Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/djDphXEUQBdX3R-46qlc_mVjIWM.roa
File: djDphXEUQBdX3R-46qlc_mVjIWM.roa (raw, json)
Hash identifier: kRTKow+YAequmrCl7iJcVr6r44o9uLfJr2UgqP80lNc=
Subject key identifier: 76:30:E9:85:71:14:40:17:57:DD:1F:B8:EA:A9:5C:FE:65:63:21:63
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019A7DFE6E3D35D89213368B2D2726C6400F
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/djDphXEUQBdX3R-46qlc_mVjIWM.roa
Signing time: Thu 13 Nov 2025 16:13:37 +0000
ROA not before: Thu 13 Nov 2025 16:13:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32132
IP address blocks: 146.247.107.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 20:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7d:fe:6e:3d:35:d8:92:13:36:8b:2d:27:26:c6:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 13 16:13:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7630e9857114401757dd1fb8eaa95cfe65632163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:39:bd:c4:f3:34:2e:a5:44:53:72:b6:b9:
3a:4b:8b:7f:94:ea:ea:2e:9e:3d:c7:43:44:fd:bc:
1d:19:53:a9:0a:e8:fc:bc:32:70:4d:c9:f0:a1:29:
07:0f:34:1f:de:d5:74:c6:e6:7d:65:ef:e3:6b:05:
fb:94:c7:a8:76:b8:9a:0e:40:f6:b1:01:91:a8:d7:
f8:9e:1a:3d:84:b1:aa:3c:ad:aa:e0:53:11:97:61:
dd:57:eb:7c:f6:cf:fc:7e:47:33:16:ab:ce:60:3b:
a7:05:26:78:4b:75:ff:ea:31:7c:08:8f:d4:ea:31:
ea:d3:75:c0:6f:46:7c:ff:28:e0:91:f1:8a:5c:5f:
0f:34:3c:2d:51:f5:33:fe:1d:7c:83:a4:67:c9:c9:
ce:1a:fe:53:d6:9e:01:a9:a3:38:9f:7a:0a:44:e1:
8c:4c:dc:61:e6:ea:2d:72:8d:af:01:c8:a3:48:b3:
95:03:f0:2d:a3:ce:28:c8:bf:3e:e8:0a:e3:d5:11:
7b:24:6f:4d:0e:6c:b5:25:95:53:18:e4:62:3d:f5:
52:00:35:fc:0f:fa:5f:ac:6a:d3:fa:64:f0:90:a2:
4d:7c:ad:26:61:98:2e:94:a7:bf:70:42:e6:0f:66:
5e:11:06:40:2d:5c:08:1c:77:fa:1f:b7:1b:76:2c:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:E9:85:71:14:40:17:57:DD:1F:B8:EA:A9:5C:FE:65:63:21:63
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/djDphXEUQBdX3R-46qlc_mVjIWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0/24
146.247.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:19:94:7f:4f:76:c6:87:e4:45:05:22:33:b6:9c:6e:3f:d3:
bc:bd:ec:60:73:39:4e:ef:90:2b:b7:95:85:74:63:a8:38:3e:
eb:b0:30:a1:83:a7:97:58:11:c9:85:f5:b7:4b:8d:58:37:d1:
24:4b:8d:9a:25:ce:4a:eb:e5:8c:96:9f:07:85:41:f2:10:f3:
f6:e7:a7:20:4e:3e:d8:6a:1c:48:3f:36:f9:bf:25:ef:ca:d1:
b5:3f:d1:64:c8:83:82:69:c1:6d:5a:35:e3:aa:40:fe:3e:b8:
53:04:cc:bf:a9:7b:b5:0b:b4:21:fb:e2:d1:f1:ab:66:a4:43:
55:06:39:e2:d8:b4:87:e8:f5:aa:26:8d:1c:8e:16:26:89:5c:
e2:0f:7d:18:ac:6f:45:16:86:80:45:9d:17:31:67:3a:a2:2b:
bf:0e:ce:12:0e:93:01:74:8b:11:84:94:e3:f9:31:db:31:a5:
92:3c:24:69:13:c4:e0:e6:07:db:f5:89:4b:40:89:9c:72:79:
5e:e9:50:6f:a2:f1:c5:42:73:0e:c5:a1:fc:b0:6d:67:af:83:
56:78:d5:8e:d9:4f:8e:1a:6e:e4:eb:55:29:0f:bc:57:42:1b:
d5:c5:cb:4a:be:83:3e:a1:4e:43:93:d0:30:bc:9e:80:0f:3c:
db:97:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 06:36:51 2025 by rpki-client