Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DMPyMjjFrqiLwMfHSEcU8j5vyeo.roa
File: DMPyMjjFrqiLwMfHSEcU8j5vyeo.roa (raw, json)
Hash identifier: uhPE8QeEb2yhz4QNA+0I95lf9orucPSndzieLPndZeI=
Subject key identifier: 0C:C3:F2:32:38:C5:AE:A8:8B:C0:C7:C7:48:47:14:F2:3E:6F:C9:EA
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019E1D18FB43A607D290985DB206085F9362
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DMPyMjjFrqiLwMfHSEcU8j5vyeo.roa
Signing time: Tue 12 May 2026 16:50:36 +0000
ROA not before: Tue 12 May 2026 16:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 89.44.65.0/24 maxlen: 24
93.115.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:18:fb:43:a6:07:d2:90:98:5d:b2:06:08:5f:93:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 12 16:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cc3f23238c5aea88bc0c7c7484714f23e6fc9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:d7:b1:58:3b:bc:fc:41:62:80:88:5a:00:
6c:fc:87:4d:76:d1:ac:05:f3:a7:0d:c0:9e:66:f0:
91:f8:4f:89:5c:74:84:cc:ed:94:32:fb:9d:ce:55:
85:5c:65:aa:b4:c7:2c:c3:1a:f8:3e:77:5e:7a:da:
d2:4f:9b:8f:77:b8:ec:53:31:de:d9:cf:8b:77:6e:
d2:f1:08:49:f4:b0:19:d3:e5:80:b7:29:cf:8c:60:
63:5f:cb:55:ec:3a:e6:95:23:83:30:9d:0a:0d:b1:
68:42:9c:d6:ae:9e:be:39:b2:8e:6a:3c:f3:d5:96:
1e:23:02:38:bf:f7:cd:85:4f:55:f9:09:3f:c4:3d:
bb:82:60:32:1e:a4:df:78:c5:50:8e:d6:c7:9d:45:
55:81:cf:a6:9d:67:d9:d6:47:1b:d5:a4:dd:5b:2c:
be:20:97:8f:61:d9:6c:58:d3:0d:c6:4d:65:ea:78:
e8:f0:c8:91:4e:7a:dd:e9:28:28:60:77:2d:c0:bc:
00:79:c5:67:da:34:e6:db:8e:b0:7e:52:7f:18:92:
00:e7:92:9f:bb:e6:34:22:b1:47:22:5c:ed:2e:71:
ab:d5:94:b6:b5:9a:3e:2b:e3:23:f1:f6:c1:5e:ed:
9b:e3:58:15:4d:11:84:fd:6a:62:e3:00:cc:1d:6d:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C3:F2:32:38:C5:AE:A8:8B:C0:C7:C7:48:47:14:F2:3E:6F:C9:EA
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DMPyMjjFrqiLwMfHSEcU8j5vyeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.65.0/24
93.115.158.0/24
Signature Algorithm: sha256WithRSAEncryption
35:08:07:aa:66:b7:30:97:88:22:47:ff:75:3b:15:aa:14:cd:
c0:26:e6:5c:a1:9b:ba:84:91:7e:9b:36:54:5c:56:12:54:11:
dc:bb:50:cf:e9:8b:7a:78:aa:e6:4b:39:26:bb:4f:83:3b:64:
2f:06:c6:a6:80:e3:b3:24:79:1b:dc:81:76:a7:ea:08:7b:5e:
f3:67:eb:7a:1e:75:40:02:f4:e1:3b:81:95:9d:a1:07:64:ea:
97:44:6e:a9:e1:45:78:f4:e2:a9:0a:31:30:11:03:65:98:81:
22:e5:e5:85:ca:f1:70:38:dd:34:73:41:50:e1:1f:87:19:b2:
08:7a:f4:09:b2:6b:38:c1:7c:b4:04:46:7e:11:ab:f5:48:8b:
ae:62:6f:e4:2c:cf:bb:b6:82:4f:a0:0d:8d:18:81:d7:1c:b0:
a2:74:c1:03:3a:6d:03:01:ef:cd:01:dc:6a:a7:8a:10:e1:77:
28:79:b2:07:ba:97:99:7b:ca:a7:5c:32:75:a9:58:15:03:44:
10:b4:0b:98:de:ea:04:bf:03:e4:95:ae:d2:b4:2f:d5:98:ab:
32:f3:7e:70:d1:49:6b:7f:b8:27:2a:07:7e:47:c8:8d:2c:5c:
9b:95:f2:46:5b:d1:64:b2:2d:74:05:8e:0f:56:19:3e:34:3e:
ea:d6:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:24 2026 by rpki-client