Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DpZorfrYGpP6oAQyP_DluGvpZEg.roa
File: DpZorfrYGpP6oAQyP_DluGvpZEg.roa (raw, json)
Hash identifier: Dc+E3BUTK5DDxSv+xqDZHs4OsPaudLDSXckvqXsDuJ0=
Subject key identifier: 0E:96:68:AD:FA:D8:1A:93:FA:A0:04:32:3F:F0:E5:B8:6B:E9:64:48
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0B38D2DE364527C84EC70AA1DD73A6358
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DpZorfrYGpP6oAQyP_DluGvpZEg.roa
Signing time: Fri 18 Sep 2026 08:06:09 +0000
ROA not before: Fri 18 Sep 2026 08:06:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197309
IP address blocks: 45.12.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:8d:2d:e3:64:52:7c:84:ec:70:aa:1d:d7:3a:63:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 18 08:06:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e9668adfad81a93faa004323ff0e5b86be96448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:b5:b1:4c:2d:81:ce:5d:ab:e5:aa:4c:56:
6a:d9:4e:c9:d6:73:c1:49:49:cd:79:20:c1:e7:dd:
84:1c:a8:8b:ab:86:d6:b5:fd:89:24:7a:03:01:90:
1a:8e:d4:f5:2b:82:a0:bb:4f:f6:6b:df:55:1f:c5:
d3:b4:ec:68:31:cd:a7:0a:cf:da:ea:ee:99:1b:fd:
5c:e6:9a:9a:22:f1:3f:9d:99:9b:b6:7f:01:ce:16:
bc:43:7c:03:5d:ef:65:7e:f5:70:1b:33:7c:a1:b8:
0c:fe:be:b2:08:cd:03:ef:80:ef:5e:96:d4:24:10:
92:35:14:04:c7:a9:74:06:c3:44:a0:27:db:07:c0:
1a:5b:15:38:b2:f2:64:8c:fd:19:64:0d:0e:b0:ff:
8c:a4:c3:77:02:04:ea:c3:b3:48:04:2d:7b:dd:92:
af:2e:9e:c8:7f:f4:03:57:68:3c:3d:6f:00:69:5c:
f1:86:5d:0a:07:d0:db:b0:26:98:ae:6c:76:15:1f:
ac:88:ca:ec:51:26:3e:7d:4f:f2:a4:38:55:38:25:
09:1c:ee:d6:da:33:01:4c:9b:46:a2:e6:8c:55:e9:
a1:19:bb:e1:e2:20:fa:14:7b:50:bc:d4:6b:fb:ae:
10:77:b2:fa:9e:4a:cb:ee:81:bc:55:ed:19:c8:c7:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:68:AD:FA:D8:1A:93:FA:A0:04:32:3F:F0:E5:B8:6B:E9:64:48
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DpZorfrYGpP6oAQyP_DluGvpZEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.71.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f8:e7:d2:96:33:36:79:17:01:ea:6d:36:f5:e0:87:09:1d:
25:88:f8:4e:f4:d7:02:18:ed:fd:4c:e8:5e:78:ca:e9:3c:c9:
5c:66:79:93:78:7b:f7:a7:1a:ee:42:a8:fb:21:91:62:46:88:
e8:70:9c:69:b4:ab:2c:e7:b2:76:3a:f6:5d:c2:cd:2f:db:5b:
8f:0f:05:92:09:f2:cb:52:28:b7:58:7f:2d:d7:22:ea:98:d0:
77:bf:c3:49:36:cb:78:fd:a1:6d:10:48:e9:40:4e:4d:7c:08:
68:1f:39:91:25:58:62:5e:09:82:aa:ea:b2:73:b8:3d:83:6c:
b2:73:1a:ac:7d:d1:ad:60:9c:f6:20:81:35:d4:43:6b:44:5c:
57:e5:61:41:be:e7:df:dc:a5:fe:6b:03:03:e4:fb:99:67:fe:
b9:60:65:97:50:de:06:e9:d4:95:5c:a6:2e:af:e8:50:a9:5b:
15:42:df:55:c3:68:05:54:a8:0c:14:96:04:e5:8f:5d:05:9b:
f0:a6:53:77:6f:db:24:a2:b5:fc:3f:cf:a6:da:f0:29:5f:a9:
1b:09:d5:a0:be:4c:ed:28:11:d6:16:e5:f9:9b:09:33:3a:15:
81:5b:72:2f:79:e1:5e:4b:b8:59:52:c6:a6:73:b0:e0:14:d1:
ea:0c:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:59:27 2026 by rpki-client