Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/DMGI7NAA-WGSJjix6sBhWnyG1GA.roa
File: DMGI7NAA-WGSJjix6sBhWnyG1GA.roa (raw, json)
Hash identifier: ZMSyrLmf/FWYNHoizIFNaKJ++96SXaUnhsIK93E/Rq0=
Subject key identifier: 0C:C1:88:EC:D0:00:F9:61:92:26:38:B1:EA:C0:61:5A:7C:86:D4:60
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 01A159445A608C62B458E1A820546C53E00B
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/DMGI7NAA-WGSJjix6sBhWnyG1GA.roa
Signing time: Tue 20 Oct 2026 12:23:34 +0000
ROA not before: Tue 20 Oct 2026 12:23:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44283
IP address blocks: 185.151.64.0/22 maxlen: 22
185.151.64.0/23 maxlen: 23
185.151.66.0/23 maxlen: 23
185.151.67.0/24 maxlen: 24
2a13:7300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:44:5a:60:8c:62:b4:58:e1:a8:20:54:6c:53:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Oct 20 12:23:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cc188ecd000f961922638b1eac0615a7c86d460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:e2:1c:7d:68:cb:ba:47:19:95:22:1e:f5:
75:95:a0:43:76:61:2a:a8:af:29:fe:d3:6e:f8:80:
c2:4c:d4:b1:aa:da:fc:98:59:94:72:7b:8c:c2:77:
3b:e2:46:86:16:4e:8a:64:11:d3:ae:b2:c8:44:f8:
72:c3:21:a9:b6:6a:d6:1e:3e:40:49:6e:e8:7a:f6:
86:94:64:df:c5:54:7a:6f:82:f6:27:2f:90:8c:9e:
02:bd:d9:cf:10:6b:ab:fb:5e:a9:d2:b8:e5:b9:d5:
85:b5:58:d9:87:f9:ab:af:25:16:81:7a:72:b4:d3:
a3:c7:d2:ec:d4:e0:72:d3:c4:42:fb:4e:2f:35:f8:
34:a9:8a:85:95:29:79:da:36:54:b6:b9:a5:46:48:
15:b3:98:92:9c:6c:4c:32:d3:3a:53:3b:6d:50:8f:
a5:16:f1:b9:1e:0b:cc:f8:31:a8:f1:ba:ae:7b:b2:
0c:72:1d:ee:9d:d0:75:04:bc:bc:6c:aa:50:72:b3:
dd:c0:f1:f3:11:61:f8:61:14:e2:85:ae:3c:4b:1a:
7a:3a:e2:73:ec:c3:ed:8d:3c:c4:7b:00:df:b2:3d:
d4:56:da:1e:b8:3e:14:88:06:f5:1b:a1:4d:4e:d3:
ed:41:cd:16:0f:36:15:ec:3a:2b:87:c3:d1:06:43:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:88:EC:D0:00:F9:61:92:26:38:B1:EA:C0:61:5A:7C:86:D4:60
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/DMGI7NAA-WGSJjix6sBhWnyG1GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.64.0/22
IPv6:
2a13:7300::/29
Signature Algorithm: sha256WithRSAEncryption
97:d5:13:f5:55:15:f5:09:93:a4:77:da:6c:0b:03:a6:86:30:
2d:16:97:3c:f2:ca:9c:13:19:8d:51:ed:1c:9c:65:5d:ea:dd:
27:d2:2b:36:22:cf:dc:65:9a:c6:84:3f:17:f9:db:e3:34:ac:
e3:42:e9:48:08:33:01:cb:c7:2e:48:10:42:ed:8d:a5:09:39:
80:f6:94:19:29:9c:9a:36:1f:99:38:1c:b9:ae:35:8f:c1:cf:
1c:23:a2:09:54:90:f7:24:67:8f:c4:9e:c6:ac:16:cf:ae:99:
ae:71:53:dc:4d:3f:3f:4b:40:46:16:ba:9e:83:73:53:26:4d:
29:1c:22:47:04:d4:ab:28:4a:f0:93:07:83:43:22:25:23:25:
8d:ad:50:8b:db:cf:43:3a:53:9d:69:d5:f8:54:c0:c7:08:9d:
08:f4:ac:f8:bd:fd:7c:28:99:5a:56:51:e3:10:bc:55:2f:61:
21:7c:17:bb:19:2f:cd:a4:16:0b:f9:f4:a6:3e:a0:63:9d:4d:
f4:25:e2:74:c9:5e:3d:00:ff:31:36:03:4a:25:cb:88:2b:31:
0e:3e:35:5a:e1:b7:ab:e8:e5:f4:dd:bf:a1:a9:67:67:4b:fa:
d8:d5:c4:04:92:db:d8:ea:03:b8:c0:47:23:ee:64:f3:41:69:
62:92:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:51:37 2026 by rpki-client