Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0dyjRs2rLsczLBorlsV1DwCHs_Y.roa
File: 0dyjRs2rLsczLBorlsV1DwCHs_Y.roa (raw, json)
Hash identifier: 8qo5LlZhTkKkGPMBaPvapg6cGjfT354LQC9QPJshIpo=
Subject key identifier: D1:DC:A3:46:CD:AB:2E:C7:33:2C:1A:2B:96:C5:75:0F:00:87:B3:F6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7D50D1966EF6FB30090904CA68577F28
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0dyjRs2rLsczLBorlsV1DwCHs_Y.roa
Signing time: Sat 11 Apr 2026 16:12:21 +0000
ROA not before: Sat 11 Apr 2026 16:12:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 151.247.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7d:50:d1:96:6e:f6:fb:30:09:09:04:ca:68:57:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 11 16:12:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1dca346cdab2ec7332c1a2b96c5750f0087b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:6a:bd:32:0c:8d:18:c4:cd:bd:c1:62:a9:
13:87:c2:ba:e9:3e:65:74:c1:57:ba:5d:8a:74:9c:
44:1f:74:08:cd:2a:17:89:7c:6e:45:03:35:18:76:
d9:d9:2f:ec:4a:41:fe:7a:3c:78:5d:1e:ae:ae:b5:
2d:2d:da:da:c1:39:88:1b:f3:eb:a8:db:ea:6a:27:
5a:14:e5:88:54:ad:7c:9b:5e:17:ed:60:e4:83:df:
bc:f8:2d:6d:68:ad:73:c1:5a:1a:f3:7d:c1:bd:30:
a7:b6:37:e6:dc:24:b2:fc:b2:10:68:55:ed:58:df:
45:d1:0a:e7:56:75:a7:69:9b:79:79:5a:d1:55:40:
e2:19:e1:5d:69:2f:a5:ff:33:60:80:53:36:81:08:
60:89:f2:a8:dc:82:c0:c3:7f:1b:0e:81:84:fe:f7:
e6:67:c2:4d:d3:b4:1d:8b:92:27:1b:1e:57:f0:e0:
29:23:7d:78:8b:6b:ef:7e:7d:1a:6c:0a:67:3e:bd:
24:3b:51:19:e9:56:d3:b3:05:fe:ba:30:e3:e6:6a:
da:45:80:77:62:00:fd:ba:b5:25:c3:28:4c:07:bc:
a8:d7:ac:e9:3f:ab:cf:1f:1f:69:41:bc:af:58:69:
c0:6b:68:5e:04:4d:3a:c4:f8:2c:ab:c3:cf:b5:d8:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:A3:46:CD:AB:2E:C7:33:2C:1A:2B:96:C5:75:0F:00:87:B3:F6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0dyjRs2rLsczLBorlsV1DwCHs_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f3:75:e5:12:e1:f9:56:63:76:2d:5e:e6:33:81:93:85:b9:
cb:c8:bc:b9:53:4f:c9:70:87:c7:f0:83:11:37:16:3a:58:3e:
2d:2a:70:33:e8:85:d6:30:3f:be:93:90:33:c4:3f:0f:a2:80:
5b:4d:74:86:16:44:4a:15:0c:d4:d1:8e:9b:1d:25:8e:a2:a1:
8e:80:c3:2c:2e:bd:97:78:10:74:f2:80:e8:96:f1:11:ac:0d:
5f:be:0c:6b:3a:33:5e:e6:e7:2e:91:fd:e9:b7:a8:17:e3:ee:
9f:95:17:83:b5:e6:36:b8:65:14:ea:ff:92:17:86:b8:6e:a4:
91:40:47:75:51:ce:bb:8b:35:7f:d8:23:85:3d:5d:79:c6:d0:
0d:f1:93:5e:d2:0c:55:76:3b:16:7a:07:a4:c5:c5:8a:eb:33:
d8:7d:98:8a:89:10:2e:66:f1:04:61:29:8a:58:ca:6f:f0:e7:
b9:fb:9a:1a:69:70:1d:e1:a8:ba:92:68:06:d3:ae:cf:1f:e5:
9e:45:b2:07:33:28:70:da:e9:b2:95:6b:00:3c:b3:32:16:07:
17:fc:e9:40:ef:43:7a:ea:4b:97:bc:99:43:96:cc:ba:4c:9a:
df:d7:6d:43:b8:15:e7:3e:1d:b0:62:74:da:90:14:ed:d5:c5:
69:b7:5b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:20 2026 by rpki-client