Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/DcdSJe_ojMmOF7vVB0gDe1GQPlI.roa
File: DcdSJe_ojMmOF7vVB0gDe1GQPlI.roa (raw, json)
Hash identifier: oKVTHzK5lAE8WSs7v2rxgohHNOq60DwEv/a5x+1uHf0=
Subject key identifier: 0D:C7:52:25:EF:E8:8C:C9:8E:17:BB:D5:07:48:03:7B:51:90:3E:52
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 01A12023BEDFA710B611C8276C7A2593F61A
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/DcdSJe_ojMmOF7vVB0gDe1GQPlI.roa
Signing time: Fri 09 Oct 2026 10:09:35 +0000
ROA not before: Fri 09 Oct 2026 10:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 31.172.152.0/21 maxlen: 21
37.44.48.0/21 maxlen: 21
185.59.116.0/22 maxlen: 22
185.127.60.0/22 maxlen: 22
185.127.84.0/22 maxlen: 22
185.227.44.0/22 maxlen: 22
2a03:7b80::/32 maxlen: 32
2a06:c780::/29 maxlen: 29
2a06:c840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:23:be:df:a7:10:b6:11:c8:27:6c:7a:25:93:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Oct 9 10:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dc75225efe88cc98e17bbd50748037b51903e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:36:70:11:ff:5d:d4:d6:15:24:e2:70:73:
ad:a2:68:c4:57:0c:19:1d:f7:0a:7c:c0:f6:37:2e:
73:6c:c7:0b:74:8e:9c:69:4c:f3:35:b0:9b:a1:6b:
c5:88:72:c4:d4:d6:99:f2:65:78:3e:d5:33:c6:83:
2e:c2:df:fd:ef:c6:2e:1d:ee:b3:ac:1c:fa:9a:dd:
29:b5:1e:f2:e8:db:fa:26:1c:fe:8a:05:c4:6b:c1:
fc:d8:2e:6c:90:0e:ef:46:4b:42:9d:a1:80:0a:13:
21:98:5d:f9:ba:1f:24:ed:a0:f4:6d:65:34:65:28:
03:54:65:53:c5:15:fd:d7:90:3d:f1:10:0f:24:bf:
21:a9:55:da:b7:72:ea:6e:94:6b:3c:8f:1e:38:a4:
b2:c2:be:89:34:3b:32:11:e0:4c:b0:f8:d8:36:b4:
6c:7c:46:92:2e:54:1e:55:a3:f1:ba:88:eb:69:65:
ff:d9:c6:27:96:f0:17:4f:bc:2e:24:9d:ec:65:2b:
77:a9:7a:61:b2:c3:04:9d:63:e1:2b:8c:11:95:27:
76:f6:88:c3:28:7d:96:05:3a:e4:fb:ee:a5:f4:68:
78:f4:df:70:9c:00:7a:ba:91:8c:8a:99:7f:e1:06:
ef:ef:ad:d3:f2:32:a3:be:cf:b5:b9:29:12:06:6b:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:52:25:EF:E8:8C:C9:8E:17:BB:D5:07:48:03:7B:51:90:3E:52
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/DcdSJe_ojMmOF7vVB0gDe1GQPlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.152.0/21
37.44.48.0/21
185.59.116.0/22
185.127.60.0/22
185.127.84.0/22
185.227.44.0/22
IPv6:
2a03:7b80::/32
2a06:c780::/29
2a06:c840::/29
Signature Algorithm: sha256WithRSAEncryption
86:34:a8:69:ed:5e:4e:82:26:5d:e2:c1:81:16:f4:94:f0:9e:
