Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa
File: DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa (raw, json)
Hash identifier: hlLBSZz49suArVA71e6KdvynwmbN3saCnQaMyNCoI1M=
Subject key identifier: 0C:2E:00:CC:DF:F4:94:EC:52:05:02:18:39:7F:32:86:1A:B5:6E:47
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019B7BA4C676DE5B2C0C94061864A50D99E4
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa
Signing time: Thu 01 Jan 2026 22:19:14 +0000
ROA not before: Thu 01 Jan 2026 22:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60724
IP address blocks: 185.7.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:c6:76:de:5b:2c:0c:94:06:18:64:a5:0d:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jan 1 22:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c2e00ccdff494ec52050218397f32861ab56e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:24:61:a1:e6:37:f9:40:ae:60:3c:c2:28:
f7:4c:6b:40:d8:28:28:0a:1a:f7:fb:28:44:1b:73:
d5:9b:8e:ba:ee:83:71:cb:ed:38:77:c2:c5:78:6a:
ce:0d:74:db:e7:87:5c:30:37:4e:b9:db:9f:6a:bc:
85:c9:ab:d7:ce:dd:af:42:61:47:4c:3e:c1:4a:2c:
5d:c3:15:f5:c2:99:ad:4d:68:4e:53:08:f4:68:1c:
5f:af:87:5f:90:1b:5b:3f:43:b1:af:78:3e:b5:ab:
90:a4:a4:d3:9a:6c:d0:ef:12:98:24:79:ca:91:a8:
3f:3e:d3:9c:46:76:3f:fe:bc:54:16:a7:43:50:6a:
49:6f:e5:a7:bd:a8:bb:79:e1:24:8e:cb:1b:cc:dd:
08:0e:0d:15:d1:00:07:77:f5:39:1a:a3:dd:6e:e6:
6f:5f:bc:98:8b:21:12:b4:61:e0:7f:8b:9f:7d:59:
81:b1:cb:c2:0e:08:55:f6:33:83:56:20:e7:33:29:
13:e1:44:56:34:c8:04:5a:3e:7e:db:7c:b4:12:7d:
35:06:57:1e:e8:ec:ec:f1:a6:b9:c7:73:1b:f4:28:
e6:f8:e9:c2:6d:cd:39:7a:c6:e1:05:19:9f:13:b5:
66:89:10:34:81:6c:19:4d:ee:92:00:85:69:99:10:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:00:CC:DF:F4:94:EC:52:05:02:18:39:7F:32:86:1A:B5:6E:47
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.44.0/24
Signature Algorithm: sha256WithRSAEncryption
08:37:31:e7:00:84:3a:df:b1:f9:19:89:c5:fe:c0:d0:c8:d2:
f1:22:b2:74:d1:88:35:fc:fb:39:69:70:bc:a8:ca:10:ba:de:
69:97:ee:e9:6a:8a:fc:03:87:6d:aa:e8:1e:2b:45:5b:e4:fd:
cb:bc:9c:19:28:14:ca:92:10:48:e6:3b:03:88:3c:40:cf:91:
1b:46:86:ee:00:a7:0e:a2:62:ec:a8:4c:9f:40:11:62:49:55:
0c:5b:ae:6a:e2:0c:b9:d2:85:9d:80:cf:0c:f7:ac:7d:16:26:
eb:a1:05:25:e6:0d:6b:ad:2b:4e:4a:9a:58:47:6f:61:e7:1d:
44:6f:97:ec:3b:20:7a:05:37:62:bf:56:04:3a:f0:4d:a9:75:
86:e1:a4:53:b7:f5:04:50:ad:5e:50:c6:83:4e:99:27:da:e2:
cf:26:34:bd:62:5b:ed:c5:5d:7b:46:e7:cb:69:e1:59:c2:20:
55:d6:6a:2c:78:31:16:59:23:16:5e:32:03:eb:e2:c8:78:c9:
bc:4f:a6:ed:ed:1c:be:70:79:db:7d:00:3b:be:9b:e3:c1:be:
12:27:15:6a:e9:25:b5:44:81:05:22:b5:f9:09:a4:3b:24:20:
fc:4d:e2:57:bd:5c:3c:44:0f:e4:49:f5:1e:0f:99:7c:e8:97:
16:97:59:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7pMZ23lssDJQGGGSlDZnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDQ5MTU1OGNkMjQ4NzVkYjUyNDI3MzQxMDUwMmZkYWUz
YTY3ODIwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzJlMDBjY2RmZjQ5NGVjNTIwNTAyMTgzOTdmMzI4NjFhYjU2ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7QkYaHmN/lArmA8wij3TGtA2Cgo
Chr3+yhEG3PVm4667oNxy+04d8LFeGrODXTb54dcMDdOudufaryFyavXzt2vQmFH
TD7BSixdwxX1wpmtTWhOUwj0aBxfr4dfkBtbP0Oxr3g+tauQpKTTmmzQ7xKYJHnK
kag/PtOcRnY//rxUFqdDUGpJb+Wnvai7eeEkjssbzN0IDg0V0QAHd/U5GqPdbuZv
X7yYiyEStGHgf4uffVmBscvCDghV9jODViDnMykT4URWNMgEWj5+23y0En01Blce
6Ozs8aa5x3Mb9Cjm+OnCbc05esbhBRmfE7VmiRA0gWwZTe6SAIVpmRDvSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwuAMzf9JTsUgUCGDl/MoYatW5HMB8GA1UdIwQY
MBaAFMxEkVWM0kh121JCc0EFAv2uOmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMt
YzhkNWMwNGUzZDQzLzEvREM0QXpOXzBsT3hTQlFJWU9YOHloaHExYmtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMtYzhkNWMwNGUzZDQz
LzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQcsMA0G
CSqGSIb3DQEBCwUAA4IBAQAINzHnAIQ637H5GYnF/sDQyNLxIrJ00Yg1/Ps5aXC8
qMoQut5pl+7paor8A4dtqugeK0Vb5P3LvJwZKBTKkhBI5jsDiDxAz5EbRobuAKcO
omLsqEyfQBFiSVUMW65q4gy50oWdgM8M96x9FibroQUl5g1rrStOSppYR29h5x1E
b5fsOyB6BTdiv1YEOvBNqXWG4aRTt/UEUK1eUMaDTpkn2uLPJjS9YlvtxV17RufL
aeFZwiBV1moseDEWWSMWXjID6+LIeMm8T6bt7Ry+cHnbfQA7vpvjwb4SJxVq6SW1
RIEFIrX5CaQ7JCD8TeJXvVw8RA/kSfUeD5l86JcWl1n0
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:58 2026 by rpki-client