Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DCqk8iZJ0DTmj9NNJncmKyyG3d0.roa
File: DCqk8iZJ0DTmj9NNJncmKyyG3d0.roa (raw, json)
Hash identifier: rSYvpAwSyEw9Bk7S8nwWpq9TyjCru890a4Cic6RgALo=
Subject key identifier: 0C:2A:A4:F2:26:49:D0:34:E6:8F:D3:4D:26:77:26:2B:2C:86:DD:DD
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C23AA2BF0F9340ABE5A2D235E37312006
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DCqk8iZJ0DTmj9NNJncmKyyG3d0.roa
Signing time: Tue 03 Feb 2026 13:21:20 +0000
ROA not before: Tue 03 Feb 2026 13:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
37.32.43.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:aa:2b:f0:f9:34:0a:be:5a:2d:23:5e:37:31:20:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 3 13:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c2aa4f22649d034e68fd34d2677262b2c86dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:4d:15:d0:a3:bc:21:75:85:ea:ee:49:b7:
6f:0d:ec:fd:ff:bc:96:3f:86:8e:66:4d:b3:cb:91:
c8:10:3b:32:4e:2f:42:ac:a3:4d:60:19:66:5e:81:
d1:30:98:67:4b:65:6e:17:6b:5b:f8:77:99:bd:b8:
79:36:3a:2a:59:ac:ab:bd:f6:7d:af:9c:09:c6:96:
4d:8b:65:f2:ef:c1:ca:cd:c4:19:32:05:0d:ef:55:
64:e0:60:f7:06:a8:cc:9f:d4:4e:de:30:f3:2a:e7:
75:64:bb:b0:d1:ec:68:5a:2f:bf:d2:83:37:c6:2e:
87:35:cc:dc:03:3e:d7:af:42:95:0e:14:b8:73:06:
7f:7b:b0:92:d9:88:9b:01:f4:0d:65:b4:83:31:c2:
8d:f7:16:92:04:9b:ac:6c:f3:4e:16:43:d8:11:13:
70:a2:6e:99:0b:8e:eb:75:09:42:df:b6:22:09:a8:
71:d4:d7:38:d8:62:68:36:b4:34:9d:53:94:c9:ab:
33:f4:cc:64:c5:fa:8e:38:9c:d1:56:52:ef:f5:46:
58:1b:0d:68:90:15:7b:ed:3b:32:37:6f:a3:e8:03:
8b:b6:11:91:d6:06:5e:1b:ba:83:37:ef:75:5e:20:
bf:83:06:0f:6b:3e:7d:61:8d:da:60:14:71:47:32:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2A:A4:F2:26:49:D0:34:E6:8F:D3:4D:26:77:26:2B:2C:86:DD:DD
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DCqk8iZJ0DTmj9NNJncmKyyG3d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
37.32.43.0/24
185.26.32.0/24
185.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fc:a5:0d:7a:fe:a8:b6:7c:5d:a9:7a:dd:9b:5c:eb:07:75:
12:14:15:81:31:6f:7f:8c:47:97:bb:94:fc:7b:0a:56:2a:c9:
88:29:d8:62:07:3a:14:45:b8:ce:36:31:d5:0e:38:4a:20:be:
9d:68:96:e7:41:cc:fd:fb:6a:04:be:57:b3:09:d6:58:14:ec:
1a:36:68:6d:a5:7a:d0:b9:b5:7b:28:b7:ed:56:12:7a:97:10:
36:c0:a5:6c:ce:8e:62:ea:71:12:1f:76:95:a7:d6:2f:61:b7:
ee:04:57:08:33:83:99:b5:09:77:d5:a9:32:40:94:2e:80:3e:
75:a8:3a:fd:af:44:c7:bc:f7:36:6a:a7:36:a8:7a:e8:6b:5d:
20:60:58:15:d9:2f:fb:b3:ea:0d:3d:7a:6f:b1:45:bc:80:69:
29:76:19:cf:ac:54:92:b8:7e:19:53:b4:25:db:ba:70:4e:82:
54:58:d9:9d:6f:c5:21:44:f5:c5:f7:23:cf:3f:fd:5d:2c:db:
31:02:e0:5f:b7:76:b5:e7:3e:dc:b0:5c:7d:75:14:99:05:ec:
e4:09:dd:52:7d:6c:36:01:d5:fa:38:4e:46:97:43:2c:58:ae:
75:66:d7:7d:b3:c3:d9:eb:93:2a:d9:bc:c9:71:0c:99:51:60:
af:c5:6f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:23 2026 by rpki-client