Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/DLDa9wddn_4RFw765Gxy0no1W_4.roa
File: DLDa9wddn_4RFw765Gxy0no1W_4.roa (raw, json)
Hash identifier: z3tqPz4baapq7OlV/u29WEMBNiS4i7rakp151gvivTQ=
Subject key identifier: 0C:B0:DA:F7:07:5D:9F:FE:11:17:0E:FA:E4:6C:72:D2:7A:35:5B:FE
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 01A00B76C34F997FE199D34B512B294C346E
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/DLDa9wddn_4RFw765Gxy0no1W_4.roa
Signing time: Sun 16 Aug 2026 16:45:27 +0000
ROA not before: Sun 16 Aug 2026 16:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57521
IP address blocks: 45.10.39.0/24 maxlen: 24
2a13:bc1::/32 maxlen: 32
2a13:bc1::/44 maxlen: 48
2a13:bc1:c0::/44 maxlen: 48
2a13:bc2::/48 maxlen: 48
2a13:bc2:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 09:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:76:c3:4f:99:7f:e1:99:d3:4b:51:2b:29:4c:34:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Aug 16 16:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cb0daf7075d9ffe11170efae46c72d27a355bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:1c:a8:1d:8f:e9:2a:93:5b:96:cc:e4:44:
9a:49:64:0c:7b:e0:7d:6e:ac:34:4b:84:70:b3:58:
4b:18:7d:8e:c5:44:1a:61:38:7e:22:81:4a:e4:90:
2e:b8:d4:22:bc:b3:60:9b:3e:4a:93:06:2d:be:2e:
35:9a:b0:61:ad:62:ae:6f:48:16:32:80:3a:0f:57:
92:3c:bb:1d:b9:c7:3d:dd:5d:30:b8:bd:29:8b:0a:
58:64:61:de:65:74:08:f5:a3:cf:d2:e9:30:36:19:
4c:3c:fd:f3:11:9e:32:4f:4e:b1:2e:49:dd:7b:2b:
5b:dc:bb:9e:b3:22:00:e0:1b:35:76:86:26:94:c4:
23:41:27:07:2f:2d:e4:83:42:26:59:b5:90:ee:54:
a3:e5:1f:ea:9b:c6:e3:79:e3:6b:8d:f4:6b:e9:85:
c5:6b:c5:50:ab:c9:a2:e8:8a:b1:00:ab:62:f0:96:
76:f4:a5:74:95:33:3d:f5:a5:e4:0c:43:4d:1f:47:
2e:52:de:8b:57:c9:37:f8:a5:10:13:68:46:f7:7d:
e5:9f:52:44:b9:fe:bf:23:4b:10:78:ef:01:23:c7:
39:4e:19:a7:ca:ec:fd:40:90:dd:e3:15:e6:ec:aa:
10:5b:d6:03:66:00:d4:1c:3b:31:57:c9:0c:62:44:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:DA:F7:07:5D:9F:FE:11:17:0E:FA:E4:6C:72:D2:7A:35:5B:FE
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/DLDa9wddn_4RFw765Gxy0no1W_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.39.0/24
IPv6:
2a13:bc1::-2a13:bc2:0:ffff:ffff:ffff:ffff:ffff
2a13:bc2:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
97:f8:8c:6a:22:d0:93:fc:0e:13:9e:31:d2:ff:47:65:cb:04:
49:dd:a1:a5:39:a4:84:5b:8b:4b:7b:fb:12:e0:a8:8b:52:1f:
0c:8c:c3:cc:16:2d:c7:e2:af:2e:ae:19:fb:f9:b2:fc:3e:1c:
c2:6c:00:74:f8:b3:43:2a:5c:49:76:26:ec:5e:60:de:e3:d9:
25:a0:f6:7e:b6:58:bc:6f:fb:ff:87:00:39:da:41:19:5f:e0:
33:13:38:78:70:70:cb:e2:63:eb:71:3c:53:da:1e:6f:7f:7e:
d1:b7:c3:80:13:87:12:5f:82:ca:c4:b3:05:07:6a:04:73:a2:
55:ba:bd:9b:55:03:41:7c:90:62:15:f3:83:98:bb:ba:a4:74:
1e:39:71:72:65:63:a3:03:49:dd:80:5b:e4:4e:37:28:e9:02:
18:a1:77:90:9c:cf:8c:bc:a3:46:d9:ac:03:92:66:48:55:d9:
01:e4:ba:61:c3:ff:98:36:54:58:01:2f:b2:38:4a:0f:3e:6e:
c0:69:54:8e:53:b8:bb:d7:49:0b:db:db:7f:3a:94:78:80:42:
8e:5f:02:3c:79:1c:31:9c:e5:13:7a:fd:da:54:3e:e5:be:e5:
1e:8b:90:7d:c3:3a:db:cd:bd:33:80:e8:47:8d:d7:6f:81:57:
c1:85:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 14:20:13 2026 by rpki-client