Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa
File: cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa (raw, json)
Hash identifier: 0shjjAec7Cb9aPFwygq8U/0Lwh0QCfxBtCpb+tdZIdk=
Subject key identifier: 70:39:AD:4A:B3:E2:DD:77:DA:F4:64:37:FA:5E:AE:EF:E0:44:DB:8F
Certificate issuer: /CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Certificate serial: 019F23683425E8A66ABC64C0C6661D8D7107
Authority key identifier: 91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201569
IP address blocks: 85.136.82.0/24 maxlen: 24
2a0b:d800::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:25:e8:a6:6a:bc:64:c0:c6:66:1d:8d:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7039ad4ab3e2dd77daf46437fa5eaeefe044db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:53:e3:6c:40:c5:fa:37:13:dd:77:ed:cd:
ac:06:73:56:d3:72:79:4d:2c:53:5f:7f:67:bf:5f:
46:d9:6f:28:c5:e3:c4:bd:06:b2:9f:15:15:d4:a8:
01:69:1f:29:7f:e2:d6:38:39:c8:e1:16:08:ce:81:
76:6e:7b:05:7a:83:fd:27:e9:53:c0:8d:da:0e:de:
d0:c2:12:0b:b1:ff:77:11:53:d1:6d:11:bc:af:fa:
73:6a:a1:f7:1c:8f:5d:dc:27:10:d1:40:6e:e2:08:
1b:e4:67:23:f1:d7:2e:db:fb:79:ac:a0:04:23:5e:
f0:23:06:f8:35:a3:f1:b4:4c:39:74:36:43:6a:53:
3a:22:5e:b1:55:b2:3f:f5:0a:8f:d0:7a:00:e4:7e:
2e:c7:7b:39:28:01:c8:cd:a1:cb:f0:5a:d1:b0:ed:
47:8e:c8:2f:47:13:fe:79:14:a2:83:4c:1e:77:44:
9b:78:a4:cd:6a:91:18:6d:41:37:e0:d1:d4:21:2e:
f1:4e:e9:52:81:cf:f5:83:78:22:b1:d5:a0:92:9f:
9d:b7:2e:07:e9:ac:1f:b4:58:0d:b8:0c:be:57:42:
08:52:2b:55:fc:58:f3:95:5c:3b:15:e6:12:52:a4:
ef:c8:0c:f2:b1:e2:53:fe:2d:84:d7:e1:8c:8a:9c:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:AD:4A:B3:E2:DD:77:DA:F4:64:37:FA:5E:AE:EF:E0:44:DB:8F
X509v3 Authority Key Identifier:
keyid:91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.136.82.0/24
IPv6:
2a0b:d800::/32
Signature Algorithm: sha256WithRSAEncryption
07:49:e4:86:f5:e3:8c:52:8d:d4:0a:f3:94:2b:82:5c:19:99:
c0:9a:51:22:0b:25:91:a1:04:05:f2:1f:93:ba:de:53:a1:2c:
51:6c:0e:59:f3:f3:1a:f0:8f:90:d2:aa:25:fa:a5:25:8d:62:
b6:2f:8e:d9:fb:22:ac:9d:5e:3d:9d:36:c8:13:2b:bc:bb:9a:
11:2b:52:93:f4:aa:54:17:fc:42:90:b8:50:18:97:a5:71:a2:
e7:ef:54:78:e9:45:58:6b:29:37:e7:05:9e:65:41:55:5c:31:
92:c2:91:61:ee:e6:ad:21:b8:7e:72:13:67:a6:62:34:88:06:
8f:e7:62:f2:ff:a3:06:b3:f3:6d:e0:9a:49:cf:2a:28:80:73:
94:2c:12:98:84:a7:5b:5b:29:eb:cf:4b:b3:19:39:1e:df:f9:
de:3d:94:94:cb:95:20:23:2e:1f:80:97:be:a4:dc:91:25:a5:
8f:07:b6:9c:bc:44:28:9c:32:3c:64:21:d3:54:19:13:be:1a:
c8:91:f5:54:ec:18:e7:15:8c:64:0d:79:dd:e8:2d:4f:ed:20:
13:ec:b6:c6:d3:51:00:fb:d6:c3:cc:c3:fc:34:eb:5c:8f:32:
ef:ae:ee:dd:03:84:61:40:65:13:ac:1f:f9:b0:c4:ca:0f:b7:
0b:cf:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:31 2026 by rpki-client