24:f2:d1:40:f1:7a:1a:5e:1e:84:a7:96:88:11:48:8f:ee:ff:
8a:59:cb:86:57:95:4a:29:dc:9b:cd:d7:0c:b0:ce:e7:a2:3d:
f9:a8:d3:62:5e:fe:03:d6:41:30:72:24:63:5a:b4:bc:52:dd:
bf:22:7a:f3:d1:f0:ca:d2:5a:cc:fb:6b:39:5c:db:4c:69:4e:
92:5d:0c:cc:b7:1e:25:a5:60:b2:16:1a:ac:87:df:bb:13:af:
7e:0f:8d:1e:4c:1c:3f:d1:ae:1a:f3:cd:87:2e:39:f8:0e:28:
f2:dd:32:f0:a9:e3:18:8b:f7:f7:c8:4b:e3:a8:83:f0:08:54:
0b:8b:38:e7:7a:6e:4a:70:19:8e:2a:ba:4c:01:73:e2:2b:83:
3e:88:79:ab:6e:1e:d3:0a:f1:0b:51:89:22:8d:0f:42:4c:9c:
cc:14:28:c8:72:cf:17:88:e2:bc:c1:3f:ee:28:e8:2e:0e:bc:
2b:3b:73:6d:16:80:c8:00:d0:98:c2:08:2a:97:94:f7:5d:86:
2d:f3:b4:56:e8:45:cc:78:15:cb:10:83:c5:5b:cc:06:06:a6:
c7:9f:c9:b7:f0:ff:01:93:96:ea:60:1e:67:9e:32:4f:8c:68:
11:11:8a:42
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAaEgI77fpxC2EcgnbHolk/YaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDBmYzk2NDA0Mjg5YWM1OGI2MTA0N2RkZjg2MjE4N2Y1
YWIyN2UwHhcNMjYxMDA5MTAwOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGM3NTIyNWVmZTg4Y2M5OGUxN2JiZDUwNzQ4MDM3YjUxOTAzZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4682cBH/XdTWFSTicHOtomjEVwwZ
HfcKfMD2Ny5zbMcLdI6caUzzNbCboWvFiHLE1NaZ8mV4PtUzxoMuwt/978YuHe6z
rBz6mt0ptR7y6Nv6Jhz+igXEa8H82C5skA7vRktCnaGAChMhmF35uh8k7aD0bWU0
ZSgDVGVTxRX915A98RAPJL8hqVXat3LqbpRrPI8eOKSywr6JNDsyEeBMsPjYNrRs
fEaSLlQeVaPxuojraWX/2cYnlvAXT7wuJJ3sZSt3qXphssMEnWPhK4wRlSd29ojD
KH2WBTrk++6l9Gh49N9wnAB6upGMipl/4Qbv763T8jKjvs+1uSkSBmsmswIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFA3HUiXv6IzJjhe71QdIA3tRkD5SMB8GA1UdIwQY
MBaAFKYA/JZAQomsWLYQR934Yhh/WrJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2Mjkt
MjEyOGQ4NDBjNDI5LzEvRGNkU0plX29qTW1PRjd2VkIwZ0RlMUdRUGxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2MjktMjEyOGQ4NDBjNDI5
LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAqBAIAATAkAwQDH6yYAwQD
JSwwAwQCuTt0AwQCuX88AwQCuX9UAwQCueMsMBsEAgACMBUDBQAqA3uAAwUDKgbH
gAMFAyoGyEAwDQYJKoZIhvcNAQELBQADggEBAIY0qGntXk6CJl3iwYEW9JTwniTy
0UDxehpeHoSnlogRSI/u/4pZy4ZXlUop3JvN1wywzueiPfmo02Je/gPWQTByJGNa
tLxS3b8ievPR8MrSWsz7azlc20xpTpJdDMy3HiWlYLIWGqyH37sTr34PjR5MHD/R
rhrzzYcuOfgOKPLdMvCp4xiL9/fIS+Oog/AIVAuLOOd6bkpwGY4qukwBc+Irgz6I
eatuHtMK8QtRiSKND0JMnMwUKMhyzxeI4rzBP+4o6C4OvCs7c20WgMgA0JjCCCqX
lPddhi3ztFboRcx4FcsQg8VbzAYGpsefybfw/wGTlupgHmeeMk+MaBERikI=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:52:55 2026 by rpki-client