Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dcfCRB8JED6Kd-8NSp6swnctp-0.roa
File: dcfCRB8JED6Kd-8NSp6swnctp-0.roa (raw, json)
Hash identifier: AEOOcMqBY+WxiqXF8YspNZKZh8znuhM4e4QZ/cjTox4=
Subject key identifier: 75:C7:C2:44:1F:09:10:3E:8A:77:EF:0D:4A:9E:AC:C2:77:2D:A7:ED
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A16E2B7CDDC8B617C8BD8A959079553774
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dcfCRB8JED6Kd-8NSp6swnctp-0.roa
Signing time: Sat 24 Oct 2026 13:48:26 +0000
ROA not before: Sat 24 Oct 2026 13:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393942
IP address blocks: 213.145.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:2b:7c:dd:c8:b6:17:c8:bd:8a:95:90:79:55:37:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 24 13:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75c7c2441f09103e8a77ef0d4a9eacc2772da7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:9c:20:2a:e4:a6:fd:28:9a:4a:e5:f0:a3:
fc:c0:dc:af:82:d4:d0:5a:54:a1:98:79:4f:64:83:
9e:5e:b8:cc:fe:ad:98:4f:b1:20:8b:34:c7:70:08:
69:33:84:7c:4a:f9:a5:b3:24:ed:d7:1e:61:4b:f6:
82:99:4b:32:02:4b:a7:5f:bd:e4:4e:de:53:f7:16:
96:d6:b7:7b:8a:ec:e7:c7:14:57:4c:c4:7b:03:e0:
33:e1:00:dd:36:f2:c3:d6:62:b0:75:9f:1e:56:9f:
05:81:0a:43:23:cd:62:34:da:68:11:ef:ec:df:6c:
5d:c5:cf:ef:4d:5b:76:24:6d:d4:3c:10:1d:e8:70:
d6:a8:41:cc:08:dc:e2:62:43:00:83:49:98:fa:f0:
f9:71:f0:b8:2e:8a:0b:19:88:41:ee:08:ff:26:50:
aa:42:2d:b3:49:79:03:44:10:bb:ea:32:44:1e:14:
31:fc:65:94:e2:56:a0:f6:bf:e1:cd:a4:42:a8:75:
df:7f:d2:94:e9:94:e7:87:fd:43:ef:64:70:c1:ab:
ab:cd:6a:af:2e:30:e6:0e:ce:75:b0:4c:64:17:45:
f9:ed:9c:12:73:f3:35:19:a4:6e:7e:1f:a6:58:7c:
3b:2f:5b:cf:65:6b:b0:b6:70:92:d2:13:45:a5:94:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C7:C2:44:1F:09:10:3E:8A:77:EF:0D:4A:9E:AC:C2:77:2D:A7:ED
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dcfCRB8JED6Kd-8NSp6swnctp-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8f:80:a0:9b:40:d0:81:9e:79:1d:f0:37:ec:3e:ca:ea:7a:
7f:82:24:d9:39:81:0e:4e:8d:f7:6a:6b:0d:68:24:10:0e:05:
f5:d4:33:8a:21:31:e5:ae:66:8a:61:16:15:2b:36:16:cf:a6:
7e:ac:a0:9a:75:49:dd:11:36:e1:10:d5:ef:e6:5d:8e:eb:f9:
03:e4:ab:aa:45:f8:f0:b0:3d:ac:92:05:bc:25:e2:a6:2d:91:
f8:c0:96:33:61:ed:6b:d5:c0:6d:e8:0c:4f:0f:42:7c:70:b8:
a0:c3:5a:a5:51:24:4b:29:9d:a3:bf:e3:c8:27:f8:d5:3b:99:
5d:cb:bf:59:56:f2:6a:72:67:89:14:92:9a:0c:84:f7:9a:39:
13:a0:1e:65:51:d2:4e:29:20:f0:39:b4:03:d8:01:76:0c:e6:
3d:b2:f3:0d:7d:9c:21:a1:02:ba:4a:a4:15:25:10:50:0d:88:
13:32:2d:bd:ef:bc:00:35:c9:59:4c:63:09:fd:20:08:79:82:
2a:82:a8:54:1a:c9:37:4e:34:db:09:9d:0c:d3:22:8d:2d:5a:
62:d9:d7:dd:c6:82:71:20:6e:e0:a5:34:0a:fd:32:f1:f2:a8:
6a:96:02:2b:05:bc:cd:eb:c6:05:04:eb:a8:3c:ac:ec:d5:73:
85:f6:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:21 2026 by rpki-client