Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8DTqNDzMy3FjPsz_JLLM6FGuA00.roa
File: 8DTqNDzMy3FjPsz_JLLM6FGuA00.roa (raw, json)
Hash identifier: n4MRDgUa7DZS50whbs08/c45+8oRNeRdCnttxSJwiaI=
Subject key identifier: F0:34:EA:34:3C:CC:CB:71:63:3E:CC:FF:24:B2:CC:E8:51:AE:03:4D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019C94BC7EEB5504FD45D800CCC49101D7B7
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8DTqNDzMy3FjPsz_JLLM6FGuA00.roa
Signing time: Wed 25 Feb 2026 12:18:27 +0000
ROA not before: Wed 25 Feb 2026 12:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 45.43.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:bc:7e:eb:55:04:fd:45:d8:00:cc:c4:91:01:d7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 25 12:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f034ea343ccccb71633eccff24b2cce851ae034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:4b:c7:29:bd:b9:0b:89:ef:19:9f:25:4a:
0f:cc:67:71:b7:38:77:c3:fa:e6:5f:eb:25:4f:4b:
85:12:42:73:5f:4f:0b:f4:cc:01:06:7a:02:06:b1:
a1:79:d4:0f:29:a2:c5:86:82:37:1d:d4:b1:57:9f:
87:66:02:e6:99:09:6d:b4:57:98:71:cd:86:fd:50:
cd:33:7f:37:e7:d0:64:1c:80:0d:40:2c:e9:e4:b2:
49:1f:bb:cf:ec:a6:72:c6:c8:c3:91:07:57:ec:e7:
83:a0:03:61:03:44:86:c6:92:a9:c1:2d:b9:36:8e:
f5:50:67:0d:9a:23:a6:fb:4e:7f:30:0a:e2:80:ed:
db:39:c2:b2:41:c6:d0:a8:e9:e0:8e:4f:dd:1a:3f:
1e:d8:a0:3c:87:89:d5:5e:05:d4:4c:40:1e:0c:4e:
3a:90:ef:75:54:2f:1b:87:e8:9e:5e:9f:bc:0a:61:
b9:40:ee:81:3b:98:4b:da:0e:87:90:f3:0a:ea:d4:
ff:4e:83:98:5c:47:06:29:dd:38:9b:f9:e1:d8:41:
16:a7:3f:33:b6:46:74:8d:2e:a8:02:4b:c0:55:25:
b0:14:5f:42:ac:62:48:46:7d:74:e6:83:68:d7:3d:
f1:d9:07:dc:33:80:5f:ff:e9:f5:93:78:2d:40:4e:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:EA:34:3C:CC:CB:71:63:3E:CC:FF:24:B2:CC:E8:51:AE:03:4D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8DTqNDzMy3FjPsz_JLLM6FGuA00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:31:5b:42:2e:7b:1a:bf:39:43:ce:03:a1:f7:98:77:39:4a:
93:ec:17:50:12:7b:3c:d8:74:bf:b7:04:1b:63:fd:36:78:e8:
e6:c8:84:2b:09:e6:e4:59:b6:5f:3c:6b:47:cc:d2:10:b0:f5:
6c:bf:cc:da:20:05:69:db:bb:71:78:f0:b8:88:d1:10:2d:1e:
13:38:b6:cd:1a:e0:9f:3e:1a:a8:bb:ef:57:3e:05:09:19:b7:
4e:d5:c5:11:86:da:22:5b:fc:f8:b7:22:50:ed:a2:79:1e:23:
d3:9d:9c:0b:55:61:c2:7a:e1:51:28:f1:8b:dc:4f:40:a2:c4:
c6:fb:54:c3:0e:8d:41:cb:33:20:81:32:00:39:5c:a0:a4:b7:
59:f2:7f:6d:69:63:17:f7:30:f8:c1:51:0a:80:72:b7:7a:5e:
03:ed:2d:cf:8c:a4:1f:11:e8:33:5b:66:ed:11:a8:71:29:16:
84:b2:11:5a:3f:ce:a6:61:49:de:6b:76:b4:93:62:0d:30:63:
c9:9b:e6:a0:d5:d1:f0:af:36:ca:1b:54:c0:9b:04:f6:c5:db:
27:50:55:3c:ec:c4:6c:24:39:da:74:56:83:ca:c9:30:13:20:
43:33:50:b4:ab:e6:b3:0e:69:03:7f:e1:2b:69:63:b3:98:a6:
fb:1d:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:50 2026 by rpki-client