Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/DY5wKgT1aXkkcaivqVTUyLfJ8eE.roa
File: DY5wKgT1aXkkcaivqVTUyLfJ8eE.roa (raw, json)
Hash identifier: s/XqSxs2Vj4tQEVnGu9l3PynIaNTPng+JgcbJn6lBz0=
Subject key identifier: 0D:8E:70:2A:04:F5:69:79:24:71:A8:AF:A9:54:D4:C8:B7:C9:F1:E1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019DED003DBFF5229E47DAB8C7E55FA05BB5
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/DY5wKgT1aXkkcaivqVTUyLfJ8eE.roa
Signing time: Sun 03 May 2026 08:41:49 +0000
ROA not before: Sun 03 May 2026 08:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200554
IP address blocks: 81.12.39.0/24 maxlen: 24
81.12.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:00:3d:bf:f5:22:9e:47:da:b8:c7:e5:5f:a0:5b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 3 08:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d8e702a04f569792471a8afa954d4c8b7c9f1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:44:f6:ca:f6:b1:84:60:1f:58:cb:45:33:
05:57:13:d9:a9:fd:1e:e8:e0:6c:f0:f0:1f:30:c5:
38:eb:9a:3b:71:58:e5:c0:92:a5:31:bf:72:cc:b5:
d8:f9:cc:2f:3a:d6:c1:1e:da:ec:db:91:de:5f:ab:
94:7f:a0:d4:35:c6:f1:27:9b:8b:4a:82:04:a2:69:
5a:0e:03:6c:ff:7e:65:91:dd:8e:a9:c6:0a:24:94:
81:96:9b:9e:a3:00:8d:06:27:54:11:c2:44:5f:b0:
94:8b:1f:64:63:9a:94:e6:bb:a2:02:43:15:b5:de:
bd:fc:23:f9:72:62:0a:ef:45:7b:1f:e4:3b:60:db:
dc:f1:c9:1a:ce:48:fa:a4:cd:79:3b:b0:f8:1f:91:
4b:bf:50:ed:9a:91:f3:ee:bf:53:43:e2:bd:a3:b4:
a3:f6:9d:50:56:a4:69:71:7e:1e:8f:d2:1c:f4:85:
84:74:ba:df:cc:87:b6:a1:b9:c5:62:74:16:a7:6d:
4c:48:63:17:08:57:73:ee:31:47:ba:59:5f:d1:7f:
54:79:e2:35:7e:3d:3e:2b:e1:18:3f:84:09:22:d3:
8c:ee:a3:62:3c:5e:e4:aa:46:2f:85:5e:19:2b:1b:
d1:9a:1f:69:5b:26:6e:06:fb:11:3f:09:d8:e1:47:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:70:2A:04:F5:69:79:24:71:A8:AF:A9:54:D4:C8:B7:C9:F1:E1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/DY5wKgT1aXkkcaivqVTUyLfJ8eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.39.0/24
81.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
14:48:11:de:58:a4:cc:41:c5:1d:3a:85:15:7b:b0:c3:46:15:
8b:f7:eb:01:5d:0c:87:12:c8:1f:b9:e6:b9:cc:94:71:4f:b7:
0e:39:09:cd:2b:c9:ff:cb:5e:21:f4:92:64:fd:c8:2d:7b:0e:
7d:83:16:28:ca:2d:c4:47:70:5e:76:fa:44:d4:4e:bb:d0:3b:
6a:ec:a2:38:6e:8d:52:f5:e3:85:8d:33:1d:57:c7:e8:a9:52:
d7:11:ff:9c:11:50:3a:54:54:e3:8b:a9:7f:c7:8b:07:af:f1:
9e:25:cf:9b:37:ea:ec:36:da:9e:6a:41:05:f8:78:10:45:72:
c2:3c:0e:70:8e:b0:1b:6d:cd:13:09:10:50:fe:68:f5:d8:83:
64:fc:4b:e0:ab:58:9f:e5:dc:ff:26:6c:f5:8a:1e:8c:a0:7d:
6a:b3:55:af:ed:ea:75:8b:de:32:d6:9f:23:a7:d1:b6:35:f7:
e9:df:0d:4b:e2:c5:26:72:aa:3d:93:cf:2f:48:c2:57:b7:56:
ae:58:da:11:8e:0a:99:e9:b2:26:ce:26:c6:9b:fb:df:a7:46:
91:12:fe:72:81:da:a1:14:de:6c:ac:b1:77:33:04:76:46:7b:
81:97:83:21:7a:6f:64:8f:d0:da:f9:7a:30:64:bf:ca:75:d3:
32:8b:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:50 2026 by rpki-client