Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/D43_xqLhb1EboLCPrtSgnprQPeI.roa
File: D43_xqLhb1EboLCPrtSgnprQPeI.roa (raw, json)
Hash identifier: T/NHgaiw/ue1x+uaaeetFUJUaSZtYO4czdQpvyIpmBc=
Subject key identifier: 0F:8D:FF:C6:A2:E1:6F:51:1B:A0:B0:8F:AE:D4:A0:9E:9A:D0:3D:E2
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0F19308E84F2975C789C76A80F0D57F41
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/D43_xqLhb1EboLCPrtSgnprQPeI.roa
Signing time: Wed 30 Sep 2026 09:09:00 +0000
ROA not before: Wed 30 Sep 2026 09:09:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51852
IP address blocks: 163.245.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:93:08:e8:4f:29:75:c7:89:c7:6a:80:f0:d5:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 30 09:09:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f8dffc6a2e16f511ba0b08faed4a09e9ad03de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:b8:7b:3f:c3:5a:1c:96:79:4e:14:af:83:
1d:75:00:2a:c0:db:05:34:85:7f:08:14:de:53:56:
d7:23:0f:3f:3f:cb:97:38:fe:d9:cd:75:68:64:f6:
fe:02:0c:5c:25:59:20:54:c6:5e:36:2d:2e:7e:90:
a9:4a:3d:5e:60:8b:df:6b:cb:22:72:7b:dd:5d:0f:
2e:b9:68:07:3a:87:d9:2e:ce:bd:63:1a:05:20:56:
d8:8b:86:82:00:58:11:92:6a:62:e4:f6:8c:e3:76:
e7:9b:a0:9d:40:d2:2e:4b:51:96:b0:86:d8:6b:6e:
2e:ec:9c:2d:0c:1e:29:c7:f6:c7:c7:eb:5a:e0:8c:
e9:9e:b4:9e:35:39:d8:f0:74:2c:f6:52:f1:67:6d:
a1:a0:32:61:55:1b:08:12:e3:c1:da:4c:35:0b:e7:
5b:77:2e:ac:2b:27:5f:8e:35:f3:8e:10:5e:b9:e6:
d0:79:c0:8c:8b:ae:77:11:1e:39:93:21:c4:a5:b5:
ce:91:5f:e0:ac:6d:cd:c9:80:c8:e1:00:6e:da:c5:
91:95:3d:1f:dc:0c:13:14:02:09:70:42:c9:7e:59:
a8:63:8e:dc:14:91:a8:e7:17:aa:2d:04:56:77:69:
09:8c:83:01:c3:dc:8c:a8:6e:3b:f8:60:0f:44:92:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:FF:C6:A2:E1:6F:51:1B:A0:B0:8F:AE:D4:A0:9E:9A:D0:3D:E2
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/D43_xqLhb1EboLCPrtSgnprQPeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a4:a8:39:9c:2c:d6:d1:04:d8:e4:18:e1:1e:ac:47:14:8b:
98:ba:1f:19:76:00:fd:b8:26:ae:fc:a3:d8:92:06:57:53:15:
91:92:a4:f0:68:e9:ac:50:ce:32:26:3e:8e:7c:be:44:77:fd:
1f:b0:18:f4:10:8e:11:ef:e0:1b:a5:75:fc:a6:31:d0:96:5b:
58:48:65:c4:85:63:f2:89:91:ab:86:1b:4a:e6:68:9a:06:c3:
96:c7:a3:e4:9b:31:1f:c9:3a:56:37:2b:76:a2:32:f2:f0:ea:
33:08:15:99:3c:97:a3:53:26:4e:fb:78:cf:8c:b7:dc:f7:f3:
ac:05:f9:5c:aa:2c:c8:33:e6:e0:a5:79:b9:e6:8f:1f:c3:e2:
98:20:ab:71:91:ff:67:dc:49:6a:85:82:7a:f3:f6:31:30:e2:
53:e2:3a:04:d2:f9:23:cb:b8:7d:11:2b:a4:0c:ac:fb:96:c1:
ad:43:63:03:14:05:d3:40:29:ba:fc:cb:1a:9a:38:d3:27:07:
6d:26:17:95:06:39:bf:0c:e8:11:be:b4:57:65:9b:8f:05:68:
17:fe:21:0d:54:ee:89:34:d8:35:f8:8f:0e:e2:a7:f8:ce:d3:
00:00:6b:28:51:7a:e7:3f:81:6a:cf:2e:e1:19:ad:e6:e6:1f:
9e:0a:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:55 2026 by rpki-client