Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa
File: Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa (raw, json)
Hash identifier: y8aICBxGhhhT6yCX7J0nu8TCySSKB7GMI2H8C1V8oWQ=
Subject key identifier: 0E:DF:1F:C3:47:C1:11:C1:2D:CB:89:A3:D6:57:97:34:04:20:67:DB
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019DD38431D7BA8A4137A56FFDDD00A6822E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa
Signing time: Tue 28 Apr 2026 09:55:49 +0000
ROA not before: Tue 28 Apr 2026 09:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51156
IP address blocks: 62.3.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:84:31:d7:ba:8a:41:37:a5:6f:fd:dd:00:a6:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 28 09:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0edf1fc347c111c12dcb89a3d6579734042067db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:d7:05:3f:59:84:b2:d3:5f:19:06:ad:a9:
c8:3b:ea:32:70:c5:65:90:4e:6e:5f:65:63:3e:a3:
0b:93:bb:7c:58:5c:9f:78:c0:5e:ba:b5:f3:79:8a:
15:6a:07:36:2b:7f:9e:55:52:a6:b4:38:d0:61:4d:
f2:eb:e2:83:50:f7:99:72:6b:a5:c7:0a:5f:59:a0:
86:a2:54:a2:82:77:0a:c7:44:ff:a0:ba:d2:3e:3e:
d6:b4:e4:03:c3:ed:61:82:9a:fd:6e:f4:77:b8:bc:
85:e0:22:1b:6a:49:e8:33:fb:a7:ab:17:0c:76:a8:
ba:8c:2a:af:96:36:a8:60:4f:e7:02:d0:e1:ae:e6:
9d:98:fc:0c:7a:eb:1a:c0:86:de:42:51:b0:29:1b:
ce:5c:1e:f4:67:71:84:42:d4:a0:55:f5:d7:f2:6c:
d3:df:48:55:68:15:aa:55:5c:14:8a:b4:f0:b1:38:
5f:c5:00:78:9e:36:2e:fb:0f:71:f0:17:3c:c5:ba:
e4:03:ce:c3:b9:09:d6:ae:c2:85:5e:37:2f:72:52:
44:9e:aa:58:c9:ff:93:89:88:01:72:ff:a9:68:a2:
83:70:47:8d:53:43:9b:f0:d2:5d:e3:cf:5b:04:c3:
55:f1:c9:f3:3b:6e:bf:a6:1b:a9:27:57:a3:32:98:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:1F:C3:47:C1:11:C1:2D:CB:89:A3:D6:57:97:34:04:20:67:DB
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.63.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:e5:e4:65:75:cb:45:2f:11:a8:49:f3:94:f1:bc:55:18:98:
c6:2b:64:7e:63:bd:af:18:f4:48:12:97:4e:cd:9e:46:a5:69:
61:bf:a2:c5:59:94:40:8a:1b:f5:2b:ae:40:d8:eb:d7:2c:33:
01:66:b6:dd:a0:06:5f:62:93:50:f2:c9:4e:39:69:4b:d3:5b:
5f:d3:ff:0c:ee:43:4a:d7:02:54:18:28:be:ac:df:e4:4d:af:
14:36:11:5d:4e:fa:44:c0:6c:60:4a:52:71:aa:56:e4:05:af:
ea:7b:48:66:b8:33:dd:6a:22:a0:b8:48:e5:36:8c:e4:dc:3b:
d4:a0:c1:fa:9c:fc:04:a1:e5:35:29:1e:c7:a2:27:b6:a3:ae:
07:de:82:3f:3a:28:54:72:8d:e6:8e:42:16:43:86:2f:19:6e:
f3:d2:ff:a3:61:06:5d:90:b1:df:d7:71:e0:80:a3:51:c7:6e:
38:8d:2f:bc:2e:f3:b7:27:a0:1f:5f:ad:1a:74:5b:3b:e9:8e:
05:21:77:7f:b5:4e:46:63:8c:c1:5e:96:d0:e3:8e:b9:42:26:
45:33:81:44:e3:80:4f:2f:a0:53:d7:62:0e:75:20:37:f6:a5:
4a:79:19:61:50:72:89:d5:a7:4f:8b:03:3a:fc:b8:dc:cd:b4:
2b:a4:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:19 2026 by rpki-client