Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/369zrIkz4pLuW2pmptTXe8zEk5U.roa
File: 369zrIkz4pLuW2pmptTXe8zEk5U.roa (raw, json)
Hash identifier: KFwSnDWpRelgFL3oDAu0F5Djptnth3CgxIvlF1M1voU=
Subject key identifier: DF:AF:73:AC:89:33:E2:92:EE:5B:6A:66:A6:D4:D7:7B:CC:C4:93:95
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A101D79F979D6CFF4F21117C3D96CA46F5
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/369zrIkz4pLuW2pmptTXe8zEk5U.roa
Signing time: Sat 03 Oct 2026 12:57:50 +0000
ROA not before: Sat 03 Oct 2026 12:57:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 147.45.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:d7:9f:97:9d:6c:ff:4f:21:11:7c:3d:96:ca:46:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 3 12:57:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfaf73ac8933e292ee5b6a66a6d4d77bccc49395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:59:ce:23:12:b5:f4:e0:c5:02:ff:40:db:
9d:d6:8f:80:29:0d:ac:06:e6:95:54:9e:d3:22:62:
5e:c6:c0:ad:11:45:75:95:7d:45:4b:15:46:3b:3a:
40:16:89:78:f3:49:fe:05:ed:a1:e8:30:1d:44:08:
cf:23:4d:af:d3:73:ce:a0:e1:22:bb:43:60:3d:1c:
b0:1d:0d:03:41:2d:c0:d0:7c:d8:e3:a2:f2:45:06:
73:42:28:e7:42:3c:5a:8c:8b:5a:73:88:27:c2:cb:
59:31:f6:da:8d:ff:e3:75:16:69:1a:e5:09:4b:34:
9c:e8:09:b7:1c:2f:1b:cf:28:fc:da:97:69:84:3b:
83:da:bf:34:4f:8a:ac:2c:8a:dc:42:53:6e:a8:fc:
dc:0e:2b:5b:d1:3b:2c:cc:bc:94:7e:bd:6c:be:f4:
fd:2e:13:35:0a:af:c1:95:6c:bb:da:dd:0b:61:90:
43:61:cf:a9:85:a6:46:43:db:ba:c0:fa:d1:74:d9:
1f:76:43:12:15:a6:2b:43:c4:38:bc:26:32:47:d2:
17:3b:27:2a:29:43:d4:70:58:12:39:10:7b:99:c7:
d6:04:62:8b:26:e6:9e:66:16:7e:17:25:e7:03:15:
06:85:95:03:ad:61:dd:4f:bf:54:55:bc:f6:29:c7:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AF:73:AC:89:33:E2:92:EE:5B:6A:66:A6:D4:D7:7B:CC:C4:93:95
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/369zrIkz4pLuW2pmptTXe8zEk5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.47.0/24
Signature Algorithm: sha256WithRSAEncryption
04:19:d7:8b:4a:5c:76:4e:83:c4:78:87:e2:d1:5c:2a:01:28:
fc:d7:94:be:04:a3:96:70:60:b5:79:7a:a6:9e:f8:28:c1:0f:
45:50:56:08:f0:a1:bd:db:3e:83:5d:d4:b8:df:69:50:5e:99:
e6:53:7a:e6:31:85:af:39:02:22:29:9b:60:69:6e:f5:ef:1e:
d0:71:d2:32:17:30:3e:81:46:9f:dd:ec:66:f1:83:c8:56:56:
a2:3f:a6:1e:38:62:ae:f1:cb:55:5e:23:0f:b4:87:bc:4f:87:
5d:69:fe:fb:c8:4e:4f:02:df:ab:92:cf:eb:9e:e0:03:f7:e5:
04:3f:cc:c6:1d:92:a0:19:c5:a3:6a:42:fc:42:bc:6c:c8:21:
ee:a5:d8:90:f9:c3:78:20:be:77:27:a1:8d:cf:a8:13:4f:fa:
b6:03:87:10:4e:d1:43:15:1e:2b:2e:af:77:ab:4d:73:8f:60:
68:c7:ca:42:f2:10:1d:67:4a:d0:03:de:96:92:07:71:62:45:
ae:cd:57:2d:99:aa:7f:c6:85:c9:00:38:40:44:c6:36:b9:70:
26:8f:bc:9c:64:82:3f:2c:32:1c:6e:82:05:f7:9f:66:6f:13:
5e:a7:e0:4b:3c:c1:84:f8:e6:e1:d4:a6:62:66:a7:c0:71:bf:
01:e2:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:57:50 2026 by rpki-client