Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DLPi4jkoMDcP5nuB-qDA-WQOc0g.roa
File: DLPi4jkoMDcP5nuB-qDA-WQOc0g.roa (raw, json)
Hash identifier: tGzQDJv6hza77ChVUV3RI3JQZ+z2FzjNVq3I82N706Q=
Subject key identifier: 0C:B3:E2:E2:39:28:30:37:0F:E6:7B:81:FA:A0:C0:F9:64:0E:73:48
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019BFB005047F917BF85155630BAD4EC0BD3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DLPi4jkoMDcP5nuB-qDA-WQOc0g.roa
Signing time: Mon 26 Jan 2026 15:51:00 +0000
ROA not before: Mon 26 Jan 2026 15:51:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147176
IP address blocks: 151.244.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:00:50:47:f9:17:bf:85:15:56:30:ba:d4:ec:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 26 15:51:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cb3e2e2392830370fe67b81faa0c0f9640e7348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:6b:22:a3:4f:79:22:ce:9c:fa:ca:f7:d4:
04:77:2b:c8:1e:1c:3d:eb:bf:cd:5d:8c:ec:79:a7:
82:f6:0d:06:2c:c1:33:ec:d2:37:3e:d0:b9:99:e2:
af:52:f1:93:41:f0:13:dc:9a:49:96:99:d8:f4:43:
3b:a6:07:ad:22:b5:35:ac:13:6f:fd:06:f3:8c:59:
df:db:83:c4:0c:2e:08:0b:e4:5c:7b:e0:13:0b:8f:
67:ef:76:d0:c2:d7:31:be:d2:e9:b4:c5:c6:bb:fc:
c9:4a:39:67:53:c1:bc:c0:cd:d4:f1:88:56:2c:d5:
72:9c:f7:26:b0:58:f4:bd:31:35:14:4d:75:22:56:
f7:da:0b:bc:71:35:7a:53:9b:35:47:56:48:7d:f7:
7c:82:9c:09:b6:d8:99:91:85:6b:39:5e:cd:8f:41:
ae:e0:b4:33:22:56:d7:39:85:2a:a2:14:78:33:ad:
19:20:af:1e:6b:f0:e5:cd:5e:0d:29:fb:7a:78:3b:
7e:5b:66:fa:a7:2e:19:e9:29:95:28:9b:cb:61:31:
c5:ba:69:05:a0:a1:c5:5f:8f:c1:f0:b4:a9:e1:6c:
7b:fa:30:3c:46:32:29:d1:d6:73:bd:3a:89:df:57:
a4:a6:70:9b:5d:d6:87:77:f5:27:3c:30:1e:6e:e2:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B3:E2:E2:39:28:30:37:0F:E6:7B:81:FA:A0:C0:F9:64:0E:73:48
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DLPi4jkoMDcP5nuB-qDA-WQOc0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.248.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cd:d0:ed:86:17:92:90:00:33:f3:2e:f3:50:70:53:26:23:
66:6b:c3:b8:7d:91:f7:70:ac:4f:f1:20:bc:92:b9:cb:e0:61:
5b:5f:91:a5:25:95:77:48:52:ad:af:9c:b5:5e:4a:1f:5a:24:
ad:1b:1a:0b:22:c0:95:ae:16:e9:97:2b:d2:1e:a2:db:e8:39:
80:8c:e7:9c:52:f6:64:4d:38:95:ad:ca:c7:c3:16:24:ee:ff:
35:6e:e3:df:9f:4e:3d:94:91:15:7e:33:d3:42:d4:26:ba:a4:
d3:6d:73:e9:cb:54:a5:69:b7:e1:60:9c:7e:c1:0a:e8:8d:ba:
e1:f6:ce:bd:8f:d4:0c:86:c1:4a:84:4b:34:6d:e0:57:50:e1:
40:f0:5f:84:8f:66:0d:7c:88:4d:e5:56:22:cd:fb:47:9b:c0:
f4:2e:c3:ec:9c:f4:7e:88:78:32:f2:82:15:28:5c:60:13:10:
9c:ac:7f:e6:61:4d:fc:66:66:b4:26:d6:c2:48:2d:3b:3c:cf:
d2:0b:e7:4d:ab:75:4b:9f:46:7a:d2:9c:ed:53:c9:2f:90:7f:
af:36:b8:9e:8b:e1:5e:42:76:1b:29:00:3b:bf:7b:94:f8:8f:
8d:06:b5:fd:7e:73:ef:f2:fb:e3:aa:f3:95:c2:99:7f:37:e5:
93:6c:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:52 2026 by rpki-client