Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/Dcx8h4CiQxGZDM9GxaHxjohozgs.roa
File: Dcx8h4CiQxGZDM9GxaHxjohozgs.roa (raw, json)
Hash identifier: JQ8uIK2vUMKNWaAjfc0A3/ZC5vK96qHNS+69HHvjW+s=
Subject key identifier: 0D:CC:7C:87:80:A2:43:11:99:0C:CF:46:C5:A1:F1:8E:88:68:CE:0B
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 019B7B359A419B1EE6F7905E6CCE73DBC2F0
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/Dcx8h4CiQxGZDM9GxaHxjohozgs.roa
Signing time: Thu 01 Jan 2026 20:17:49 +0000
ROA not before: Thu 01 Jan 2026 20:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211649
IP address blocks: 185.251.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:9a:41:9b:1e:e6:f7:90:5e:6c:ce:73:db:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Jan 1 20:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dcc7c8780a24311990ccf46c5a1f18e8868ce0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:ad:55:d3:75:5f:1a:90:93:d8:8a:ec:d1:
e6:a1:be:79:e5:4d:57:4d:e7:17:bc:c4:06:7a:69:
8b:8d:41:91:ec:50:91:2a:2b:59:97:68:ff:67:17:
72:00:9c:a5:98:c0:c3:a7:59:55:47:2f:22:fc:a7:
76:a1:d0:16:8d:57:66:0c:be:48:92:0e:41:e5:8a:
8a:bf:17:1a:7a:d7:08:21:21:e9:a9:74:f0:13:55:
f7:e9:6f:a1:71:2c:23:5a:bd:17:c3:c0:80:35:5a:
f9:40:b8:0c:90:fa:2b:a1:48:f8:d0:2a:fa:9c:25:
da:c5:be:c0:96:74:53:14:ba:29:56:30:a9:fa:cd:
3f:46:4a:7d:f6:2d:e4:3d:d5:a6:ff:20:2f:1e:2b:
72:ef:2a:df:e3:04:fd:f5:55:ae:6b:77:97:dc:87:
83:f2:d4:ab:a9:50:21:0c:3f:4b:6d:9c:b3:d8:4b:
75:ac:c1:e0:90:d1:27:16:1c:4e:de:0c:3d:dc:aa:
e4:97:17:f2:b4:9c:6b:10:2a:e1:4d:f3:6b:97:96:
47:76:8b:b1:00:68:d1:90:32:99:6a:3c:90:a6:41:
b1:2d:06:26:90:bd:34:6d:f0:ef:5e:db:9d:ff:32:
f7:bb:0e:63:10:4c:9e:1a:e7:c2:d1:71:47:26:4a:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CC:7C:87:80:A2:43:11:99:0C:CF:46:C5:A1:F1:8E:88:68:CE:0B
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/Dcx8h4CiQxGZDM9GxaHxjohozgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.71.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3f:66:64:9b:6a:32:ca:b9:66:b7:03:aa:27:e6:66:c1:e3:
b1:45:72:bf:8b:10:e3:8c:63:23:c4:e3:fe:7d:1f:99:9e:96:
e9:bc:ba:6d:11:87:03:49:d4:37:8c:51:f3:b6:8e:28:32:ec:
58:ca:4b:05:ae:c0:3e:dc:77:1d:38:6d:5e:d9:8e:8c:cb:95:
c2:f1:4e:a9:bc:26:d3:87:b2:39:cd:03:38:78:de:6a:d6:cf:
80:4f:96:9c:5e:87:36:3a:83:04:c6:ff:9d:e9:e4:34:c3:e6:
4a:88:77:64:1b:9d:12:88:8e:36:00:7a:0b:2a:14:8a:76:54:
d8:a3:3c:30:e6:25:60:52:c5:33:b1:b3:ce:4c:b8:8e:5b:cf:
6c:6f:09:4b:d7:36:a5:e2:58:db:9c:42:76:79:47:c4:bd:16:
44:97:6a:8d:da:db:41:b5:d3:1d:75:f8:dc:d5:e7:3a:99:e0:
dc:6f:b4:e9:85:be:85:e4:88:fc:27:35:83:74:20:7c:b1:75:
71:21:ed:a2:6e:0a:43:50:3a:68:70:75:21:93:9d:fb:eb:a1:
e3:37:ff:d6:d9:6c:79:bc:9d:8b:2d:6c:83:04:6a:59:74:46:
27:dd:2a:fc:24:83:78:07:0b:2a:17:0a:b4:0d:f7:37:b8:61:
c1:e4:83:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NZpBmx7m95BebM5z28LwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZDAwM2FmMDQ3NzRkZDNlMzk3MzA0OTc5ODlhM2ExNzE1
MTYyNTIwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGNjN2M4NzgwYTI0MzExOTkwY2NmNDZjNWExZjE4ZTg4NjhjZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18atVdN1XxqQk9iK7NHmob555U1X
TecXvMQGemmLjUGR7FCRKitZl2j/ZxdyAJylmMDDp1lVRy8i/Kd2odAWjVdmDL5I
kg5B5YqKvxcaetcIISHpqXTwE1X36W+hcSwjWr0Xw8CANVr5QLgMkPoroUj40Cr6
nCXaxb7AlnRTFLopVjCp+s0/Rkp99i3kPdWm/yAvHity7yrf4wT99VWua3eX3IeD
8tSrqVAhDD9LbZyz2Et1rMHgkNEnFhxO3gw93KrklxfytJxrECrhTfNrl5ZHdoux
AGjRkDKZajyQpkGxLQYmkL00bfDvXtud/zL3uw5jEEyeGufC0XFHJkotkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3MfIeAokMRmQzPRsWh8Y6IaM4LMB8GA1UdIwQY
MBaAFI3QA68Ed03T45cwSXmJo6FxUWJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2Mt
NjdjZDJiNDU5YWFlLzEvRGN4OGg0Q2lReEdaRE05R3hhSHhqb2hvemdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2MtNjdjZDJiNDU5YWFl
LzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuftHMA0G
CSqGSIb3DQEBCwUAA4IBAQAiP2Zkm2oyyrlmtwOqJ+ZmweOxRXK/ixDjjGMjxOP+
fR+ZnpbpvLptEYcDSdQ3jFHzto4oMuxYyksFrsA+3HcdOG1e2Y6My5XC8U6pvCbT
h7I5zQM4eN5q1s+AT5acXoc2OoMExv+d6eQ0w+ZKiHdkG50SiI42AHoLKhSKdlTY
ozww5iVgUsUzsbPOTLiOW89sbwlL1zal4ljbnEJ2eUfEvRZEl2qN2ttBtdMddfjc
1ec6meDcb7Tphb6F5Ij8JzWDdCB8sXVxIe2ibgpDUDpocHUhk53766HjN//W2Wx5
vJ2LLWyDBGpZdEYn3Sr8JIN4BwsqFwq0Dfc3uGHB5IMV
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:15 2026 by rpki-client