Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/fDlMiJWovKMKVpHZJTRO-DdZJck.roa
File: fDlMiJWovKMKVpHZJTRO-DdZJck.roa (raw, json)
Hash identifier: nx8Sasq9pTIfrgpkAq8eNCRiaDt4MFifdt2A/0muNgE=
Subject key identifier: 7C:39:4C:88:95:A8:BC:A3:0A:56:91:D9:25:34:4E:F8:37:59:25:C9
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019FAD3C3F90ACFC8E0868E39C52F113E324
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/fDlMiJWovKMKVpHZJTRO-DdZJck.roa
Signing time: Wed 29 Jul 2026 09:37:14 +0000
ROA not before: Wed 29 Jul 2026 09:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43815
IP address blocks: 46.151.179.0/24 maxlen: 24
185.121.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:3c:3f:90:ac:fc:8e:08:68:e3:9c:52:f1:13:e3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jul 29 09:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c394c8895a8bca30a5691d925344ef8375925c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:32:c3:18:aa:cb:75:64:e0:9d:92:07:eb:
00:fd:3b:32:a2:51:d0:47:64:41:7e:ec:eb:74:db:
bc:f5:85:66:b7:85:73:cd:00:45:2e:1d:93:9f:42:
a0:a4:b4:4d:00:97:56:5c:e2:86:13:73:3f:c6:d3:
44:0c:23:cd:35:1d:13:bf:97:28:38:d9:b7:d6:11:
f8:05:8a:a2:d9:d5:d2:7d:e7:d3:b3:71:dd:3c:68:
c5:05:2d:73:1d:32:e2:87:1b:fe:35:f0:23:5a:d0:
e4:49:c6:08:49:7d:59:07:a5:b4:31:7c:33:8c:1a:
25:ab:c1:04:f6:aa:52:98:38:a2:08:83:71:f5:6b:
eb:2f:df:3b:6b:c3:64:29:e0:86:71:c9:86:47:75:
bf:c6:84:f7:30:a7:a4:91:83:aa:c6:a4:4a:e9:2c:
05:06:77:c0:57:d7:60:b2:00:a9:5b:6d:6b:8e:33:
63:5b:c2:f7:fa:76:98:a6:05:64:e4:32:3e:c3:8a:
d0:dc:df:96:4d:c2:fc:db:7d:62:e5:3b:14:42:2d:
68:61:55:83:5f:c2:20:cb:5c:b7:df:97:ef:e4:6d:
c6:f1:f8:c8:be:21:bc:61:bf:da:88:7a:02:6b:df:
10:7c:d5:72:27:f5:b3:f6:a6:83:d3:82:cf:44:d4:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:4C:88:95:A8:BC:A3:0A:56:91:D9:25:34:4E:F8:37:59:25:C9
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/fDlMiJWovKMKVpHZJTRO-DdZJck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.179.0/24
185.121.108.0/24
Signature Algorithm: sha256WithRSAEncryption
10:68:66:53:88:47:62:00:ed:f5:ce:86:77:ce:8a:a6:3c:3b:
10:ce:8d:54:52:98:09:cc:ef:0c:c2:5f:dc:41:5c:b5:d1:8e:
e3:b4:5e:30:e7:6a:24:0b:63:6b:5c:3f:87:79:81:e0:b8:29:
03:03:19:0e:53:0b:58:01:b2:06:3e:d3:b0:68:b6:f1:4b:2b:
16:21:89:e5:51:7b:6f:01:ca:95:42:f0:e9:60:3a:7a:8c:1d:
1f:3a:3b:54:b7:1e:02:92:f4:32:b2:dc:f4:c1:a2:55:31:67:
59:35:62:52:cc:9f:74:5f:08:da:1e:17:5b:1a:7e:02:fb:01:
c4:fa:71:ae:4f:60:ac:c4:b2:a4:ea:b4:9e:5e:14:3d:ca:b3:
2c:b7:1a:1d:28:55:95:5b:88:4b:46:93:b3:29:87:67:7a:8d:
92:2d:a5:ef:16:8c:9d:04:94:0c:04:e0:55:72:7c:18:8e:91:
d3:d7:3a:8e:f1:bf:a3:66:77:d9:0b:7f:71:6c:85:db:74:9c:
31:30:57:4d:70:34:3d:8b:66:3e:91:bb:44:df:bc:5b:09:4f:
5f:11:16:04:22:9e:8b:b3:c6:4b:1f:77:f9:17:0b:c0:42:7a:
b6:14:2e:4c:d6:04:12:c1:54:88:85:0f:9a:b6:cb:53:b6:3c:
a8:45:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:55 2026 by rpki-client