Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/DCqCb_mFehnRF04MWwWhiZGFy2s.roa
File: DCqCb_mFehnRF04MWwWhiZGFy2s.roa (raw, json)
Hash identifier: hBwRUVH63MvIYesZ1GBehKeF1wWcH7teYvi7RaedN7w=
Subject key identifier: 0C:2A:82:6F:F9:85:7A:19:D1:17:4E:0C:5B:05:A1:89:91:85:CB:6B
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019EC02F631EEA9C3B7AD1291EF5CC7931F3
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/DCqCb_mFehnRF04MWwWhiZGFy2s.roa
Signing time: Sat 13 Jun 2026 08:53:11 +0000
ROA not before: Sat 13 Jun 2026 08:53:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51907
IP address blocks: 193.134.8.0/21 maxlen: 24
193.134.16.0/20 maxlen: 24
2a10:8240::/29 maxlen: 48
2a10:8244::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:2f:63:1e:ea:9c:3b:7a:d1:29:1e:f5:cc:79:31:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Jun 13 08:53:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c2a826ff9857a19d1174e0c5b05a1899185cb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:9d:9c:1c:61:95:3c:49:6a:4f:2c:0d:33:
60:f3:15:44:ee:89:c5:a0:cc:5f:2a:55:75:ba:cb:
f7:57:44:1a:58:c0:a9:7d:e1:37:91:cd:77:85:49:
55:91:af:04:91:c9:fd:98:2d:dc:bf:61:f4:8c:b9:
f3:9d:3b:a4:44:83:8e:0c:9f:fa:d6:f9:80:23:d1:
49:98:61:10:75:ab:0a:b7:60:f9:e9:9a:8d:9d:42:
d3:eb:83:7f:e0:21:74:11:d4:0d:ad:cf:6c:eb:ea:
cd:20:00:ef:70:53:5d:56:54:35:ab:47:f3:19:e6:
b2:e4:35:9e:52:3d:50:8a:f9:21:a4:78:5a:f1:c7:
e9:9e:53:c4:1b:0d:01:48:04:cc:3c:7d:a8:1b:75:
ef:2f:c2:b2:f4:32:10:5a:15:a9:1f:bd:4e:76:56:
c1:99:75:3f:27:07:3a:ff:ce:05:d5:c2:8b:b9:81:
5a:53:76:0f:a0:f6:21:77:6e:8b:9e:c3:82:84:c9:
0c:46:87:43:7f:2e:62:1d:8a:08:ae:d8:5b:c0:6b:
21:01:b5:2d:5c:0f:72:7a:8d:5a:66:f4:42:ab:3c:
17:28:59:8d:54:24:cc:d0:18:d3:60:ea:3c:7b:4c:
60:3f:72:c6:b9:0d:60:2d:38:76:11:52:0a:d9:af:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2A:82:6F:F9:85:7A:19:D1:17:4E:0C:5B:05:A1:89:91:85:CB:6B
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/DCqCb_mFehnRF04MWwWhiZGFy2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.8.0-193.134.31.255
IPv6:
2a10:8240::/29
Signature Algorithm: sha256WithRSAEncryption
8d:61:de:9b:22:dc:22:01:19:1b:1e:b3:44:11:7a:70:04:48:
11:ff:9f:b2:aa:e9:73:cd:96:0b:26:30:1c:a5:8d:46:49:6d:
4e:30:4d:3a:21:c4:b8:df:de:dd:c7:46:ce:ff:f9:c3:fb:b4:
75:d6:2f:0b:7d:40:04:b6:6e:10:b0:95:73:73:5e:e4:60:6c:
0c:15:4e:17:0b:dc:a0:8c:c3:b2:55:ef:3a:f6:7a:7f:90:f4:
e2:4d:3b:d6:dd:a1:14:fc:9d:c3:e5:c1:22:6e:57:ba:5c:e9:
37:ac:2f:a4:fa:a4:f0:8a:d2:7a:06:48:14:b7:a6:e7:4b:c9:
ad:0f:f3:fa:de:0f:3b:b8:a2:ec:f6:cd:f0:4f:7c:d3:71:f0:
6d:28:00:cf:3c:1f:9e:ac:28:92:a0:48:9a:6f:ce:29:f2:f6:
f1:01:62:02:2b:70:a9:ab:fa:21:83:21:d0:63:73:3f:4b:e3:
b2:c9:d5:c1:a8:3b:2f:44:96:04:77:7a:8c:b8:44:b9:93:79:
74:cc:62:91:7a:f5:66:ac:9d:f3:1a:8a:44:bd:bc:48:06:be:
7f:44:34:88:e3:23:37:71:97:b9:50:38:71:55:c3:d1:1b:49:
31:2c:e1:f9:05:75:dc:60:8d:7b:2f:ce:33:42:99:d4:04:50:
0a:b8:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:27 2026 by rpki-client