Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/DXd5LJYKu0-IWWAgc5yesH0wYuc.roa
File: DXd5LJYKu0-IWWAgc5yesH0wYuc.roa (raw, json)
Hash identifier: Oz0vFuz7PStN6pvaeQgIVLshJdDYI5c7dFmI439hMuU=
Subject key identifier: 0D:77:79:2C:96:0A:BB:4F:88:59:60:20:73:9C:9E:B0:7D:30:62:E7
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 019FF73A262E060A63168059CBFAD574F7A4
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/DXd5LJYKu0-IWWAgc5yesH0wYuc.roa
Signing time: Wed 12 Aug 2026 18:26:51 +0000
ROA not before: Wed 12 Aug 2026 18:26:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.143.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:3a:26:2e:06:0a:63:16:80:59:cb:fa:d5:74:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Aug 12 18:26:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d77792c960abb4f88596020739c9eb07d3062e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:0b:ab:10:a8:2a:83:a4:97:56:e9:02:a8:
34:61:46:fe:9a:95:16:c3:3b:dd:03:ea:52:8f:c6:
5a:a1:bd:98:25:f9:77:ca:ec:ec:f2:44:84:ba:1a:
3c:ec:d4:14:5a:1b:6c:dd:c0:c7:fa:c2:52:ac:77:
75:12:8b:d9:56:fd:30:e2:71:db:32:5f:fe:94:62:
c5:97:b5:d2:9f:0d:44:25:b1:80:71:c4:af:f7:31:
20:d6:48:a8:ac:f7:d2:99:f3:48:43:50:24:29:a1:
eb:e6:6e:d4:5e:c2:58:48:b1:9a:f1:3e:5a:1a:83:
97:54:99:d2:89:ad:fd:e2:be:e6:58:48:f8:f3:a5:
06:52:d7:30:08:ce:8e:a6:30:85:49:42:e0:76:ef:
b2:02:67:75:2e:c5:e1:94:8e:5d:b7:67:be:28:f6:
7e:43:99:f9:75:52:99:0a:ac:1a:b6:4d:e3:1e:b2:
73:0f:53:20:43:9e:f0:18:77:6a:67:55:34:e2:90:
0b:f6:7a:e8:42:6a:55:82:95:6b:33:3b:3f:21:49:
ac:4f:4b:23:af:10:23:06:c6:b5:10:6a:a8:f0:14:
77:02:59:b4:8e:a9:7a:8a:76:b6:fd:0c:ea:83:ec:
e7:9f:38:cf:c5:a4:85:6f:28:41:5a:f2:d5:fb:3b:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:79:2C:96:0A:BB:4F:88:59:60:20:73:9C:9E:B0:7D:30:62:E7
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/DXd5LJYKu0-IWWAgc5yesH0wYuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
Signature Algorithm: sha256WithRSAEncryption
84:30:89:0d:e5:98:fd:79:7a:d4:f4:e7:30:b5:d5:ca:21:b8:
28:f5:7d:79:80:fd:4a:cc:5b:7c:42:68:0d:14:c1:1c:8d:38:
f8:44:05:6a:5f:c3:07:d2:84:e7:72:39:d1:6a:c6:10:00:0e:
a5:e3:ae:8a:10:7b:c1:9e:49:34:e5:55:5b:6c:f1:cf:f0:a3:
90:d3:1c:d7:e6:fd:1f:ed:11:5f:e2:f4:2d:0e:a6:ea:23:85:
41:e4:91:aa:fa:be:8b:68:66:da:f2:1a:b0:ea:e4:58:51:c0:
a7:06:30:cd:37:8e:9c:ac:67:56:01:e2:5c:d0:78:b5:e6:19:
42:3d:09:3a:bc:79:c4:5e:27:81:1e:77:b1:26:24:df:04:3f:
0a:6a:08:d8:07:23:f1:60:04:29:c7:b8:10:46:b7:e3:e0:0e:
6b:97:72:64:15:f5:f2:4a:51:8b:3a:30:da:23:94:c9:17:a9:
8a:9e:f5:bc:ac:23:f0:43:e9:1c:00:08:39:71:33:04:08:5c:
66:3b:3f:f8:3d:0e:1c:4a:91:cc:98:02:44:8a:22:9b:b5:d6:
b2:8a:0d:29:10:f6:bb:ba:05:2a:ac:35:27:ed:ac:79:c7:58:
16:78:12:4e:d2:92:76:29:6d:71:5d:6f:d1:c8:b8:a0:c5:22:
16:72:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:04 2026 by rpki-client