Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/ddrx84-m9QT2CvYQ4rYUaQFT-V4.roa
File: ddrx84-m9QT2CvYQ4rYUaQFT-V4.roa (raw, json)
Hash identifier: +34dpqFO+p0Lo2t/qjx/upoiDGo64OhUtxpuKNK8lMg=
Subject key identifier: 75:DA:F1:F3:8F:A6:F5:04:F6:0A:F6:10:E2:B6:14:69:01:53:F9:5E
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 019B7FF078CE884F1BD51D56FDE121EBF5C9
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/ddrx84-m9QT2CvYQ4rYUaQFT-V4.roa
Signing time: Fri 02 Jan 2026 18:20:24 +0000
ROA not before: Fri 02 Jan 2026 18:20:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201570
IP address blocks: 46.45.49.0/24 maxlen: 24
46.45.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f0:78:ce:88:4f:1b:d5:1d:56:fd:e1:21:eb:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Jan 2 18:20:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75daf1f38fa6f504f60af610e2b614690153f95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:b0:b6:ee:bb:a7:76:38:fb:86:08:cb:02:
3a:df:1c:db:bc:6d:52:c2:6a:55:f0:ad:83:da:c6:
fa:db:70:1f:09:93:52:f6:39:bb:d5:d3:18:23:0f:
9f:3e:aa:6a:e0:d3:1a:28:61:68:f3:54:17:97:84:
44:c1:68:be:b5:d2:90:f7:29:e9:7c:48:ee:77:94:
92:5d:5b:38:2c:41:a0:de:35:0f:4e:9a:47:4b:b8:
70:62:46:c6:37:5a:22:1d:d8:e5:74:01:e4:9f:d3:
f4:f6:0d:18:3f:95:dd:a3:42:b0:55:05:71:6f:26:
36:07:f0:49:91:e1:4e:93:f1:15:c2:bb:94:d8:a2:
6c:70:16:16:aa:15:00:05:41:5e:07:8a:cd:19:34:
61:e7:68:0c:61:ec:7f:91:9b:d8:f3:f4:24:3b:06:
7d:2a:d5:f6:da:10:63:cc:64:9d:a0:77:c5:43:1d:
ae:0f:e0:22:22:38:2a:de:dd:5e:ea:2f:d5:e2:43:
3b:9a:0a:78:f5:64:59:99:b8:de:09:84:78:d8:69:
21:72:c1:df:af:d2:8b:c9:23:82:89:27:e6:06:60:
cf:e2:00:f9:8c:39:50:9d:12:6f:1a:9f:14:f1:dd:
6c:25:d0:39:e7:98:1e:34:72:c9:9c:e4:7c:9e:81:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:F1:F3:8F:A6:F5:04:F6:0A:F6:10:E2:B6:14:69:01:53:F9:5E
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/ddrx84-m9QT2CvYQ4rYUaQFT-V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.49.0-46.45.50.255
Signature Algorithm: sha256WithRSAEncryption
92:0e:9a:7a:af:91:66:b2:8a:9f:2d:ab:d5:d0:68:2e:08:b7:
58:1b:21:72:0e:fa:c3:41:57:9f:64:80:47:09:2a:5e:d6:09:
d4:8d:db:76:be:da:fc:7f:e5:13:2f:33:a9:b3:62:d6:8a:5f:
66:b5:bf:b9:a8:44:47:65:a9:3e:2f:64:1c:c1:df:4b:f8:7a:
cc:ad:3f:48:14:8f:b3:b4:2a:d0:09:97:5b:1e:ca:8d:3b:b4:
40:f0:f2:a1:a8:45:e1:e7:54:80:3f:2e:7e:37:bc:ce:36:35:
be:b0:8e:9e:45:59:2f:80:89:5f:7f:c9:be:1c:90:43:79:32:
5a:cb:24:fa:3c:48:88:49:e1:19:35:18:a1:8c:c4:c1:73:31:
8a:77:49:3f:21:c5:94:92:7f:8b:5d:c9:03:2f:55:49:f6:ab:
e0:e7:8a:05:88:11:ba:36:d7:18:e0:64:9c:c4:3e:ff:67:31:
50:c4:b9:9b:9c:53:eb:4d:0e:48:b6:e5:f7:9d:c7:6b:d4:46:
fe:48:bb:6e:f0:66:5e:8f:d4:8c:55:3a:00:48:9c:be:d1:95:
4d:41:53:d8:40:fc:98:5a:f8:c4:68:c5:6c:60:4f:98:b3:0f:
1f:c3:27:c1:b1:c4:bc:8b:92:ab:7b:60:ce:44:ca:aa:b3:18:
3e:fd:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:19 2026 by rpki-client