Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DqGXOOpUBDyIo6-xMv0lfI01neI.roa
File: DqGXOOpUBDyIo6-xMv0lfI01neI.roa (raw, json)
Hash identifier: cY+avgvPvcXEHIu9Wj7BmeU7KYCi5ZbN7lhO24Q9+hg=
Subject key identifier: 0E:A1:97:38:EA:54:04:3C:88:A3:AF:B1:32:FD:25:7C:8D:35:9D:E2
Certificate issuer: /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial: 019F23688F7BB5CAAC00627A90EFF84DF9F3
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DqGXOOpUBDyIo6-xMv0lfI01neI.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64398
IP address blocks: 5.83.45.0/24 maxlen: 24
5.83.47.0/24 maxlen: 24
2a02:13f0:8200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:7b:b5:ca:ac:00:62:7a:90:ef:f8:4d:f9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ea19738ea54043c88a3afb132fd257c8d359de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:c3:94:23:1b:02:d9:9e:9a:d5:0d:1d:a4:
dc:70:8d:14:99:72:31:30:9d:f7:6d:72:60:b6:f4:
85:e9:b0:cd:d6:06:41:f2:b3:68:17:9f:9c:82:c1:
3e:f6:ed:71:4a:9c:64:f5:59:4d:0c:04:2a:6c:86:
f0:88:17:04:d6:0b:60:e4:44:1f:09:1a:e8:25:79:
9e:c9:4c:19:38:51:88:ee:ad:43:db:a1:a3:5c:e1:
96:3f:88:b5:c4:67:08:d2:da:d3:d0:5b:d6:5d:58:
d8:24:a2:4d:cc:df:dc:03:f3:ee:8c:2c:07:cd:21:
8f:df:8d:6a:3a:c5:1a:16:e8:3d:ef:33:f5:49:e8:
3c:60:5f:cd:95:e4:5f:17:17:b7:d5:5c:e8:7a:fb:
51:12:c8:5f:95:d0:98:f3:35:c4:75:9d:94:de:fe:
b9:c7:b1:3c:27:c8:5c:8f:b7:20:9f:35:62:04:f2:
54:d7:c7:7d:61:d3:ce:ed:3c:10:d7:05:c5:dd:64:
64:c1:05:91:2a:c5:4f:16:f1:39:05:2a:49:7a:dc:
6b:71:63:75:25:ee:eb:a3:a1:df:7b:5c:99:b4:28:
46:aa:de:29:c8:01:60:ba:da:64:75:ed:f5:ae:5c:
64:5a:52:fb:25:1b:2a:cf:20:d2:e4:bc:58:74:0c:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:97:38:EA:54:04:3C:88:A3:AF:B1:32:FD:25:7C:8D:35:9D:E2
X509v3 Authority Key Identifier:
keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DqGXOOpUBDyIo6-xMv0lfI01neI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.45.0/24
5.83.47.0/24
IPv6:
2a02:13f0:8200::/48
Signature Algorithm: sha256WithRSAEncryption
0c:f9:aa:53:f3:d3:95:94:32:a2:b7:78:15:fc:a8:e9:44:72:
d7:ae:58:7b:55:03:86:65:03:50:46:4a:76:8e:ae:7b:a6:9c:
da:e6:48:7e:58:18:8d:a7:0c:03:32:71:c9:10:03:17:9f:f7:
23:45:00:97:0d:fa:ad:c2:76:e0:53:5b:77:ce:94:6b:56:f3:
d2:cb:56:37:23:87:d6:ec:1d:d2:ea:e9:47:4d:6a:ec:f2:45:
57:e7:53:d8:3e:d9:d5:e0:ab:e7:c6:b9:e2:8f:9e:21:ed:72:
b1:4a:c4:52:0f:3e:b0:2a:01:7e:88:d9:fc:f4:98:78:1e:14:
c5:34:83:9b:74:7c:fa:7f:6c:d7:5a:27:c0:35:8f:5d:86:8d:
85:24:d5:fe:9b:b2:ed:d4:55:b3:bd:35:42:32:4e:fd:f0:ee:
f5:89:36:54:2a:93:6d:69:c2:45:86:b9:90:a6:c5:01:07:76:
70:8f:b2:ed:95:40:2b:19:68:18:6f:e7:81:fa:50:5c:13:e4:
c8:a7:4b:9e:57:7f:9e:1d:f9:11:ab:53:11:cd:3b:d4:e3:b6:
c8:7a:2f:97:ac:ca:22:48:48:c7:25:ee:fc:a3:eb:e6:1a:04:
3b:c0:22:51:ce:b2:0d:74:0b:bc:32:2e:3d:e1:58:59:7a:5d:
f9:01:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:55 2026 by rpki-client