Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/DaMYvuVk4VxbeiY5886TRjR80-c.roa
File: DaMYvuVk4VxbeiY5886TRjR80-c.roa (raw, json)
Hash identifier: D4FeXaKBovPda7PA/y7sGSV1DU6UbX4cAmo6Backls8=
Subject key identifier: 0D:A3:18:BE:E5:64:E1:5C:5B:7A:26:39:F3:CE:93:46:34:7C:D3:E7
Certificate issuer: /CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Certificate serial: 019F23690004F07AE6E3BC778C7154CFF4FD
Authority key identifier: F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/DaMYvuVk4VxbeiY5886TRjR80-c.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201709
IP address blocks: 185.41.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:04:f0:7a:e6:e3:bc:77:8c:71:54:cf:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0da318bee564e15c5b7a2639f3ce9346347cd3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:97:1a:f8:6e:0b:73:03:ab:e9:ec:10:1f:
8d:1d:10:ba:c4:48:93:7c:7f:45:46:1f:a4:dc:8c:
70:34:97:3f:32:3f:9f:47:a1:65:3e:66:16:fa:4c:
a8:6b:01:ac:7d:11:4f:a2:2b:44:28:63:a3:82:a8:
89:d5:85:36:b4:0e:d4:0f:50:05:b7:38:ac:8f:d6:
65:ed:a8:35:cc:a9:97:24:01:a3:f6:be:f8:a1:81:
d5:49:96:6a:42:97:05:76:83:92:de:28:f3:9b:e0:
b8:76:dd:d8:e2:de:89:6e:11:0b:06:b6:76:d4:7b:
8c:6c:53:03:1f:5e:c0:48:ca:35:ff:57:4f:71:4e:
46:9b:11:b1:45:27:fa:22:d9:68:b3:ec:73:f7:98:
01:9d:3d:a3:ef:18:23:58:16:f8:74:5b:5f:29:60:
85:1c:d7:8c:00:1d:30:37:aa:dd:4e:e3:7b:98:96:
32:08:cd:89:d3:a9:f6:a4:7d:58:be:d3:22:6f:67:
84:96:f4:9b:01:5a:9b:65:84:0f:5a:16:c6:14:7f:
d2:48:c4:65:47:17:48:6c:25:c9:7d:2a:1e:81:e7:
7d:24:18:09:1b:03:3f:40:5b:c4:dd:b8:e4:4e:de:
74:e6:b2:f9:55:c9:9c:4a:38:be:0c:bf:c4:1b:d2:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A3:18:BE:E5:64:E1:5C:5B:7A:26:39:F3:CE:93:46:34:7C:D3:E7
X509v3 Authority Key Identifier:
keyid:F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/DaMYvuVk4VxbeiY5886TRjR80-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:fe:da:21:84:58:a9:33:30:ce:b0:f0:d0:5b:e2:97:34:cf:
c8:55:e0:2d:20:5c:e3:fd:8d:71:a1:0b:7a:0c:f1:03:a7:dc:
cf:80:df:3e:e2:fb:41:89:a7:8c:cd:cd:23:97:40:47:83:b4:
a4:71:8d:e5:be:ad:0a:87:2d:bd:86:b1:4f:8c:7c:13:ab:10:
1e:76:76:3c:18:17:f1:50:89:8f:ad:53:25:68:d3:28:7e:8a:
fc:ae:83:21:6d:0a:d3:37:d2:fb:4b:40:57:9a:69:23:4d:33:
8b:29:0e:82:d5:5d:e5:e4:e2:d1:ac:d2:62:f5:da:f4:51:6e:
ad:d7:0b:6d:ac:77:04:89:56:94:95:68:df:58:9f:70:76:96:
06:28:cd:15:b8:c7:9c:0f:00:6f:47:cd:f0:86:fe:6f:39:52:
96:f0:6a:aa:06:23:2d:4a:de:f3:ca:93:ee:41:5b:f9:5c:d6:
6e:39:b2:66:49:80:c0:2c:dc:5a:4f:a0:0f:ff:59:82:a2:74:
d0:37:3e:61:d2:c8:1e:5d:40:97:a8:1b:fd:60:48:eb:ac:ed:
69:12:9c:82:8b:67:5a:1f:65:5b:05:b0:87:01:0f:18:86:12:
d3:1e:32:51:44:52:cf:63:d6:9e:fe:35:80:bb:ba:36:75:da:
05:72:b0:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQAE8Hrm47x3jHFUz/T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZGQ0Yzc3MTdjZjY5Y2IyNzlhOWJlMzg3MGNlMWQ1NTg4
OGU4MTIwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGEzMThiZWU1NjRlMTVjNWI3YTI2MzlmM2NlOTM0NjM0N2NkM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bmXGvhuC3MDq+nsEB+NHRC6xEiT
fH9FRh+k3IxwNJc/Mj+fR6FlPmYW+kyoawGsfRFPoitEKGOjgqiJ1YU2tA7UD1AF
tzisj9Zl7ag1zKmXJAGj9r74oYHVSZZqQpcFdoOS3ijzm+C4dt3Y4t6JbhELBrZ2
1HuMbFMDH17ASMo1/1dPcU5GmxGxRSf6Itlos+xz95gBnT2j7xgjWBb4dFtfKWCF
HNeMAB0wN6rdTuN7mJYyCM2J06n2pH1YvtMib2eElvSbAVqbZYQPWhbGFH/SSMRl
RxdIbCXJfSoeged9JBgJGwM/QFvE3bjkTt505rL5VcmcSji+DL/EG9J/RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2jGL7lZOFcW3omOfPOk0Y0fNPnMB8GA1UdIwQY
MBaAFPPdTHcXz2nLJ5qb44cM4dVYiOgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODkxTWR4ZlBhY3NubXB2amh3emgxVmlJNkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMt
YzIzOGNlNDgxN2RiLzEvRGFNWXZ1Vms0VnhiZWlZNTg4NlRSalI4MC1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMtYzIzOGNlNDgxN2Ri
LzEvODkxTWR4ZlBhY3NubXB2amh3emgxVmlJNkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSloMA0G
CSqGSIb3DQEBCwUAA4IBAQA+/tohhFipMzDOsPDQW+KXNM/IVeAtIFzj/Y1xoQt6
DPEDp9zPgN8+4vtBiaeMzc0jl0BHg7SkcY3lvq0Khy29hrFPjHwTqxAednY8GBfx
UImPrVMlaNMofor8roMhbQrTN9L7S0BXmmkjTTOLKQ6C1V3l5OLRrNJi9dr0UW6t
1wttrHcEiVaUlWjfWJ9wdpYGKM0VuMecDwBvR83whv5vOVKW8GqqBiMtSt7zypPu
QVv5XNZuObJmSYDALNxaT6AP/1mConTQNz5h0sgeXUCXqBv9YEjrrO1pEpyCi2da
H2VbBbCHAQ8YhhLTHjJRRFLPY9ae/jWAu7o2ddoFcrBk
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:10 2026 by rpki-client