Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/DR9VqkVtbZff3gkUBcaPLf1vbp4.roa
File: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (raw, json)
Hash identifier: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=
Subject key identifier: 0D:1F:55:AA:45:6D:6D:97:DF:DE:09:14:05:C6:8F:2D:FD:6F:6E:9E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0287B5B92A99B7E23500837A786465BB0
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/DR9VqkVtbZff3gkUBcaPLf1vbp4.roa
Signing time: Sat 22 Aug 2026 07:59:28 +0000
ROA not before: Sat 22 Aug 2026 07:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201949
IP address blocks: 45.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:7b:5b:92:a9:9b:7e:23:50:08:37:a7:86:46:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 22 07:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d1f55aa456d6d97dfde091405c68f2dfd6f6e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:a4:f1:2d:e1:07:83:d4:45:c4:8a:60:a0:
b8:80:cd:e9:80:f3:fa:56:25:75:1f:ff:cf:00:e5:
23:59:0b:47:a9:1d:04:3c:25:e0:4d:a8:dd:58:cc:
1f:80:d1:11:63:52:fc:1a:2c:fe:5e:6c:82:49:14:
80:10:66:bd:3c:e2:a4:ee:e3:f0:dc:2e:a3:5b:63:
2b:a8:41:ba:96:a2:5a:59:e1:01:c2:81:c3:77:4c:
8f:bd:04:35:5c:3d:6c:70:38:4d:f4:00:db:af:e3:
2f:4f:cd:8a:b0:36:16:2b:12:3c:7c:11:58:0c:68:
d4:64:a3:f9:4a:d1:cf:ba:7b:eb:62:52:7c:b2:f4:
e7:c5:60:1d:83:4f:8d:57:7c:cf:dc:81:02:db:a1:
c9:fd:ad:36:3f:7f:c8:fd:21:25:32:46:21:62:e4:
ee:b7:f7:a5:1e:08:96:b9:c7:70:15:9a:1a:13:46:
0c:e2:13:1b:d3:8b:f5:5f:16:9f:ab:b4:9a:1a:78:
d4:ae:73:e7:12:3f:b7:1f:ea:d7:c4:70:ed:7e:05:
fd:18:cc:18:92:4f:04:39:2e:23:b8:46:55:c0:24:
c2:67:86:de:a3:83:02:b3:ad:4b:fc:00:16:0b:67:
2c:3d:de:4f:8c:27:53:9a:bc:c5:2a:a9:a3:55:69:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:55:AA:45:6D:6D:97:DF:DE:09:14:05:C6:8F:2D:FD:6F:6E:9E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/DR9VqkVtbZff3gkUBcaPLf1vbp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
57:24:c5:2b:3f:db:65:2d:74:05:6b:cc:75:47:4b:82:0b:15:
1a:fe:2a:ba:fe:29:94:0a:a1:a8:e6:2c:80:bd:cb:a0:0c:c6:
80:7e:fa:64:82:f3:0e:89:1d:01:94:60:31:93:4c:5d:58:55:
e5:03:cc:08:98:a0:33:7b:11:cb:ac:bf:d9:84:5f:a0:db:15:
68:97:a0:ae:c3:57:82:fa:e3:b5:ca:43:56:16:ed:21:19:03:
29:16:36:04:26:27:1b:3b:a0:d2:97:de:b4:ad:2c:d7:71:2a:
21:d8:e3:31:e8:35:eb:c2:6d:b2:49:a8:78:76:7e:83:4f:36:
d0:d7:a1:32:ed:e0:31:e1:d6:6f:3d:25:45:d3:0e:dd:d0:fd:
c8:93:20:47:9d:ef:b3:4b:e7:8d:de:64:da:2c:10:19:db:1d:
dc:17:a7:58:ab:c1:24:c5:78:8e:80:85:9f:10:98:0b:9b:a2:
2b:30:d8:28:9e:da:ee:19:25:ab:ae:4b:2d:fe:47:75:04:48:
18:44:53:1a:01:ae:e0:4e:29:bd:21:55:82:15:48:15:54:7f:
bb:42:f7:07:ec:34:e2:5c:2a:af:19:9c:10:33:2c:c0:8d:20:
7d:52:22:26:57:a3:23:ec:3a:43:2e:15:00:a4:c6:33:f4:63:
83:9b:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:58:45 2026 by rpki-client