Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/DmwwyIeryxnXouje06GcnKLjOck.roa
File: DmwwyIeryxnXouje06GcnKLjOck.roa (raw, json)
Hash identifier: 77qcCPWlKYbSecG3Tkcuy3v3wioir535GQOABIXvPKc=
Subject key identifier: 0E:6C:30:C8:87:AB:CB:19:D7:A2:E8:DE:D3:A1:9C:9C:A2:E3:39:C9
Certificate issuer: /CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Certificate serial: 019F236834BBB74EAEB758964716371756B3
Authority key identifier: FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/DmwwyIeryxnXouje06GcnKLjOck.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59554
IP address blocks: 193.160.92.0/24 maxlen: 24
193.160.93.0/24 maxlen: 24
193.160.94.0/24 maxlen: 24
193.160.95.0/24 maxlen: 24
2a0d:ed40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:bb:b7:4e:ae:b7:58:96:47:16:37:17:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e6c30c887abcb19d7a2e8ded3a19c9ca2e339c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:44:e1:ba:66:ac:41:11:86:27:d0:5c:b6:
18:68:93:5b:68:bb:f6:4d:ff:66:cc:d9:b1:85:b2:
83:79:b4:fe:03:21:ef:c0:a4:79:42:2d:53:63:0f:
47:ef:18:34:50:06:7d:b2:e4:27:31:86:3a:70:4b:
b6:fc:9d:b1:d4:50:ef:90:61:1f:20:da:1b:d4:4e:
e5:ce:3b:85:29:80:f9:01:6c:6e:71:3c:61:5f:71:
4b:71:05:6e:07:ea:68:e7:71:31:c0:09:5f:85:c3:
5e:fb:b7:d9:8c:80:cb:ec:61:d8:70:a8:8b:66:6a:
9f:4a:ec:1d:86:ea:64:9f:8d:79:68:f6:f5:13:0f:
e7:88:3a:4c:ab:60:9e:5d:0a:93:fb:38:4f:05:a1:
b2:dc:09:10:50:50:39:d1:69:28:79:bc:0e:51:c8:
80:d5:a6:79:af:06:bd:55:be:da:ae:60:07:70:66:
92:77:71:93:38:0f:4c:00:24:a4:3a:6e:23:c7:f7:
d0:a7:5c:bb:34:79:bb:1c:75:9d:a7:09:03:c6:24:
6b:0f:af:b8:68:4e:a0:71:d4:af:27:5b:6d:3a:d2:
47:52:7b:94:62:6f:65:46:14:d7:95:e3:be:bb:d7:
80:da:8b:ee:a8:c4:91:4b:4f:8c:13:d3:69:c5:92:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:30:C8:87:AB:CB:19:D7:A2:E8:DE:D3:A1:9C:9C:A2:E3:39:C9
X509v3 Authority Key Identifier:
keyid:FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/DmwwyIeryxnXouje06GcnKLjOck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.92.0/22
IPv6:
2a0d:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
ce:d3:2b:92:7f:bf:04:6d:9c:20:48:1d:6e:87:2e:d1:b5:59:
db:90:94:f8:e4:51:a7:20:0a:f9:19:07:25:79:2b:8b:9e:1d:
81:37:66:6f:ca:60:ea:9e:05:58:03:b9:31:e2:a4:16:51:13:
3e:f1:40:bd:a8:9c:40:9d:e1:50:d7:67:3b:43:64:5f:0c:ff:
fa:f7:2b:48:d7:2c:ea:4d:e8:42:19:d3:52:b5:fe:51:ec:31:
20:04:69:af:62:2d:c8:bd:f3:73:b5:e2:3b:8e:a9:73:37:e8:
0b:9f:85:c3:c5:23:59:8e:d4:75:41:63:91:37:f0:77:bd:fa:
c4:3e:47:9d:82:89:3b:4f:e5:be:35:de:30:ed:76:7d:79:77:
78:16:62:2f:08:d3:87:ed:e5:4a:ad:83:59:9c:01:ea:39:47:
de:d8:b0:a0:22:b6:a3:96:93:1a:4a:1a:a6:c3:5a:5e:0b:9b:
db:db:79:8a:e7:91:d4:44:ba:92:2a:96:5c:05:06:56:13:8a:
53:c8:9e:2d:ca:9e:00:95:d4:8d:7f:fb:0f:26:08:33:af:e0:
b2:4b:1f:9d:fd:1b:9e:02:ac:b4:c9:60:c8:74:41:20:57:16:
84:01:47:65:57:1f:95:57:e9:5e:4d:21:cb:8e:09:d4:d6:66:
a0:d7:0a:77
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaDS7t06ut1iWRxY3F1azMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZTE0MjQ3Y2I4MmY5ZTU2YjdlNWZmN2I0MTZhYWYxZWJj
NTA3MjgwHhcNMjYwNzAyMTUxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTZjMzBjODg3YWJjYjE5ZDdhMmU4ZGVkM2ExOWM5Y2EyZTMzOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoNE4bpmrEERhifQXLYYaJNbaLv2
Tf9mzNmxhbKDebT+AyHvwKR5Qi1TYw9H7xg0UAZ9suQnMYY6cEu2/J2x1FDvkGEf
INob1E7lzjuFKYD5AWxucTxhX3FLcQVuB+po53ExwAlfhcNe+7fZjIDL7GHYcKiL
ZmqfSuwdhupkn415aPb1Ew/niDpMq2CeXQqT+zhPBaGy3AkQUFA50WkoebwOUciA
1aZ5rwa9Vb7armAHcGaSd3GTOA9MACSkOm4jx/fQp1y7NHm7HHWdpwkDxiRrD6+4
aE6gcdSvJ1ttOtJHUnuUYm9lRhTXleO+u9eA2ovuqMSRS0+ME9NpxZKbawIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA5sMMiHq8sZ16Lo3tOhnJyi4znJMB8GA1UdIwQY
MBaAFP7hQkfLgvnla35f97QWqvHrxQcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3VGQ1I4dUMtZVZyZmxfM3RCYXE4ZXZGQnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt
YjhmM2YwOWVhYWRlLzEvRG13d3lJZXJ5eG5Yb3VqZTA2R2NuS0xqT2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl
LzEvX3VGQ1I4dUMtZVZyZmxfM3RCYXE4ZXZGQnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwaBcMA0E
AgACMAcDBQAqDe1AMA0GCSqGSIb3DQEBCwUAA4IBAQDO0yuSf78EbZwgSB1uhy7R
tVnbkJT45FGnIAr5GQcleSuLnh2BN2ZvymDqngVYA7kx4qQWURM+8UC9qJxAneFQ
12c7Q2RfDP/69ytI1yzqTehCGdNStf5R7DEgBGmvYi3IvfNzteI7jqlzN+gLn4XD
xSNZjtR1QWORN/B3vfrEPkedgok7T+W+Nd4w7XZ9eXd4FmIvCNOH7eVKrYNZnAHq
OUfe2LCgIrajlpMaShqmw1peC5vb23mK55HURLqSKpZcBQZWE4pTyJ4typ4AldSN
f/sPJggzr+CySx+d/RueAqy0yWDIdEEgVxaEAUdlVx+VV+leTSHLjgnU1mag1wp3
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:30 2026 by rpki-client