Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DPLiQuQtHbh_DoiPRqszXTLOaOE.roa
File: DPLiQuQtHbh_DoiPRqszXTLOaOE.roa (raw, json)
Hash identifier: HyWpYFhglJtICH8H6GEYF8khPx9xfmpCortpC5Pk+M8=
Subject key identifier: 0C:F2:E2:42:E4:2D:1D:B8:7F:0E:88:8F:46:AB:33:5D:32:CE:68:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A177880644FAD49C403968F8733532DC29
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DPLiQuQtHbh_DoiPRqszXTLOaOE.roa
Signing time: Mon 26 Oct 2026 09:26:05 +0000
ROA not before: Mon 26 Oct 2026 09:26:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 9.247.22.0/24 maxlen: 24
9.247.51.0/24 maxlen: 24
9.247.63.0/24 maxlen: 24
9.247.65.0/24 maxlen: 24
9.247.67.0/24 maxlen: 24
9.247.79.0/24 maxlen: 24
9.247.82.0/24 maxlen: 24
9.247.83.0/24 maxlen: 24
9.247.84.0/24 maxlen: 24
9.247.89.0/24 maxlen: 24
9.247.91.0/24 maxlen: 24
9.247.96.0/24 maxlen: 24
9.247.102.0/24 maxlen: 24
9.247.103.0/24 maxlen: 24
9.247.104.0/24 maxlen: 24
9.247.110.0/24 maxlen: 24
9.247.111.0/24 maxlen: 24
9.247.118.0/24 maxlen: 24
9.247.119.0/24 maxlen: 24
9.247.121.0/24 maxlen: 24
9.247.122.0/24 maxlen: 24
9.247.124.0/24 maxlen: 24
9.247.126.0/24 maxlen: 24
9.247.132.0/24 maxlen: 24
9.247.133.0/24 maxlen: 24
9.247.134.0/24 maxlen: 24
9.247.138.0/24 maxlen: 24
9.247.141.0/24 maxlen: 24
9.247.145.0/24 maxlen: 24
9.247.148.0/24 maxlen: 24
9.247.149.0/24 maxlen: 24
9.247.150.0/24 maxlen: 24
9.247.168.0/24 maxlen: 24
9.247.171.0/24 maxlen: 24
9.247.172.0/24 maxlen: 24
9.247.175.0/24 maxlen: 24
9.247.177.0/24 maxlen: 24
9.247.180.0/24 maxlen: 24
9.247.181.0/24 maxlen: 24
9.247.183.0/24 maxlen: 24
9.247.184.0/24 maxlen: 24
9.247.185.0/24 maxlen: 24
9.247.187.0/24 maxlen: 24
9.247.188.0/24 maxlen: 24
9.247.191.0/24 maxlen: 24
9.247.193.0/24 maxlen: 24
9.247.196.0/24 maxlen: 24
9.247.202.0/24 maxlen: 24
9.247.206.0/24 maxlen: 24
9.247.212.0/24 maxlen: 24
9.247.218.0/24 maxlen: 24
9.247.222.0/24 maxlen: 24
9.247.223.0/24 maxlen: 24
9.247.224.0/24 maxlen: 24
9.247.227.0/24 maxlen: 24
9.247.229.0/24 maxlen: 24
9.247.230.0/24 maxlen: 24
9.247.231.0/24 maxlen: 24
9.247.233.0/24 maxlen: 24
9.247.234.0/24 maxlen: 24
9.247.235.0/24 maxlen: 24
9.247.237.0/24 maxlen: 24
9.247.238.0/24 maxlen: 24
9.247.240.0/24 maxlen: 24
9.247.243.0/24 maxlen: 24
9.247.244.0/24 maxlen: 24
9.247.246.0/24 maxlen: 24
9.247.249.0/24 maxlen: 24
9.247.250.0/24 maxlen: 24
9.247.251.0/24 maxlen: 24
9.247.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:88:06:44:fa:d4:9c:40:39:68:f8:73:35:32:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 26 09:26:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cf2e242e42d1db87f0e888f46ab335d32ce68e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:ed:18:94:52:8a:de:73:c4:f9:10:cb:5d:
