Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/DkCaL9a1Sg50I9MaKEAqz29JDnk.roa
File: DkCaL9a1Sg50I9MaKEAqz29JDnk.roa (raw, json)
Hash identifier: qqlwSj00a4I3ubvQqPqYQdyEb8mMWzbShja2vID4TMA=
Subject key identifier: 0E:40:9A:2F:D6:B5:4A:0E:74:23:D3:1A:28:40:2A:CF:6F:49:0E:79
Certificate issuer: /CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Certificate serial: 019F84898A6C956355225E25642214BEF2B8
Authority key identifier: AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/DkCaL9a1Sg50I9MaKEAqz29JDnk.roa
Signing time: Tue 21 Jul 2026 11:57:14 +0000
ROA not before: Tue 21 Jul 2026 11:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209952
IP address blocks: 91.213.185.0/24 maxlen: 24
150.251.80.0/24 maxlen: 24
150.251.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:89:8a:6c:95:63:55:22:5e:25:64:22:14:be:f2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Validity
Not Before: Jul 21 11:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e409a2fd6b54a0e7423d31a28402acf6f490e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:a5:6e:16:8a:97:f2:ee:be:52:2c:68:98:
e9:70:90:32:3a:ae:45:13:8b:75:cf:80:82:30:1a:
ef:78:8b:df:ff:5f:62:33:aa:ab:7e:99:54:a0:62:
53:b6:de:71:c4:f3:ab:01:2d:25:c8:f2:c0:18:a0:
e9:80:ff:50:87:ca:37:79:59:18:67:43:4f:38:c7:
52:e3:be:b8:e8:7e:cf:0f:85:28:87:41:fb:84:32:
a8:36:b1:4f:59:d2:b8:79:d7:e9:b3:41:c3:48:73:
c0:43:e0:10:59:c7:85:83:0b:43:db:2d:59:d9:6e:
e6:72:64:e3:42:81:b8:67:f6:35:4a:65:9b:17:33:
39:d7:f4:b4:bc:97:65:b7:f9:b9:c2:d1:7b:0d:dc:
53:c2:33:ba:aa:fd:ff:ed:cd:81:fa:cf:f8:c4:f3:
16:85:26:4b:db:87:bb:c9:59:7b:08:00:61:6e:1d:
aa:b5:fa:8c:73:99:1d:c1:f5:b8:30:bf:9c:93:99:
2d:23:a5:c5:86:89:e8:0a:01:aa:55:9c:28:94:1a:
1b:26:5c:00:6a:38:c0:24:e7:5e:7d:7f:e4:b5:9b:
5c:25:9f:30:4e:be:f4:fb:59:c7:c6:d4:8c:0e:7e:
34:b6:19:bb:6a:d5:7d:57:d5:df:b8:47:cb:09:64:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:9A:2F:D6:B5:4A:0E:74:23:D3:1A:28:40:2A:CF:6F:49:0E:79
X509v3 Authority Key Identifier:
keyid:AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/DkCaL9a1Sg50I9MaKEAqz29JDnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.185.0/24
150.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
14:89:b6:d2:e2:81:38:60:b1:8d:0d:15:bf:16:e1:c1:e2:36:
2a:ef:c1:a7:74:a5:bb:23:05:5b:73:80:7f:df:06:22:eb:9f:
40:72:d9:8f:c1:cc:64:f0:f9:e1:18:4a:39:6f:f1:01:95:32:
12:fc:b7:3a:03:15:76:4c:60:72:3a:ed:9a:cd:20:75:eb:25:
9a:04:e8:df:c2:f0:2d:67:5d:85:93:1d:67:d9:db:91:a1:2f:
2c:6a:7c:6b:e0:bd:05:a8:23:22:40:e2:e9:6b:87:d3:d9:ed:
a1:35:28:82:43:8c:b9:bd:b0:02:83:24:ea:f8:34:46:c7:78:
14:60:a4:b9:12:a2:33:5f:90:e6:a6:36:62:88:17:02:b8:4f:
97:74:bf:d2:ce:3c:57:90:50:75:00:18:e7:b1:64:05:cf:a4:
13:be:71:f3:02:a3:90:19:27:3f:27:2e:70:68:9b:be:3f:09:
45:a6:00:73:14:b2:c8:be:10:41:d7:a0:e0:f2:0a:90:60:d5:
c8:20:31:a4:f9:54:7e:b2:00:df:bf:d1:95:14:5a:ef:07:cc:
7e:4c:95:64:7a:d2:98:fd:2a:14:c0:fc:8b:98:1c:c3:39:84:
50:9a:65:36:c3:52:3b:55:35:a7:cb:55:09:5c:52:d2:fa:3c:
c2:20:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:10 2026 by rpki-client