Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DfC-WW5KLGYdXBMYmCfPktJ0ajc.roa
File: DfC-WW5KLGYdXBMYmCfPktJ0ajc.roa (raw, json)
Hash identifier: 0A+9/gcQ6eYWgFtg3Ii1TEWmwd8rDjBjNvKmnJ+iIRY=
Subject key identifier: 0D:F0:BE:59:6E:4A:2C:66:1D:5C:13:18:98:27:CF:92:D2:74:6A:37
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A135516E237DE747CF417893493FCA3FD4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DfC-WW5KLGYdXBMYmCfPktJ0ajc.roa
Signing time: Tue 13 Oct 2026 12:51:31 +0000
ROA not before: Tue 13 Oct 2026 12:51:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206735
IP address blocks: 151.242.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:51:6e:23:7d:e7:47:cf:41:78:93:49:3f:ca:3f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 13 12:51:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0df0be596e4a2c661d5c13189827cf92d2746a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:fa:5b:11:16:1f:f2:74:8c:41:0c:1d:2e:
58:1f:1f:66:90:3f:e5:06:26:e4:46:e7:8a:f0:2f:
23:31:c2:c2:99:35:ad:8c:04:64:34:ba:d5:e6:34:
d6:28:b6:0d:96:a5:13:18:ca:f5:f6:4b:bb:da:5b:
18:8f:a4:dc:b7:19:c4:71:a0:16:e2:9d:48:d7:3a:
4a:c7:9a:32:45:01:b2:76:c0:8d:56:96:00:33:de:
c9:db:7c:7e:0d:d1:a3:7a:2a:2f:a4:d2:f6:a7:ec:
8e:af:c6:58:d7:0a:61:f9:d5:33:40:7b:c4:71:19:
aa:49:57:7f:2b:71:bb:e0:19:37:f7:cf:e8:01:93:
59:6e:22:32:5b:93:0a:00:8d:6f:ba:a9:b0:03:97:
23:47:99:c7:ed:bc:5f:17:ea:0b:ad:8d:3f:0c:81:
82:71:15:ad:a2:ec:52:5d:a0:97:0c:db:6d:f1:56:
0b:59:ee:d1:2e:2d:5d:d6:7e:48:a2:85:83:5e:8c:
fc:18:b4:66:8e:be:69:f2:3d:0e:6c:6a:41:3c:c1:
26:0d:7a:21:e0:f4:f7:fe:1d:1e:e5:09:59:f8:99:
89:bc:c7:8c:fe:0b:be:ee:21:4b:63:06:8f:00:ec:
55:4f:c7:02:40:cb:de:a0:3d:c7:44:b8:3e:34:34:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:BE:59:6E:4A:2C:66:1D:5C:13:18:98:27:CF:92:D2:74:6A:37
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DfC-WW5KLGYdXBMYmCfPktJ0ajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.22.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7c:71:b1:7d:f2:03:48:a8:3f:19:50:1f:a7:15:45:17:ad:
0f:47:d7:60:b9:53:2b:c6:13:52:44:1f:5f:7a:86:aa:e6:6a:
7e:5b:97:90:46:0c:90:8c:60:ac:0c:52:4e:9c:a4:72:35:fb:
db:04:29:3d:2b:e7:fa:ad:31:c4:37:bf:08:f7:c6:24:66:8d:
d4:2e:a0:36:18:e8:45:7e:ab:98:36:84:f2:82:f1:5a:8d:ff:
35:0f:c0:df:44:15:42:31:88:70:28:65:54:b4:1e:f8:45:b3:
af:53:01:71:45:60:61:bc:59:7b:3e:17:60:b1:67:e8:81:2e:
58:f0:1e:76:c9:e5:24:eb:cc:1f:93:43:f3:fd:e6:ef:fa:a8:
b6:11:95:c4:a7:fd:6e:93:2a:0d:13:4c:1f:e3:7c:55:33:b7:
14:ab:b6:53:1d:41:31:f3:82:51:68:32:3d:25:b7:7e:b2:db:
a3:d0:57:57:44:fb:f6:f6:c3:2f:50:14:08:55:4b:cc:8d:0a:
68:9a:e9:6c:be:54:82:75:4a:2a:6a:8a:93:09:f0:84:c0:f2:
53:98:6e:17:41:58:00:e6:d6:53:7f:c3:04:7b:5c:e9:5a:69:
78:19:1c:81:ff:35:e8:d5:17:88:bf:d4:53:7e:cd:c0:42:6b:
cb:b6:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:17:01 2026 by rpki-client