d3:50:19:a7:74:ec:b9:2f:8f:d4:13:e9:be:5a:45:
06:34:cd:39:61:03:40:65:20:87:2d:02:c2:fb:35:
98:1b:5f:0c:b8:33:91:81:3f:b7:27:dc:8d:9a:04:
9f:18:58:1b:b3:25:2b:4f:8b:b8:22:b1:7a:e3:db:
f8:6d:d7:a5:d2:20:06:39:5e:b5:79:e5:3f:29:44:
a9:60:2d:07:16:2f:b1:21:fa:12:cc:99:4e:7f:57:
c6:67:9b:31:f3:93:c8:30:b0:f0:c6:fd:7e:97:93:
e3:4d:82:d7:c9:c8:a6:9a:a3:4c:59:d1:60:aa:6a:
88:da:68:83:e1:55:9e:54:83:a0:0b:4d:0e:b7:d1:
f9:34:7f:a6:9a:f6:05:91:e2:78:88:73:c6:00:90:
e5:c7:1c:cf:3d:1e:fa:f7:a4:b5:f5:fe:14:c4:d7:
da:cd:5b:c7:35:d3:71:eb:8d:dc:c4:48:b2:bb:04:
4d:c4:14:7c:22:ad:19:d9:5f:ee:fe:1e:6f:95:d1:
98:10:97:e0:b3:52:c8:5b:5f:cc:35:6d:50:25:8e:
dc:a0:25:7c:ee:a1:a8:54:05:ac:56:a7:3a:7a:ba:
77:5e:29:b7:58:a0:55:88:c8:e8:ed:b8:98:e1:91:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:E2:42:E4:2D:1D:B8:7F:0E:88:8F:46:AB:33:5D:32:CE:68:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DPLiQuQtHbh_DoiPRqszXTLOaOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.22.0/24
9.247.51.0/24
9.247.63.0/24
9.247.65.0/24
9.247.67.0/24
9.247.79.0/24
9.247.82.0-9.247.84.255
9.247.89.0/24
9.247.91.0/24
9.247.96.0/24
9.247.102.0-9.247.104.255
9.247.110.0/23
9.247.118.0/23
9.247.121.0-9.247.122.255
9.247.124.0/24
9.247.126.0/24
9.247.132.0-9.247.134.255
9.247.138.0/24
9.247.141.0/24
9.247.145.0/24
9.247.148.0-9.247.150.255
9.247.168.0/24
9.247.171.0-9.247.172.255
9.247.175.0/24
9.247.177.0/24
9.247.180.0/23
9.247.183.0-9.247.185.255
9.247.187.0-9.247.188.255
9.247.191.0/24
9.247.193.0/24
9.247.196.0/24
9.247.202.0/24
9.247.206.0/24
9.247.212.0/24
9.247.218.0/24
9.247.222.0-9.247.224.255
9.247.227.0/24
9.247.229.0-9.247.231.255
9.247.233.0-9.247.235.255
9.247.237.0-9.247.238.255
9.247.240.0/24
9.247.243.0-9.247.244.255
9.247.246.0/24
9.247.249.0-9.247.252.255
Signature Algorithm: sha256WithRSAEncryption
57:e1:8b:75:88:9f:48:7d:c0:eb:6e:e7:9f:93:f0:31:81:36:
f6:e3:af:5c:5d:bc:a8:45:86:88:99:8a:7c:f0:de:c3:5e:63:
dd:c8:a1:1d:d5:18:4d:67:b6:92:f9:0a:f7:04:57:0a:53:5d:
e7:4a:af:f0:aa:a0:ef:2c:3e:68:58:44:57:75:d1:06:82:3d:
a7:e5:e9:84:95:74:c0:bb:48:9c:ab:74:83:06:d4:77:aa:cd:
91:49:d1:7a:d9:4b:b1:ed:89:d8:b6:c0:87:07:3e:b4:69:5a:
f4:ee:fd:f3:4e:d8:c3:d8:35:f8:3e:26:8d:74:eb:e2:00:0f:
9d:80:8e:fc:69:5f:dc:30:d1:15:97:aa:47:a8:64:91:7c:82:
00:74:dd:53:43:af:69:05:3f:64:21:f8:d3:5a:9f:51:b8:70:
c1:41:49:5e:1b:77:d7:96:01:0c:17:a0:a2:3d:97:db:1b:f9:
bd:cb:46:3b:da:a2:d0:75:a1:5f:1d:5e:99:8b:8c:cb:0b:66:
99:d7:36:97:69:bc:5e:7e:68:99:66:07:d0:36:1b:fa:9f:ac:
37:26:b7:f2:9a:60:56:e1:e3:d2:79:3a:78:e8:36:29:ea:17:
f1:7b:bd:cf:a4:7e:de:d3:c6:f4:80:8a:0c:a2:49:29:40:10:
21:b1:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:06 2026 by rpki-client