Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa
File: Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa (raw, json)
Hash identifier: n6evIQhFcEJ8otT9mtnc5btiAVJv5xnXSb58S3z8lOg=
Subject key identifier: 0E:66:BE:67:ED:77:B0:60:73:50:56:72:0C:A3:98:A6:25:63:C9:62
Certificate issuer: /CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Certificate serial: 019F236931A3AACAD31B497E9441DD7F9DFD
Authority key identifier: 85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60627
IP address blocks: 185.113.56.0/22 maxlen: 22
185.124.112.0/22 maxlen: 22
185.140.56.0/22 maxlen: 22
185.143.204.0/22 maxlen: 22
185.145.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:31:a3:aa:ca:d3:1b:49:7e:94:41:dd:7f:9d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e66be67ed77b060735056720ca398a62563c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:f8:f6:3b:e4:1d:4f:6b:d6:48:8a:85:f7:
3f:ce:1f:66:9a:86:91:83:73:93:0c:81:25:6c:81:
62:7f:97:0b:16:e2:0d:67:ea:08:90:98:59:43:87:
e1:04:d1:1a:d7:54:5a:da:86:69:56:89:9b:b6:94:
36:7c:54:9d:14:13:6f:d2:fc:74:d5:09:bb:6c:90:
c9:54:bc:df:91:ca:34:47:c7:cd:7e:78:d4:80:27:
3d:3b:bd:10:7a:c7:7b:19:39:38:a7:5d:8a:a9:60:
5b:eb:c8:68:86:36:e2:87:84:86:c8:92:89:69:5b:
2a:5a:92:54:d7:42:07:79:ac:d1:ef:7d:56:f5:30:
e5:26:53:4f:a7:b4:af:fe:51:d4:10:bc:26:4b:2c:
2f:f6:6a:b1:08:03:92:23:85:ea:ec:59:fb:e9:9b:
0c:50:62:e1:a1:fc:e2:68:d9:89:03:98:26:00:ec:
a4:9c:f9:7e:cc:a0:77:14:8d:44:2e:01:b2:37:a3:
be:75:95:57:62:37:48:d9:a6:9d:89:17:36:7b:f1:
00:42:ca:09:60:d6:9a:8f:bc:79:76:86:d0:3b:52:
d9:5a:08:02:69:23:f9:a7:fc:ca:45:18:41:fd:a6:
49:ce:6e:d0:41:2e:22:fd:fd:c6:fc:1c:41:fd:a3:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:66:BE:67:ED:77:B0:60:73:50:56:72:0C:A3:98:A6:25:63:C9:62
X509v3 Authority Key Identifier:
keyid:85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.56.0/22
185.124.112.0/22
185.140.56.0/22
185.143.204.0/22
185.145.8.0/22
Signature Algorithm: sha256WithRSAEncryption
19:0b:8d:49:97:ea:af:b2:9e:cf:a4:5e:ef:d6:4f:17:b3:86:
eb:1a:6d:fb:3d:3d:a9:fb:62:bf:0f:0f:0c:df:87:5c:28:26:
d2:3b:1a:80:2a:0f:c9:d9:f0:b5:43:5d:0f:36:1e:23:15:3a:
08:96:9f:05:d4:3e:4f:dd:44:51:49:b3:0a:cd:34:fb:18:84:
7f:57:1c:8f:b0:bb:d0:0f:11:64:78:7a:c0:a9:01:03:6f:12:
13:30:4c:5b:8c:48:d5:91:45:0e:e4:64:d5:93:13:77:f0:b8:
2d:b2:5b:8b:d0:16:44:2f:84:35:92:0f:fe:10:0c:7c:61:94:
5d:fb:6b:cb:6f:c2:07:c4:e9:72:e0:41:02:4b:04:2e:dc:f4:
c1:6b:54:3e:5a:12:59:11:ca:f2:b4:b1:15:49:9d:fe:f1:e1:
90:8a:37:92:c2:34:9c:65:2f:61:12:ed:87:ce:23:55:b2:24:
7e:da:0f:93:ac:fc:a6:95:e3:45:5a:83:ea:e5:e6:c1:8a:90:
ad:48:7f:2a:dd:13:9f:44:79:22:44:45:45:29:d7:87:0e:42:
d9:8c:c5:55:f1:2e:11:9b:d7:40:dd:a7:3c:6a:84:5f:18:a3:
81:9e:6d:78:49:b0:a6:60:3a:58:ac:e8:6d:f9:1d:8a:61:e0:
19:07:03:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:52 2026 by rpki-client