Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DYPxJSaRbYbNxtyhMM7ppQZrPQ4.roa
File: DYPxJSaRbYbNxtyhMM7ppQZrPQ4.roa (raw, json)
Hash identifier: 7/JFfKAnIY+ZOi97kUB2GEDDmc3t6HCOz4H0gO6eXLg=
Subject key identifier: 0D:83:F1:25:26:91:6D:86:CD:C6:DC:A1:30:CE:E9:A5:06:6B:3D:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1A2779D3C3AD9705CE8DD560CCD195D5E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DYPxJSaRbYbNxtyhMM7ppQZrPQ4.roa
Signing time: Tue 03 Nov 2026 17:31:50 +0000
ROA not before: Tue 03 Nov 2026 17:31:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402904
IP address blocks: 151.247.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:77:9d:3c:3a:d9:70:5c:e8:dd:56:0c:cd:19:5d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 3 17:31:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d83f12526916d86cdc6dca130cee9a5066b3d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:c4:61:66:37:62:a9:c8:aa:d9:c3:79:b8:
f4:d3:fd:3f:84:b3:29:13:35:7c:f5:b8:51:c4:0b:
f4:09:35:c4:94:10:00:70:40:54:2a:2e:74:65:e4:
c1:f5:ea:a9:72:39:7d:d6:d3:ce:e0:f5:7f:e2:f6:
8d:63:83:8f:67:ed:d4:df:e8:9c:fb:20:b8:a6:76:
91:3a:08:28:2e:dc:a1:f6:21:5c:fc:64:96:78:c6:
e0:39:6a:ac:c6:e1:fd:1b:c9:75:41:fe:35:56:7e:
e9:b3:ba:ed:97:c4:dd:76:96:ad:38:d1:34:a1:95:
f1:ff:6b:93:d0:76:b0:4e:7e:96:11:b6:b4:20:ae:
83:0f:d4:e4:cb:07:a8:78:93:df:16:31:24:29:ae:
55:c5:06:29:57:68:01:b4:65:54:0d:6e:90:3d:c2:
bf:d5:42:57:51:30:66:5b:78:86:d5:ca:bc:69:ef:
35:b9:e0:94:1e:a9:33:10:20:e8:92:3f:f1:8a:0f:
5b:12:56:03:15:b2:6f:af:28:21:ae:90:c7:dc:70:
9e:1b:0b:08:a4:c0:dc:99:f9:a2:8d:c4:14:da:d0:
28:90:d8:66:8e:0e:73:49:82:22:29:5e:16:a1:e1:
e7:a6:ee:53:0e:cd:a0:55:86:4f:b2:2c:f0:d5:4d:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:83:F1:25:26:91:6D:86:CD:C6:DC:A1:30:CE:E9:A5:06:6B:3D:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DYPxJSaRbYbNxtyhMM7ppQZrPQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9c:a6:18:60:19:53:25:76:bb:13:a9:1c:5d:0e:dc:7d:f7:
72:e7:02:97:af:f9:38:ff:a0:ae:e8:c4:14:3e:e6:db:3b:88:
d1:a5:9e:21:d3:6d:53:f8:a4:be:67:3b:0f:91:52:aa:8b:e5:
31:28:4b:eb:56:21:91:e1:9a:2d:e8:33:82:76:47:a6:fd:4b:
ae:de:d7:de:4f:fa:1d:a6:3e:d4:74:03:db:dc:75:62:7b:b6:
52:99:d4:cf:a2:cf:f1:44:dd:d5:e7:e2:1e:89:f9:e8:29:e5:
68:5f:c4:7a:19:bc:68:59:3e:d9:3d:f8:32:b3:a5:20:f7:cd:
53:19:96:e4:af:de:d6:03:d0:e6:e6:00:bc:77:cb:f5:b9:e8:
a2:e9:0b:4b:f6:95:d5:d8:44:80:f6:08:f8:97:d9:3f:6f:ed:
f4:e5:f0:67:65:b4:33:1c:be:84:06:f9:c5:8d:14:0c:83:d8:
3d:77:b9:9c:5c:b0:71:7f:74:a9:fc:9d:40:bb:73:f7:ed:bf:
23:7f:66:85:80:c1:ec:77:12:5a:26:fb:26:67:31:73:c7:4c:
d3:3e:72:a7:91:19:7f:23:5a:06:c7:06:fe:b3:e1:1f:87:e1:
86:78:70:85:63:24:ec:7b:bd:dc:e2:0d:2d:c5:6f:eb:29:c0:
e7:a2:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:11:27 2026 by rpki-client