Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa
File: DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa (raw, json)
Hash identifier: CPSNBE1JDqZWrzRtLM0uStnUMuYrz40a9MwrDBSVFlM=
Subject key identifier: 0D:0B:B2:A4:7F:85:48:9E:2F:41:C7:F4:A3:45:94:37:ED:0C:73:E7
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019D1F2CBE3C47AD5FF938E41B658C9B0BC5
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa
Signing time: Tue 24 Mar 2026 09:28:39 +0000
ROA not before: Tue 24 Mar 2026 09:28:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 193.36.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:2c:be:3c:47:ad:5f:f9:38:e4:1b:65:8c:9b:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Mar 24 09:28:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d0bb2a47f85489e2f41c7f4a3459437ed0c73e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:b3:c5:32:1c:d3:f9:df:0b:7c:66:ce:bd:
62:fc:7b:a8:c1:cd:91:f8:ed:52:71:0a:b3:ce:22:
96:fa:47:2e:fa:d1:7c:e4:3a:c9:f0:af:ca:57:eb:
48:47:d7:e5:00:86:21:5e:7a:17:fc:af:17:01:91:
b1:50:0f:9b:10:90:79:52:76:54:59:f6:00:d7:57:
c0:db:a0:f9:ab:ad:60:ff:ef:94:28:d2:e4:60:16:
a6:bc:7e:84:d1:d7:55:7b:cd:66:d0:0f:50:41:b1:
49:e2:b6:e2:72:73:43:2f:5c:9e:a4:a1:86:60:7b:
7a:af:5a:79:7e:1f:2d:d0:b6:d2:bb:4f:94:41:46:
d5:ae:23:b8:a5:f8:19:86:ae:75:98:f7:9e:5d:c2:
5d:01:fc:67:c5:bd:83:28:15:40:4c:fb:1a:63:29:
b8:e9:f9:cf:ce:7a:82:b6:6e:ca:e1:4c:b3:9c:a6:
cd:ea:f3:88:4b:04:35:24:bb:91:e7:ba:5b:a6:f1:
20:97:91:fc:c4:de:09:5b:b0:6b:a6:aa:9a:8c:e8:
74:78:49:97:9c:3f:04:1d:44:00:96:51:b8:e1:d4:
ba:33:82:1e:16:b5:f4:ea:af:ae:6a:7a:92:02:94:
df:e4:5b:ad:eb:2f:01:4e:91:f3:f0:7f:68:8b:39:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:B2:A4:7F:85:48:9E:2F:41:C7:F4:A3:45:94:37:ED:0C:73:E7
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.227.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f2:4f:4e:d6:22:af:fc:7f:c5:ff:fd:70:0b:32:a6:f2:65:
9f:c8:43:ed:05:ec:67:7a:e0:10:0d:89:6f:05:b3:15:7a:b4:
d0:68:1c:4f:2c:44:83:05:a0:f9:6b:76:bb:93:67:72:52:42:
3c:f5:47:dc:3e:dd:da:1f:76:80:32:6b:d1:63:eb:37:82:31:
04:54:4e:44:0c:cc:4e:f4:f3:b7:a0:fe:88:7d:35:ea:f7:48:
2f:99:3e:bd:08:c9:6d:42:40:6c:3b:0f:80:d2:45:ef:63:d5:
35:aa:aa:d5:57:5d:5e:bb:5b:57:04:84:31:8d:0e:e2:89:a9:
2c:f0:3d:2b:b0:5d:d2:27:02:77:09:ca:9a:b9:43:e1:66:49:
72:64:1c:d4:45:8b:e9:c0:1f:66:ce:4c:f1:7d:10:dc:89:70:
f3:69:2c:cb:22:ff:5f:9f:b5:75:cb:22:04:74:91:20:cd:a5:
d9:03:c3:2c:17:ad:1d:7e:32:98:6d:a8:b1:17:06:7b:44:35:
95:ae:8c:57:dd:fd:fb:12:75:b8:ac:85:0d:cf:15:45:20:96:
3c:67:f6:18:0b:1c:86:9d:b8:87:d0:bf:b6:de:8a:43:d4:44:
eb:c9:6d:50:71:67:90:31:c6:b6:12:ea:5f:e7:e1:07:b4:24:
0f:ba:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:17 2026 by rpki-client