Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DPU-9eKuecwS_x2K_dKAWxqkYcY.roa
File: DPU-9eKuecwS_x2K_dKAWxqkYcY.roa (raw, json)
Hash identifier: RlrG93tPwYcFUBGV+stQA1WxJPCVKQpTblCjrg6xxnk=
Subject key identifier: 0C:F5:3E:F5:E2:AE:79:CC:12:FF:1D:8A:FD:D2:80:5B:1A:A4:61:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F4D37BA19EE6EBEB5767535CA8A7F653B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DPU-9eKuecwS_x2K_dKAWxqkYcY.roa
Signing time: Fri 10 Jul 2026 18:08:45 +0000
ROA not before: Fri 10 Jul 2026 18:08:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 151.240.3.0/24 maxlen: 24
151.242.227.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.133.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.246.216.0/23 maxlen: 24
151.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:37:ba:19:ee:6e:be:b5:76:75:35:ca:8a:7f:65:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 10 18:08:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cf53ef5e2ae79cc12ff1d8afdd2805b1aa461c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c1:08:89:fc:0a:6a:dc:3e:b7:54:f2:bb:63:
4e:ca:43:4b:26:80:58:3e:fc:ff:72:a1:41:dd:38:
e7:3c:d5:44:e4:04:fd:3f:50:de:c3:3b:d4:8c:fe:
fb:fc:31:9a:a9:11:df:19:b9:02:d9:c2:aa:86:76:
c8:4b:44:9f:9e:d6:e3:7b:1b:1e:d3:b2:c7:31:4a:
95:aa:05:1f:20:70:80:25:69:57:a5:9e:7f:72:b0:
f6:b1:72:cd:73:3f:82:c8:06:79:e9:5e:e9:b9:24:
c7:e4:56:a6:1b:0f:69:b7:61:ac:bf:a3:19:84:17:
b1:dd:cb:19:d3:a7:bd:c7:8d:fb:77:e1:5d:d8:b9:
25:9c:73:3f:a0:8b:9c:14:3f:24:af:92:1c:36:ef:
13:c0:be:42:7a:c0:97:57:58:94:ac:5f:fa:fd:b0:
7c:3f:8c:08:1b:2a:16:6b:d0:e8:7e:59:83:43:4f:
fb:ff:8b:3c:ff:6e:2d:64:6b:99:06:15:18:ff:b3:
f9:8d:b0:e6:18:b6:c0:4b:2b:46:d3:61:b6:b6:e8:
de:d1:da:c7:c8:52:48:c0:27:57:4a:51:d9:f4:22:
e4:16:d4:11:e9:a6:e9:5b:b1:6d:e2:1c:37:17:9c:
6b:d4:38:33:f3:3f:79:70:e5:5e:b0:70:68:37:72:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:3E:F5:E2:AE:79:CC:12:FF:1D:8A:FD:D2:80:5B:1A:A4:61:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DPU-9eKuecwS_x2K_dKAWxqkYcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.3.0/24
151.242.227.0/24
151.243.113.0/24
151.243.133.0/24
151.245.127.0/24
151.246.216.0/23
151.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1c:7d:b4:54:b7:58:6f:78:5e:76:27:f1:24:31:70:23:55:
a4:3e:ac:37:b1:85:9f:c5:39:81:20:b6:44:ca:44:a2:1c:ee:
fe:8d:d0:5a:dd:1a:fe:32:a7:64:6d:cc:a9:fd:13:eb:e6:bd:
91:35:b4:2f:09:9d:f3:2d:ae:04:77:b7:a0:3e:fe:5a:9a:cd:
b2:3b:0b:97:9c:76:3e:c3:3c:cc:9b:ff:15:51:4e:17:b4:c1:
5a:67:99:9f:b0:1b:a2:e5:cf:2c:9e:b5:6d:3f:00:9f:da:fe:
88:ca:42:0d:dd:d3:5f:e6:8a:27:0a:dc:ec:9b:50:88:b1:49:
c2:57:8b:f5:8c:78:b8:bf:32:0e:ee:38:f3:84:29:06:e2:8b:
aa:de:d2:6e:5f:af:23:c8:ee:07:72:af:72:9a:2c:5f:9c:a1:
bf:0e:26:9b:28:2d:a1:c7:67:2f:19:0b:e6:fc:ba:bf:30:ee:
69:95:3b:52:c5:93:af:1c:5d:e6:1d:44:99:45:db:7d:ef:2e:
4c:5c:8e:66:44:a3:71:72:47:59:e5:cd:ed:8a:67:07:18:0b:
ee:17:a5:c9:f3:3a:83:39:5c:08:ab:8b:f3:f2:4e:4a:4c:8d:
26:71:2b:61:ba:6a:08:89:46:75:b0:5e:86:69:84:0a:f5:49:
d4:33:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:51 2026 by rpki-client