Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/dT0jM_sMFfjOGLTY2WtAxjqm9LQ.roa
File: dT0jM_sMFfjOGLTY2WtAxjqm9LQ.roa (raw, json)
Hash identifier: DyW/hyjh1BJFkTRjbEkpEYcuJTV4LPGigS20lQaYWE4=
Subject key identifier: 75:3D:23:33:FB:0C:15:F8:CE:18:B4:D8:D9:6B:40:C6:3A:A6:F4:B4
Certificate issuer: /CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Certificate serial: 01A0A1637E1E195B61370DFE7943504203BD
Authority key identifier: 0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/dT0jM_sMFfjOGLTY2WtAxjqm9LQ.roa
Signing time: Mon 14 Sep 2026 19:27:27 +0000
ROA not before: Mon 14 Sep 2026 19:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201665
IP address blocks: 185.69.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:63:7e:1e:19:5b:61:37:0d:fe:79:43:50:42:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Validity
Not Before: Sep 14 19:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=753d2333fb0c15f8ce18b4d8d96b40c63aa6f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:d4:30:17:9d:f6:28:1d:fd:4f:d1:9d:23:
02:c7:e2:d4:d6:80:84:58:be:df:61:16:c0:e8:1a:
a1:f5:5d:bd:9f:82:ed:5d:42:84:c1:77:7d:1f:7a:
46:28:53:ca:79:bd:58:b0:a2:4a:f0:71:d4:ea:4b:
93:b3:13:ee:b3:c7:fd:5a:21:0b:d2:c0:fd:ce:fb:
f3:67:9d:45:8b:28:95:3a:e3:99:2d:41:e2:7f:0f:
7f:e0:84:ed:9c:13:ec:d2:31:6a:b7:3c:8e:bc:8e:
9d:75:fe:4d:dd:6a:f4:50:36:6d:2a:e7:87:a3:86:
a0:52:43:f2:ee:f2:d7:b0:0c:02:a5:b3:95:cb:f5:
ba:75:6c:ea:0e:a9:21:4c:77:78:8e:ad:6a:ae:b8:
0c:20:18:7b:78:70:4e:59:59:50:fe:9e:f2:2e:89:
3d:a4:54:19:76:41:b8:97:72:4c:1f:c2:4d:f9:4a:
1f:3a:16:39:25:60:cf:de:cc:60:95:25:a0:e8:8d:
95:f7:67:d1:aa:45:a1:10:1f:1b:e8:9a:e3:af:02:
7a:46:3a:db:2b:4c:0d:01:cd:0c:07:d4:76:a6:a7:
21:df:b8:61:98:18:fd:da:87:0f:5c:7f:ec:62:3a:
67:ba:7f:54:47:d9:38:d4:ac:32:18:ef:1b:64:c7:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:23:33:FB:0C:15:F8:CE:18:B4:D8:D9:6B:40:C6:3A:A6:F4:B4
X509v3 Authority Key Identifier:
keyid:0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/dT0jM_sMFfjOGLTY2WtAxjqm9LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.156.0/22
Signature Algorithm: sha256WithRSAEncryption
72:12:31:e6:e0:8a:3a:cd:6b:55:9c:4f:9e:c5:61:dd:49:24:
24:70:4d:fe:e1:aa:b5:33:88:77:e0:99:14:0b:35:a6:49:45:
d8:d4:96:66:1c:50:4d:c8:19:b0:73:94:2c:d7:56:41:8a:b3:
0a:29:61:e0:d1:61:3d:68:bb:e1:57:d0:72:2e:2c:f0:f2:db:
c6:97:3f:33:e0:36:6f:08:8f:64:35:3d:45:ed:b8:dc:46:39:
6a:33:5d:f3:77:72:23:33:73:2a:ef:eb:b9:39:94:f8:8c:48:
75:17:03:c6:bd:a7:21:60:4e:20:7c:ce:0a:ae:e2:1e:cb:d4:
ef:81:db:3d:15:84:0e:3c:0d:23:be:00:b1:bd:a9:a8:61:3f:
7f:3c:37:e8:59:84:1c:24:bc:51:20:88:20:48:6f:85:b7:8b:
7c:46:cc:1f:d8:8b:19:6a:07:c3:5e:19:ee:5a:4a:e3:70:62:
55:ea:e3:fd:d3:6a:bc:bb:66:32:60:62:3f:52:d9:d5:a4:f2:
af:40:f4:f4:05:d8:ec:7b:59:1f:8a:8e:8d:5f:e1:49:f1:8a:
e7:32:f6:86:2d:28:cd:9b:bb:d0:de:db:a3:e4:8f:67:e6:20:
fc:a2:55:b6:e4:c9:8a:22:da:ae:34:50:e3:7b:09:e2:92:f3:
62:6e:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:55:50 2026 by rpki-client