Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/DPzrcR6D3apJmjivgc8Cbbu4gzc.roa
File: DPzrcR6D3apJmjivgc8Cbbu4gzc.roa (raw, json)
Hash identifier: PJ7IB6gleyD7NDtRfrn+R3fVhGDFjVqnr40CEaF2hpc=
Subject key identifier: 0C:FC:EB:71:1E:83:DD:AA:49:9A:38:AF:81:CF:02:6D:BB:B8:83:37
Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial: 01A0C5AEE1A819AFDA1EB044AC1DCD9F088D
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/DPzrcR6D3apJmjivgc8Cbbu4gzc.roa
Signing time: Mon 21 Sep 2026 20:36:07 +0000
ROA not before: Mon 21 Sep 2026 20:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31042
IP address blocks: 24.135.0.0/16 maxlen: 17
46.17.144.0/21 maxlen: 21
46.240.128.0/17 maxlen: 17
80.93.224.0/19 maxlen: 19
82.117.192.0/19 maxlen: 24
82.117.195.0/24 maxlen: 24
87.116.128.0/18 maxlen: 24
87.116.128.0/19 maxlen: 19
87.116.140.0/24 maxlen: 24
87.116.141.0/24 maxlen: 24
87.116.160.0/19 maxlen: 19
89.216.0.0/16 maxlen: 24
91.143.208.0/20 maxlen: 20
94.189.128.0/17 maxlen: 18
94.230.176.0/20 maxlen: 20
95.180.0.0/17 maxlen: 22
178.148.0.0/15 maxlen: 16
188.2.0.0/16 maxlen: 17
188.246.32.0/19 maxlen: 19
213.244.224.0/22 maxlen: 24
2a00:1dd8::/29 maxlen: 29
2a00:1dd8::/32 maxlen: 32
2a03:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:ae:e1:a8:19:af:da:1e:b0:44:ac:1d:cd:9f:08:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
Validity
Not Before: Sep 21 20:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cfceb711e83ddaa499a38af81cf026dbbb88337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:3f:d9:03:ec:9d:9d:cf:06:b0:05:55:98:
2e:ee:a1:65:b9:b3:02:36:97:6b:19:74:e6:10:fb:
b8:3c:49:8f:b0:28:df:bf:1b:62:7c:fd:5b:c4:dc:
53:95:61:09:b8:b5:d6:6b:5c:22:44:4d:6e:cf:a5:
ab:36:bf:fb:17:4b:0a:ac:74:8b:36:e7:69:24:01:
63:47:92:c1:cc:73:42:21:63:c1:a5:86:00:eb:d5:
49:9d:7f:1d:cd:64:cb:68:42:73:a4:7a:9c:34:ce:
ce:ce:dc:ac:a4:c3:c4:8d:c4:85:79:32:4c:b6:60:
36:69:fd:24:33:1f:d3:bd:70:64:c1:5e:b1:f1:74:
51:21:d5:12:b8:89:fa:14:de:63:67:99:82:1b:fe:
43:69:29:5f:1a:36:41:3d:63:99:fa:93:73:eb:63:
d2:dc:fa:4e:1e:5d:db:64:e5:ba:a4:4c:5f:8c:d5:
9b:86:b8:1b:0b:0d:a7:75:98:0b:f6:6a:a6:b1:48:
03:86:1a:65:c1:ef:b1:c8:44:8a:23:51:8a:c6:2e:
29:d7:48:78:bd:6d:52:a8:f2:2e:af:3e:45:3d:0c:
0b:b6:26:f7:5f:6f:65:bd:a2:cb:34:d5:7e:53:dd:
bb:d6:cd:f0:47:38:6b:36:d2:d3:5e:e8:e2:3a:45:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FC:EB:71:1E:83:DD:AA:49:9A:38:AF:81:CF:02:6D:BB:B8:83:37
X509v3 Authority Key Identifier:
keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/DPzrcR6D3apJmjivgc8Cbbu4gzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.135.0.0/16
46.17.144.0/21
46.240.128.0/17
80.93.224.0/19
82.117.192.0/19
87.116.128.0/18
89.216.0.0/16
91.143.208.0/20
94.189.128.0/17
94.230.176.0/20
95.180.0.0/17
178.148.0.0/15
188.2.0.0/16
188.246.32.0/19
213.244.224.0/22
IPv6:
2a00:1dd8::/29
2a03:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
03:21:77:9e:79:6e:19:39:1f:99:8c:3f:c5:0f:a9:ed:61:bd:
b8:33:9f:56:f8:cd:13:7e:34:81:c6:aa:98:82:09:8c:0d:1b:
3e:30:c5:e1:3c:fb:05:8d:70:2d:95:05:75:b0:6c:81:bf:17:
b1:eb:16:c3:9b:fb:45:30:69:55:16:25:4a:57:c0:3c:a3:47:
64:01:42:12:39:d6:a6:38:c3:5f:cb:6e:69:80:5f:df:65:b8:
79:16:86:ae:31:ad:fb:ef:72:ff:b4:d3:60:d9:34:6d:d8:49:
34:19:c2:70:bf:13:0e:d5:62:a9:76:d2:f5:3f:40:9b:9b:74:
26:64:f7:6e:76:2c:bd:cc:22:d0:ed:a9:d8:18:05:2e:61:30:
92:86:a6:ef:5e:ae:bd:2e:1f:9d:14:6b:ba:c7:32:de:d1:87:
fd:48:42:87:c8:c5:1b:1d:ec:cd:91:43:1f:83:38:f8:ce:2d:
fd:83:12:0c:6d:28:2e:b3:71:59:61:ae:eb:b6:f2:e9:92:6c:
ba:95:f7:de:ad:4c:01:dc:46:c3:9c:4d:f3:2d:49:8b:51:ba:
9d:7c:ed:0f:69:2a:5c:e1:c0:7a:5a:26:d8:da:09:dc:db:30:
db:82:7c:f1:d7:43:74:b6:e6:dd:89:49:94:f8:77:ec:e9:23:
6b:df:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:50 2026 by rpki-client