Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/D0hPX_cQdsaP42kw__DQw0Fz_yc.roa
File: D0hPX_cQdsaP42kw__DQw0Fz_yc.roa (raw, json)
Hash identifier: LtUEAUpBvXQgL6TVsY4N5ahD34Iyyko8ridz4ffMENc=
Subject key identifier: 0F:48:4F:5F:F7:10:76:C6:8F:E3:69:30:FF:F0:D0:C3:41:73:FF:27
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 019E02A03E52086D65592C1044DD0C92EF5B
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/D0hPX_cQdsaP42kw__DQw0Fz_yc.roa
Signing time: Thu 07 May 2026 13:28:36 +0000
ROA not before: Thu 07 May 2026 13:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31409
IP address blocks: 195.137.246.0/23 maxlen: 23
195.137.246.0/24 maxlen: 24
195.137.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:a0:3e:52:08:6d:65:59:2c:10:44:dd:0c:92:ef:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: May 7 13:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f484f5ff71076c68fe36930fff0d0c34173ff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:5c:22:fa:4e:5f:91:1b:f2:a4:30:e6:0d:
2b:bb:d3:f1:aa:11:34:d9:b9:38:c4:39:b4:34:2f:
b4:60:43:ce:20:ec:40:52:6c:38:8f:9b:a1:dd:8d:
c2:6a:2a:7e:3b:10:6c:e7:b4:0e:f6:eb:1f:fb:ab:
38:03:32:a3:82:79:90:34:71:9e:25:85:87:f2:c5:
65:b4:af:d7:50:76:ef:d8:d0:b4:0a:a8:6f:e5:6c:
ae:9a:07:89:92:b6:73:44:2f:fc:ec:05:2e:56:06:
57:f9:df:59:77:41:b2:b9:4e:9a:b8:29:e2:d2:9f:
bb:74:b2:87:c8:e3:0b:7d:6a:43:74:4b:8b:82:fa:
92:c7:ef:73:a4:a5:35:5d:2c:af:6d:14:83:c3:e9:
89:e0:5a:c0:07:de:d5:d1:0a:50:60:ee:f3:09:e8:
fc:98:7b:77:ba:50:87:38:2b:f4:ed:1c:46:58:1b:
ca:3f:2e:af:76:e9:db:e0:37:d8:43:45:9f:2e:94:
de:ad:df:7f:0b:de:a5:cf:3b:1e:bc:39:04:45:11:
4d:32:a7:7b:69:14:47:52:72:1e:49:d8:28:16:fa:
65:b8:b9:15:35:9d:47:f5:69:1a:91:88:56:b6:d5:
21:ee:68:80:36:b6:05:8a:18:e5:28:da:28:5b:c2:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:4F:5F:F7:10:76:C6:8F:E3:69:30:FF:F0:D0:C3:41:73:FF:27
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/D0hPX_cQdsaP42kw__DQw0Fz_yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
06:b8:0b:31:0e:b1:c4:0d:5b:85:63:b6:46:f0:e4:44:4e:8c:
74:16:2c:08:0c:17:b7:bd:d1:1f:51:7e:78:16:cc:a9:29:ce:
dc:5f:0e:e9:8f:b6:23:9e:8a:12:23:de:ab:51:9f:ff:b2:51:
55:7f:45:4a:4a:2d:52:9b:67:38:af:ee:d2:2c:b8:51:42:e7:
fa:6f:3d:0a:80:47:2a:21:f3:ef:d5:4a:b0:17:25:de:25:c0:
3c:1f:a4:4e:d2:78:6e:70:4f:cc:b2:93:54:d9:4c:4e:1d:80:
08:0c:f4:52:a0:c9:a4:66:0a:a7:cf:ae:fa:d7:d5:41:eb:d1:
79:cc:2b:3c:1e:f2:86:e1:05:b0:20:ab:21:19:28:2a:b7:8a:
9f:d4:7d:f7:26:40:28:21:89:11:ba:d8:a9:8f:06:28:cd:57:
a5:01:b0:f7:67:be:07:a9:22:d5:7a:75:62:c1:37:db:78:99:
b3:58:40:15:7e:14:6a:43:5a:3e:ca:da:dd:f1:b4:51:0c:c6:
0d:fc:96:6f:07:76:9c:82:96:e4:eb:e0:52:8d:d2:38:cb:29:
64:c6:fd:65:0f:fa:02:b0:e4:14:93:47:a2:56:ba:c1:40:d6:
14:3a:2b:ef:20:37:cd:e9:d3:2c:e0:c9:89:a4:ff:8a:d4:7b:
d5:45:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:18 2026 by rpki-client