Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/DLoi_FVNVtbKfeCiYIr_R31MY6U.roa
File: DLoi_FVNVtbKfeCiYIr_R31MY6U.roa (raw, json)
Hash identifier: 9bwYJoFYkWXExIQ+cBRxfjy/C4rdfubajeMg9M9KLwE=
Subject key identifier: 0C:BA:22:FC:55:4D:56:D6:CA:7D:E0:A2:60:8A:FF:47:7D:4C:63:A5
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 019F6A3E29DB1C8E5ABB0C5AF9EA63CF7B4A
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/DLoi_FVNVtbKfeCiYIr_R31MY6U.roa
Signing time: Thu 16 Jul 2026 09:24:46 +0000
ROA not before: Thu 16 Jul 2026 09:24:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49689
IP address blocks: 195.8.46.0/24 maxlen: 24
2a10:8b40:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:3e:29:db:1c:8e:5a:bb:0c:5a:f9:ea:63:cf:7b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jul 16 09:24:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cba22fc554d56d6ca7de0a2608aff477d4c63a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:f0:ca:a4:7b:82:91:1e:1d:8e:76:8d:23:
28:6f:4f:bd:5c:bc:de:b2:8d:66:16:0f:b0:c9:50:
93:d3:23:2f:cc:ec:69:40:74:06:2e:a9:64:ef:32:
85:55:99:ce:f9:a9:4b:1d:a6:61:31:2b:3b:b8:58:
5b:59:16:66:62:90:0f:b1:63:12:6d:f6:de:a5:50:
2b:f2:7a:f3:29:d2:c8:09:3d:0f:2b:92:51:7a:ef:
ec:12:07:fe:7e:47:cf:fc:55:70:4a:d1:18:75:26:
e6:5e:06:2e:7d:dd:75:70:44:8a:dc:23:93:7a:33:
c9:98:6c:8c:18:75:77:4f:e6:78:35:b7:a7:8f:35:
6d:a0:70:65:1b:01:40:b3:66:1e:f6:02:2c:69:b3:
bd:af:e2:9e:c2:7f:15:f2:8f:bc:3c:86:5c:00:5a:
71:d2:8c:06:43:c7:08:44:a3:9a:95:4b:f4:8c:4e:
d8:d4:ce:d3:0d:1b:56:79:2d:bb:a8:65:4d:54:1d:
26:04:74:e0:93:0d:12:51:93:71:df:06:57:9d:59:
de:1d:31:4d:4a:9d:c9:84:56:f4:23:d3:7d:08:4f:
5f:df:27:49:9c:94:47:8e:a2:aa:e4:0c:e2:81:36:
9f:ca:ca:25:b5:d0:ab:85:5c:4b:17:d6:88:e0:71:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:22:FC:55:4D:56:D6:CA:7D:E0:A2:60:8A:FF:47:7D:4C:63:A5
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/DLoi_FVNVtbKfeCiYIr_R31MY6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.46.0/24
IPv6:
2a10:8b40:1001::/48
Signature Algorithm: sha256WithRSAEncryption
00:f5:27:bb:7b:ed:18:31:40:de:3a:a9:9e:2d:ea:aa:ed:88:
cd:2e:c5:3b:03:be:44:fa:f0:af:70:49:e2:b2:f9:69:00:45:
36:39:49:3f:98:33:ae:35:5d:95:f5:79:45:53:a4:3b:a1:90:
d9:5f:14:e0:d9:73:f3:5a:d3:b5:6f:dd:f6:5e:56:0c:c1:fa:
7e:cf:d0:f7:44:6a:15:ad:40:91:d0:3e:4e:fd:46:b3:09:a7:
82:ad:ce:aa:13:86:ad:9d:fa:35:5d:fa:a6:6b:88:05:e5:cd:
1e:79:41:4b:b2:d3:29:53:97:ad:1c:00:a5:70:a2:e2:a9:5c:
e3:2e:f2:3b:16:55:5b:79:9b:97:52:e3:b2:0f:d7:a2:50:c5:
3b:7b:4b:00:48:6a:43:39:f3:b4:2b:ba:55:0c:65:07:9e:7b:
60:fb:de:a0:03:1f:df:58:44:9f:d5:98:64:24:0d:5d:cd:ec:
c0:47:ba:12:53:0f:dc:22:97:04:96:5a:e7:ed:f6:6e:a1:24:
bd:29:cb:84:c4:2c:0f:be:18:cf:2d:72:b6:9e:d9:29:74:25:
31:54:81:0a:06:35:7b:58:6f:24:c3:1b:73:3d:6d:c4:39:14:
2f:02:7a:02:c9:34:bf:a3:57:50:27:a5:bb:4a:e0:9c:3d:b6:
7b:a3:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:10 2026 by rpki-client