Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa
File: DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa (raw, json)
Hash identifier: dUYfJyucIcgSEye6sBcDdNQsfbXuPD7ojWDauTvFvck=
Subject key identifier: 0C:50:E9:17:B5:66:6D:DF:C6:3E:80:F7:FF:4F:CF:7E:B4:D3:CA:7D
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019F10016BC8EB9EFA8D969BEB9732123DA5
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa
Signing time: Sun 28 Jun 2026 20:52:36 +0000
ROA not before: Sun 28 Jun 2026 20:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 45.89.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:01:6b:c8:eb:9e:fa:8d:96:9b:eb:97:32:12:3d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Jun 28 20:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c50e917b5666ddfc63e80f7ff4fcf7eb4d3ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:60:bc:27:61:3c:80:a8:27:e7:ab:dd:b5:
cd:1c:63:bb:a1:33:c8:e7:d9:9e:c1:20:c7:1b:0e:
dd:43:ec:b9:e2:23:0d:5f:95:f9:5a:51:cb:d8:48:
5e:86:63:f8:fd:18:7f:b7:e2:d5:aa:3e:0d:de:99:
a6:0a:f2:a2:0f:eb:4e:63:e3:2e:b1:c3:e3:05:0e:
e3:fd:5c:cc:9c:48:e5:bd:0f:e7:89:74:e0:b9:5f:
fd:56:3c:78:71:78:f5:7e:21:3e:63:16:14:a9:39:
ff:1b:ff:bd:ba:db:96:59:b6:8f:9c:fe:f2:e5:c7:
3e:3f:34:37:c1:ad:60:71:cf:5d:18:4a:9d:bd:b1:
2b:d4:8f:ae:0d:98:13:5c:cb:9a:f8:ea:67:1b:56:
45:a2:5e:d0:9e:d5:51:62:a7:ee:a9:4b:76:32:89:
80:1a:a3:a7:1c:26:bf:a5:32:2a:25:cc:8c:23:78:
e2:de:34:e8:33:e4:66:1f:14:3b:e9:7b:13:4b:0c:
9d:ea:02:46:36:b4:a4:c0:4b:3c:cf:97:38:4c:57:
54:b4:e8:b6:b6:b5:ff:56:45:d7:8d:93:ae:49:3c:
0e:ee:3f:b8:44:75:62:0b:9a:23:6b:35:5a:2c:8a:
07:3a:58:c6:3d:cc:c8:38:65:ab:fd:b0:ee:68:22:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:50:E9:17:B5:66:6D:DF:C6:3E:80:F7:FF:4F:CF:7E:B4:D3:CA:7D
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a2:35:70:6a:96:53:64:f2:12:99:a9:c0:46:cd:1d:f9:87:
21:ae:c6:76:1b:ed:61:0a:35:db:c0:e2:45:ee:fb:6c:17:8b:
b3:4c:41:25:e6:47:2a:2c:73:12:dc:c7:06:1e:3b:bd:08:44:
3f:fa:11:e7:24:d8:bb:7b:fb:85:57:87:9d:ae:b1:96:9e:0c:
71:78:a0:ff:79:1c:aa:1a:03:04:57:a6:fb:11:b8:56:f9:b2:
b5:f9:ad:53:d0:5f:b2:96:97:ea:d2:0a:79:7f:fe:5e:35:09:
48:48:6a:de:ad:37:0d:ba:c4:48:56:5f:d3:24:38:ae:13:bb:
5f:fa:df:05:69:f7:56:07:ae:d0:aa:56:aa:9c:d3:15:2f:30:
d4:38:b9:f8:04:84:80:d9:a9:2f:75:9e:4e:31:0c:38:4d:f3:
8e:2e:73:1c:e9:a3:ae:c7:7a:5a:2d:67:db:17:47:79:be:2b:
46:46:e0:0f:af:17:c6:1a:76:2a:28:b7:16:79:65:96:5f:de:
d9:58:f8:19:b1:fd:26:6a:0e:04:64:aa:2d:e3:f8:f7:e9:39:
f0:c9:f8:49:04:cc:85:35:f1:28:a1:80:cb:5f:7c:05:c7:a8:
27:03:b0:a1:8e:15:b8:6f:1a:3d:13:3d:8f:0b:f9:42:4c:67:
61:a8:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:51 2026 by rpki-client