2a:89:c7:a8:7d:92:a4:b9:8e:e8:c7:a5:f3:
7e:4a:a8:eb:8f:e6:31:0d:6a:b3:64:91:b4:bb:6b:
d3:9e:da:0f:6d:6d:b2:12:35:97:93:05:2e:f9:15:
2c:09:0d:b8:f7:b3:8d:a5:00:12:00:85:bc:52:1d:
10:8b:8c:73:69:c7:9b:fc:d2:b6:e2:b4:d9:14:99:
e3:76:6b:1f:1e:9d:62:ae:38:b7:ce:7d:2f:1f:b6:
fb:57:74:d6:dd:57:5b:59:a6:bc:0c:9a:d3:7b:6e:
27:bc:af:03:5b:93:df:67:92:a3:64:40:b2:62:74:
e6:33:73:3d:56:82:4b:74:86:93:39:39:45:c6:cc:
1d:f5:44:f3:85:31:80:7a:e7:58:8d:d7:bd:45:dd:
10:a8:4d:36:0c:2a:94:26:57:91:4f:43:55:f5:ac:
d3:4f:eb:41:ec:47:64:e0:37:20:ca:fb:36:91:6a:
4c:c2:bb:e4:05:fa:57:9a:9c:70:17:cb:1e:9d:e7:
3f:9d:9a:fe:c7:6b:41:ef:5e:db:67:4a:9f:fe:f9:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:15:D3:88:24:8B:BF:43:DD:AB:1C:BA:59:D9:45:C1:D4:DF:B4
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/DYkV04gki79D3asculnZRcHU37Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.72.0/22
81.88.78.0/23
109.169.100.0-109.169.102.255
109.169.108.0/24
IPv6:
2a01:460::/32
Signature Algorithm: sha256WithRSAEncryption
2e:f8:5f:3c:93:ea:fe:1b:9e:56:c2:98:de:39:60:bb:92:b1:
51:5f:f5:63:4a:43:73:f1:c9:b8:67:77:95:01:1a:39:13:20:
bf:e0:d4:1a:93:0a:5c:f8:e5:f7:21:b2:71:b8:1a:25:95:13:
7b:63:09:37:77:36:bb:29:45:35:67:9d:37:d1:ab:91:72:e4:
35:8f:d5:61:2e:c0:3d:2e:26:9a:e2:ad:ba:a1:88:6f:e5:79:
a9:ee:d5:d4:bc:95:85:6d:17:41:fe:af:5f:b5:89:06:91:a6:
65:1c:35:8c:02:fc:36:38:21:db:b0:8a:78:ea:30:e9:68:e1:
68:98:49:52:cb:ae:a3:97:cf:6b:d7:9d:46:a8:e2:8f:17:8f:
a2:2b:d2:67:fe:6b:f6:6f:06:3e:26:3c:39:ab:0d:3a:be:dc:
3e:0f:54:5e:2a:66:0e:6b:44:57:03:41:c4:7a:60:be:f9:37:
bd:0e:b3:98:72:81:db:e7:00:23:03:3d:a1:2b:4e:02:91:6e:
95:fb:c8:8d:6f:5f:1c:27:ee:06:81:0c:a1:a5:5b:ff:09:0f:
4e:51:3d:02:35:5e:03:56:9f:df:28:39:4c:83:26:63:87:14:
0b:30:ed:38:a5:6a:aa:9d:16:69:36:59:3a:a8:df:0c:1b:43:
a2:d9:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:14 2026 by rpki-client