Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/DPpak8RgDkxLfzni-EWhrE5FCNE.roa
File: DPpak8RgDkxLfzni-EWhrE5FCNE.roa (raw, json)
Hash identifier: jo10qFPskJDWOQaAr+nqpNhpAqLODkfkRNWEJwo+MnE=
Subject key identifier: 0C:FA:5A:93:C4:60:0E:4C:4B:7F:39:E2:F8:45:A1:AC:4E:45:08:D1
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F2368799633FFECE44575BE142863A918
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/DPpak8RgDkxLfzni-EWhrE5FCNE.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35478
IP address blocks: 45.142.153.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:79:96:33:ff:ec:e4:45:75:be:14:28:63:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cfa5a93c4600e4c4b7f39e2f845a1ac4e4508d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:62:cc:cd:b8:ca:9f:6f:c4:8c:5a:a8:f2:03:
bb:44:9e:55:fe:bc:86:ca:1d:e0:10:d7:57:35:f9:
7b:78:ac:fe:ee:25:57:aa:38:81:3a:0f:ef:e4:48:
9a:ab:4a:50:32:4d:66:62:c1:6a:09:1a:50:11:65:
74:12:7b:32:4b:f4:ce:e9:29:d9:68:67:63:23:ba:
74:1c:44:cc:e2:31:eb:de:0a:ff:51:a0:06:e2:70:
37:c3:52:c0:f2:f1:cb:5c:c8:f5:1b:d9:eb:aa:bb:
78:6c:0d:0a:1d:96:71:8f:b9:49:34:91:e9:4d:6c:
cd:34:31:f7:96:d0:b6:a4:fa:38:6a:8c:24:75:87:
a2:de:6c:29:df:1a:c6:be:43:01:01:02:14:58:69:
41:ee:c3:2d:22:3a:20:07:d2:88:10:77:44:de:9a:
bd:30:0c:67:ba:f9:23:ae:2a:a3:80:3c:c3:14:8b:
b7:82:21:66:a5:c0:fb:91:27:8b:1f:a7:6d:01:e3:
af:6a:f2:c2:51:55:a0:8b:9a:3d:c4:5b:43:ce:dc:
4f:6a:33:70:c0:01:65:fe:54:e2:88:ff:9f:5a:e8:
4f:83:a2:fe:ae:52:f1:3e:64:51:93:f6:c6:0c:e9:
4f:7a:94:21:32:37:e5:c2:de:d6:e9:a7:25:bc:cf:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:5A:93:C4:60:0E:4C:4B:7F:39:E2:F8:45:A1:AC:4E:45:08:D1
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/DPpak8RgDkxLfzni-EWhrE5FCNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.153.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bc:21:8a:ff:30:ca:b5:93:a8:28:e6:03:07:04:ba:ee:9d:
3f:1b:ef:d6:70:cc:9c:2b:80:7d:0b:50:f8:f1:29:b6:44:5b:
2a:08:e0:47:00:33:08:93:fa:2d:40:1f:61:c6:71:1e:b0:d5:
be:a0:80:bc:d9:2a:ac:cc:4c:22:28:e8:d6:5b:93:c9:af:73:
b2:cb:c7:50:e4:10:cd:44:a2:4b:24:f1:ba:14:98:d6:73:9a:
80:f9:40:80:25:18:23:55:fe:50:85:33:11:b1:f2:e0:e2:1b:
9c:62:51:f4:d5:04:ee:5d:a8:d2:ad:d5:b1:cd:3d:b8:f6:fb:
c0:39:f3:88:f8:f0:2e:68:0e:99:78:c4:74:b6:e9:a9:41:de:
d8:88:17:1c:f0:1a:bf:df:4a:c1:fa:42:b7:0b:1a:ca:24:59:
c9:c3:f5:33:c1:95:15:cd:69:c7:a9:4e:26:24:17:18:1e:1a:
3a:93:6a:53:72:fb:53:41:94:50:34:27:c4:2e:b8:f7:5f:09:
7e:2f:f9:7e:0f:e1:f9:e4:58:58:2f:dc:9c:cf:44:4c:a6:97:
17:f6:5e:7d:b7:89:43:9c:e3:58:bc:5f:99:13:56:83:85:97:
c7:e4:a3:6e:65:a2:80:61:f2:e8:46:c3:ff:24:0d:81:6a:48:
80:87:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:47:22 2026 by rpki-client