Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DKUyPVhbJsr2YpyxzKhcANpBlPM.roa
File: DKUyPVhbJsr2YpyxzKhcANpBlPM.roa (raw, json)
Hash identifier: 3IVWZ466itIGvJTvHp9kr/j/W5qFrG3UKLMoT1PFcaU=
Subject key identifier: 0C:A5:32:3D:58:5B:26:CA:F6:62:9C:B1:CC:A8:5C:00:DA:41:94:F3
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1265CC100258207CDD4D5D0F2684462FA
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DKUyPVhbJsr2YpyxzKhcANpBlPM.roa
Signing time: Sat 10 Oct 2026 15:09:35 +0000
ROA not before: Sat 10 Oct 2026 15:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.240.150.0/24 maxlen: 24
43.240.151.0/24 maxlen: 24
91.109.40.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
91.109.43.0/24 maxlen: 24
91.109.44.0/24 maxlen: 24
91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:5c:c1:00:25:82:07:cd:d4:d5:d0:f2:68:44:62:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 10 15:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ca5323d585b26caf6629cb1cca85c00da4194f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:92:d6:0d:fc:23:11:0d:13:5d:55:84:d8:
b2:6e:16:bd:c6:96:8d:19:0f:a5:9b:06:d9:cc:79:
c2:0a:7e:ea:3f:6d:63:58:bc:90:9a:69:84:1b:6c:
b7:67:36:13:8f:bc:e6:bf:ec:3b:f4:c0:4b:90:8a:
8d:91:bf:f3:14:63:1c:85:b1:fe:7d:6d:9c:9c:61:
a4:1c:77:b0:30:4f:68:45:f0:3c:37:8c:2d:86:6c:
52:4a:d5:e3:0f:31:44:f9:91:6e:61:bb:63:37:b5:
f0:ca:87:68:58:8a:72:9a:ef:a5:57:36:f0:5f:cb:
25:c6:4c:44:bc:81:79:64:e6:ba:e2:cc:92:a7:fd:
80:68:f5:ab:95:7e:48:17:48:b2:3c:ba:7b:f9:9b:
04:c7:be:04:b7:4b:33:fa:1d:97:e0:1e:68:49:a6:
08:4f:59:d7:0d:c7:4f:0d:61:51:97:5f:0f:6f:83:
24:c1:83:05:45:84:68:f0:ca:3f:8f:6c:2c:6e:00:
50:b7:ae:e2:21:d1:f4:cc:12:30:e3:cb:00:c4:b8:
00:d7:22:ff:46:30:ba:e8:70:dd:10:8e:47:7c:f3:
9f:23:b7:19:f0:5a:5f:3a:21:73:6a:4c:3f:6f:53:
5d:f4:e2:ea:cc:e3:39:58:f0:b1:ed:ff:7b:85:4d:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:32:3D:58:5B:26:CA:F6:62:9C:B1:CC:A8:5C:00:DA:41:94:F3
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DKUyPVhbJsr2YpyxzKhcANpBlPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/23
91.109.40.0/23
91.109.43.0-91.109.44.255
91.109.46.0/24
147.185.196.0/24
194.38.48.0/23
194.38.51.0/24
207.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
52:46:9e:88:06:43:7b:8c:42:1a:06:a5:30:d3:58:18:8f:4c:
dd:23:cd:ae:96:17:a2:db:86:74:89:8a:bf:6e:c4:d5:bf:d0:
ce:43:f0:13:2e:64:2f:5e:8b:55:90:bf:cd:60:0e:58:74:97:
5d:e2:b2:6b:33:ed:15:bb:c6:50:0f:03:52:5c:ad:60:c4:b4:
ae:78:e0:2d:1e:57:f7:55:f0:dc:89:6f:47:00:c4:93:66:4d:
1d:08:25:58:e0:b0:1a:86:4d:cf:ad:d2:a7:10:9a:09:15:8e:
39:1e:16:73:87:87:26:03:d4:c5:b3:c6:f4:f0:b0:38:44:d2:
24:36:ad:ba:af:3b:a0:58:12:d5:19:32:dc:9b:89:fb:af:0e:
3a:b0:f7:53:41:0e:8b:7a:10:1c:f8:6b:c4:50:f9:dc:97:e3:
33:f3:63:0e:27:fe:80:76:84:07:d7:e0:af:9e:cb:cf:47:80:
59:96:fe:10:59:35:23:19:a4:00:ae:4c:f8:9c:d9:1f:be:82:
f1:b0:fa:7b:d7:54:c7:38:dc:55:d9:90:f4:46:3c:ca:c7:a7:
4f:95:41:6c:d9:e8:a0:8b:58:1f:34:97:d0:65:68:90:01:54:
a4:30:bb:15:5a:60:ed:3b:90:dd:29:58:41:75:05:21:c6:ff:
ed:14:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:24 2026 by rpki-client