Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DxebwBvEDhV0VY-PhTcvYQcu0TE.roa
File: DxebwBvEDhV0VY-PhTcvYQcu0TE.roa (raw, json)
Hash identifier: TCAEXuEwg7wIBPfqKjjQT2JGrdmyRJVZApqRMazXtkY=
Subject key identifier: 0F:17:9B:C0:1B:C4:0E:15:74:55:8F:8F:85:37:2F:61:07:2E:D1:31
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01A17F8B6AC278CA6EE85FD31B263A62EEC4
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DxebwBvEDhV0VY-PhTcvYQcu0TE.roa
Signing time: Tue 27 Oct 2026 22:46:45 +0000
ROA not before: Tue 27 Oct 2026 22:46:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:8b:6a:c2:78:ca:6e:e8:5f:d3:1b:26:3a:62:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Oct 27 22:46:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f179bc01bc40e1574558f8f85372f61072ed131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:9e:76:d7:d8:86:dc:3f:11:9e:ea:eb:72:
09:85:aa:5e:cc:af:c8:b8:f4:ac:d4:d8:7c:ba:9e:
d9:e4:1d:4d:80:94:08:98:3e:b2:ae:a0:65:26:4d:
bf:e7:4c:25:e6:fb:9b:32:55:f8:38:8f:b4:3b:7c:
5a:ab:c8:77:f3:77:26:03:b2:97:7c:0d:18:d3:8f:
75:24:50:18:d1:ef:a9:cf:51:e3:f4:cd:68:58:9b:
bd:7d:41:1a:84:a7:30:57:75:49:50:ff:74:cf:75:
9b:62:73:d2:50:fe:6b:6e:8a:81:6b:1a:57:50:3c:
e5:40:9f:0b:67:a0:02:2d:64:b4:d8:d8:a7:5a:ef:
b4:61:46:e6:ba:a2:f0:38:ad:f9:99:3a:2d:33:99:
e2:41:f4:af:0e:29:dc:16:61:e7:c9:3d:b9:e6:41:
fc:bc:cf:c3:14:81:6b:bd:65:e0:0b:e9:24:64:cc:
51:38:52:de:18:24:af:ea:1e:e2:5c:22:f9:11:91:
cc:44:04:29:fa:f6:98:07:71:f3:6c:66:1a:0d:84:
9b:c9:d9:bb:b6:e4:db:45:30:27:9e:47:89:f9:44:
32:fc:22:55:6f:03:29:b4:de:8a:92:6a:00:72:ff:
1d:a6:3d:a5:90:f1:a1:c4:c5:b5:cc:d6:09:8b:be:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:17:9B:C0:1B:C4:0E:15:74:55:8F:8F:85:37:2F:61:07:2E:D1:31
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DxebwBvEDhV0VY-PhTcvYQcu0TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
185.211.49.0/24
194.124.66.0/24
Signature Algorithm: sha256WithRSAEncryption
83:96:db:7a:41:e1:2b:e5:70:a7:65:b6:a8:a8:81:81:cb:0c:
70:ba:de:3f:d0:7b:23:6d:df:8a:37:0e:33:07:bf:cd:70:ee:
c2:6f:3e:d6:3a:22:31:dc:a8:58:c8:a6:4f:66:93:0e:15:2c:
9c:2c:ee:11:33:47:8a:1e:4a:3c:01:28:66:6c:f1:9f:74:8f:
92:e3:98:52:c6:e0:48:b4:72:20:97:ea:14:0b:f7:5a:e8:26:
2a:16:2e:30:52:db:a4:b0:0d:02:55:db:38:1e:cc:9a:07:d8:
93:32:71:93:b9:ed:67:f2:60:d3:b9:9e:20:1b:3d:6e:2d:5f:
6d:40:9d:f5:8f:73:82:82:42:a6:d8:60:12:8b:7e:81:45:1d:
c6:61:5b:77:5a:b0:5d:05:2d:8e:bb:ee:ad:9e:26:b8:7d:18:
94:8a:97:fb:59:f5:62:de:00:40:c4:64:64:49:85:62:54:02:
44:8b:5f:aa:80:a2:45:7e:ae:51:f7:5a:88:a1:1d:1c:6e:22:
70:5c:6b:19:cb:00:68:9a:d4:62:5b:b5:98:68:9a:71:81:24:
1b:13:24:69:ca:19:94:c5:bd:3f:ba:96:a4:04:0c:10:46:9e:
2c:d8:6b:78:2e:d0:40:86:2e:8f:a0:62:7e:97:83:db:8d:44:
e0:ae:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:49 2026 by rpki-client