Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DdBJSBgXLb2p1jsAzKWiK5jo4BA.roa
File: DdBJSBgXLb2p1jsAzKWiK5jo4BA.roa (raw, json)
Hash identifier: j91f6In27lqr3uqGjE1//EOIcpaOE/496/YZpiGeEhE=
Subject key identifier: 0D:D0:49:48:18:17:2D:BD:A9:D6:3B:00:CC:A5:A2:2B:98:E8:E0:10
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019CE2337F509B748BC3F414B212E9CF71E8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DdBJSBgXLb2p1jsAzKWiK5jo4BA.roa
Signing time: Thu 12 Mar 2026 13:19:11 +0000
ROA not before: Thu 12 Mar 2026 13:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 88.151.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:33:7f:50:9b:74:8b:c3:f4:14:b2:12:e9:cf:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 12 13:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dd0494818172dbda9d63b00cca5a22b98e8e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:cc:4a:23:65:3a:ac:44:94:6f:f8:a1:5b:
08:27:87:2a:9c:2b:bf:6b:a5:c1:e1:81:20:68:91:
dd:23:f8:16:86:4a:ab:cf:5a:75:2a:ad:ea:21:ba:
46:3f:e9:0e:4a:c6:08:6c:64:eb:e7:2f:2a:0e:ea:
17:60:a1:f8:4b:4e:66:ae:4f:e2:c5:6c:f5:e9:3e:
2e:77:fc:12:d7:f2:50:c2:88:07:e0:94:9d:48:d4:
13:3d:0d:f1:9e:06:1d:a3:fb:fc:4a:34:6a:e8:f7:
45:8a:99:6e:70:c9:d4:72:c8:d8:da:7e:65:31:b3:
6f:cb:67:68:47:ce:1e:5f:e4:5b:fd:3b:f6:03:91:
85:0c:81:ec:d2:69:a0:ea:9b:10:02:ce:ba:61:9f:
6d:42:53:e1:45:20:82:9b:e5:3d:c1:15:ce:65:ec:
a9:f9:dc:11:d0:d1:7d:01:f0:4c:6d:76:84:8e:4a:
80:5b:08:31:6f:ca:3b:5c:84:a7:c5:ac:5b:16:cc:
99:64:f6:d0:19:bb:c0:5a:d2:31:f4:49:70:d8:c9:
15:5d:53:4c:51:d9:b7:0a:e9:27:7c:a0:26:ae:cb:
23:27:f0:62:ab:b8:d9:af:7c:64:21:5e:b8:ae:1a:
c7:e6:7f:31:7a:bf:e8:0a:d3:12:7a:1f:e2:00:0d:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D0:49:48:18:17:2D:BD:A9:D6:3B:00:CC:A5:A2:2B:98:E8:E0:10
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DdBJSBgXLb2p1jsAzKWiK5jo4BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.61.0/24
Signature Algorithm: sha256WithRSAEncryption
25:12:12:1a:5b:2a:92:cc:68:f5:3d:d4:77:0e:17:9a:8d:0c:
ed:5c:56:43:de:c0:8e:0b:39:31:c1:97:bf:9d:01:0a:b5:07:
42:94:7a:04:ea:2d:f5:a8:70:d5:4b:e4:b7:22:c6:3d:a7:20:
25:d2:52:cb:d0:4b:19:e7:a7:d1:c6:77:6e:3c:e3:7a:a9:f6:
10:4a:fe:08:f2:74:21:2e:15:b9:97:b4:be:c2:c2:3c:d3:fa:
bb:39:06:53:18:e3:f2:7d:7e:55:37:52:6d:a9:59:ec:b9:04:
1d:58:31:0a:7e:41:44:a1:a2:93:c9:e4:34:fd:5c:4c:86:26:
50:a2:2a:33:8f:48:40:a5:ed:79:b0:e7:28:3c:ce:1d:ad:ce:
c7:94:bb:e1:4d:94:86:d2:7c:d3:fc:8e:d3:04:8b:03:24:0e:
5c:5b:73:ec:5d:da:57:01:78:15:57:91:74:c4:e4:ab:6e:5a:
e1:bd:ad:e7:cc:3b:b1:84:dd:fd:57:cb:48:13:39:9f:79:8c:
90:8f:c3:fc:19:2e:9b:8e:8b:0e:2d:f9:ea:dd:2e:a1:8f:f5:
4b:95:e9:a0:2c:60:44:7a:14:38:2c:55:ac:d7:08:37:ac:24:
38:26:8a:a4:ef:cf:a2:eb:52:97:1a:13:34:fc:88:44:28:c0:
bb:f2:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:22 2026 by rpki-client