Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DxvuUf_b01yc3NRyOCArJiFHDv8.roa
File: DxvuUf_b01yc3NRyOCArJiFHDv8.roa (raw, json)
Hash identifier: rVTJRrF/XjLZYXsJ1/JhT9koax3qCkJk8havevOCH8A=
Subject key identifier: 0F:1B:EE:51:FF:DB:D3:5C:9C:DC:D4:72:38:20:2B:26:21:47:0E:FF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A13F6979787143E32719413AF4DA7BBF9E
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DxvuUf_b01yc3NRyOCArJiFHDv8.roa
Signing time: Thu 15 Oct 2026 11:53:59 +0000
ROA not before: Thu 15 Oct 2026 11:53:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203481
IP address blocks: 46.8.252.0/23 maxlen: 24
109.248.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:69:79:78:71:43:e3:27:19:41:3a:f4:da:7b:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 15 11:53:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f1bee51ffdbd35c9cdcd47238202b2621470eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:5b:b5:c9:f0:2e:d4:2a:78:12:8f:45:90:
e2:05:93:92:86:26:4a:12:d8:17:f1:6a:9a:b1:4e:
f8:6d:3f:2e:33:4e:64:82:83:b2:cc:b8:10:e7:d6:
30:d0:4d:cc:07:0e:86:97:18:95:ba:44:c9:e2:5b:
47:47:d6:27:63:d6:f5:9c:f4:cd:82:60:26:63:f1:
ad:da:d7:3b:1c:e8:7d:54:9d:69:6a:3e:2a:b1:9c:
db:45:e8:f3:20:51:a8:28:68:af:d4:91:3d:8d:d9:
a7:b5:18:be:9c:ff:34:f3:e6:f8:9c:b7:bb:6c:d1:
6a:e4:11:7c:16:c0:d5:3b:e6:33:41:10:ad:7c:53:
d9:77:12:38:51:60:6c:43:d2:48:09:7b:81:b8:6f:
df:c0:e8:86:ce:a8:30:e3:a5:73:98:9a:f4:78:40:
42:2e:18:d9:77:4a:1d:c3:ba:3c:d2:9b:db:56:54:
22:e8:29:7d:c5:6e:21:eb:82:fa:d6:5c:f7:40:0d:
04:60:30:8e:24:88:2b:26:d5:e2:12:64:75:6b:3f:
f7:82:04:39:cd:69:f9:43:fe:72:58:6c:a4:e0:bf:
4f:ca:09:6a:87:8c:b0:95:d2:22:70:60:56:75:85:
1c:0d:09:3f:89:ff:ef:4a:34:f6:4e:60:ed:6a:5f:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:EE:51:FF:DB:D3:5C:9C:DC:D4:72:38:20:2B:26:21:47:0E:FF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DxvuUf_b01yc3NRyOCArJiFHDv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.252.0/23
109.248.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5d:a4:94:6f:e0:84:19:f6:9f:1c:77:5d:80:fd:45:0e:12:
fc:52:30:0e:f9:d7:9f:ae:4d:d7:6e:3f:32:11:60:ba:90:5a:
e4:cc:d0:bd:b4:89:81:ea:a0:cd:73:b4:02:cd:59:6e:7d:6c:
a6:91:b2:b2:82:0c:07:3f:6e:97:0d:b3:88:d8:fe:8d:21:28:
d4:a1:d2:38:c3:f9:57:52:74:24:9f:60:b9:62:1a:f2:84:4c:
16:c8:2e:26:aa:42:9b:70:48:0f:ba:fc:3b:05:2e:14:f2:83:
4c:3e:35:66:7d:96:73:43:bf:f4:41:14:8c:4b:05:21:4f:fb:
23:91:bc:a4:17:5b:2e:89:6c:b7:75:66:0b:58:30:94:40:d2:
f1:1e:8c:f1:69:98:50:f6:a5:f2:95:5c:d6:b6:c5:e8:48:da:
15:3d:fc:f0:51:01:ab:89:a7:ae:ad:6b:1a:09:56:79:9f:a9:
27:09:e9:59:1a:3c:b4:fb:63:5a:ca:bb:25:29:89:70:89:46:
c3:6b:86:e1:af:09:fa:1c:fe:a6:51:1e:2c:a5:cc:79:94:eb:
1a:97:8a:24:b1:9a:95:fc:ca:ba:1c:0c:c0:eb:c4:01:88:27:
df:3e:d1:f3:31:86:14:91:35:cd:8c:77:55:d8:f1:a7:86:69:
77:2e:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:52 2026 by rpki-client