Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/DELsXwnz7QXyvo8I-xSbFxtm9Z8.roa
File: DELsXwnz7QXyvo8I-xSbFxtm9Z8.roa (raw, json)
Hash identifier: gj1pfYjJsC81tX1Jf+j9pmFEGe/ZAEVKgPh13YHgRAI=
Subject key identifier: 0C:42:EC:5F:09:F3:ED:05:F2:BE:8F:08:FB:14:9B:17:1B:66:F5:9F
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A10AB8E0A2228843EC0D867CB9065563AB
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/DELsXwnz7QXyvo8I-xSbFxtm9Z8.roa
Signing time: Mon 05 Oct 2026 06:20:50 +0000
ROA not before: Mon 05 Oct 2026 06:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 109.229.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:b8:e0:a2:22:88:43:ec:0d:86:7c:b9:06:55:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 5 06:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c42ec5f09f3ed05f2be8f08fb149b171b66f59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:ee:ef:a5:da:37:3c:54:39:31:e9:45:53:
ce:bc:7b:0f:24:6f:34:74:60:a9:2d:ca:27:9f:04:
72:9e:b6:90:b9:7c:7c:bf:64:f1:18:2b:9c:1d:1c:
2d:b7:84:a1:92:c4:5f:ba:dc:5f:3d:2d:df:d6:92:
80:d6:e9:2f:c8:b5:45:44:8d:4e:d2:3a:58:ab:8f:
ad:30:62:2e:4d:4d:1c:6f:63:95:0d:fc:0c:b0:3f:
0d:97:c3:da:74:23:de:04:7a:95:9b:7f:7e:27:d1:
2d:a2:f6:d9:a2:d2:78:f1:57:ce:f2:90:0c:1a:1a:
59:42:c2:dc:72:9d:e6:93:75:52:8f:56:03:0a:c7:
3c:45:ae:54:7b:64:60:3a:f2:86:a2:36:93:02:31:
fa:01:2f:75:f0:c2:c4:f5:89:a0:94:06:07:1b:5c:
80:cc:be:ad:ab:92:6e:9d:92:1f:f8:4c:f8:75:0a:
0e:cc:1d:8a:7c:ab:ea:ac:0e:aa:5c:73:69:08:c5:
56:d8:09:c9:1c:cf:51:05:72:a1:9c:81:88:fb:82:
de:d3:4f:66:17:12:cf:37:58:66:42:b6:b0:64:7f:
35:64:16:2a:04:04:fc:ff:71:92:07:b9:aa:94:33:
3a:4e:1f:9c:b9:86:06:2f:df:a5:21:10:fc:e1:c9:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:EC:5F:09:F3:ED:05:F2:BE:8F:08:FB:14:9B:17:1B:66:F5:9F
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/DELsXwnz7QXyvo8I-xSbFxtm9Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.220.0/23
Signature Algorithm: sha256WithRSAEncryption
60:7d:f1:13:0b:51:b4:da:05:02:0f:d3:c6:43:21:d4:cb:fa:
3d:90:f5:60:62:fb:6e:31:ab:ce:c1:14:db:c3:c1:46:3d:b2:
fa:87:e5:20:45:95:78:66:b2:69:66:df:10:c1:cd:fc:92:aa:
ee:97:04:7c:96:13:b6:55:2e:bd:72:e7:07:71:5d:89:2c:90:
27:a9:cd:2c:d0:89:b1:aa:1b:3a:40:8d:04:df:bb:78:bf:d2:
b5:ea:71:b9:fd:cc:b4:97:f3:d1:ff:00:3a:4f:2c:d9:3b:80:
30:bd:9b:7d:dc:8d:98:7a:78:e7:5a:e1:6c:ec:15:3a:2a:ed:
e2:1d:23:2e:14:f0:8c:6e:45:01:06:2e:1e:28:73:0c:db:15:
56:ba:37:44:48:91:d5:86:e0:19:65:e1:8d:0e:78:75:f6:3e:
d7:52:2f:f1:13:76:6b:3b:1c:73:1b:a2:05:b6:50:80:c3:f7:
73:41:7d:f6:5d:b0:1e:e0:ef:4e:03:83:64:e4:c9:35:be:ef:
16:44:12:e1:c4:d7:c9:8c:76:07:e8:71:0d:3e:9d:b0:c9:7b:
1a:e3:04:3d:de:ee:1c:b8:b0:f8:7b:0e:be:65:81:fe:a5:df:
85:c9:1e:28:91:ef:14:08:cc:2c:bc:41:34:b3:92:5c:1b:1e:
a3:50:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:57:50 2026 by rpki-client