Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/DCLZ_knZFOq9msMXptlqjV00PDY.roa
File: DCLZ_knZFOq9msMXptlqjV00PDY.roa (raw, json)
Hash identifier: Gac+AQ6N7IyN50INBkbnNAMWzvPHQgZVBztnf09WOUY=
Subject key identifier: 0C:22:D9:FE:49:D9:14:EA:BD:9A:C3:17:A6:D9:6A:8D:5D:34:3C:36
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01A19CBB9FB131385B921F49AADB466C25CB
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/DCLZ_knZFOq9msMXptlqjV00PDY.roa
Signing time: Mon 02 Nov 2026 14:48:24 +0000
ROA not before: Mon 02 Nov 2026 14:48:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48753
IP address blocks: 37.221.64.0/24 maxlen: 24
37.221.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:bb:9f:b1:31:38:5b:92:1f:49:aa:db:46:6c:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Nov 2 14:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c22d9fe49d914eabd9ac317a6d96a8d5d343c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:b7:6f:9d:42:d5:cd:9c:bc:9b:16:7a:59:
55:cd:f5:03:11:3a:98:fe:0e:74:c3:1f:87:fe:26:
05:f8:f8:f0:99:22:22:a2:78:21:bc:06:cf:8d:39:
6a:dc:fd:3b:85:d1:55:25:e9:75:be:f5:2f:3a:ad:
61:97:a6:ad:0a:57:20:36:0c:c6:f0:b8:c9:1a:c5:
65:59:5c:c9:88:1f:9a:f6:d9:b8:f6:37:eb:5e:d1:
56:c1:cd:3a:e0:ca:08:e8:02:d2:05:4c:27:0a:22:
3a:40:2a:46:2b:e4:9d:92:89:de:4b:20:1f:22:95:
b7:70:27:ab:c5:93:46:b1:18:03:45:90:5c:61:2d:
3f:c2:96:ef:e0:53:59:56:ed:bd:c7:c8:e4:2b:33:
35:96:43:ac:8e:50:cb:91:10:9b:bb:c3:de:34:90:
b7:c3:19:e1:02:e9:39:b9:54:05:91:d5:3f:5a:41:
88:7f:f5:db:00:43:12:43:a5:9e:88:7b:ec:81:2b:
3e:61:25:39:41:e2:3d:6f:0e:4d:03:86:90:20:70:
0d:67:35:a7:79:76:6d:02:e5:b6:4c:f3:2d:65:3c:
79:bb:d0:b3:4f:2c:9d:c6:c1:57:5a:8a:ee:f9:97:
69:96:5c:4f:9c:d7:ec:84:e0:74:63:f2:35:bf:1a:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:D9:FE:49:D9:14:EA:BD:9A:C3:17:A6:D9:6A:8D:5D:34:3C:36
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/DCLZ_knZFOq9msMXptlqjV00PDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.64.0/24
37.221.66.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ae:1e:51:60:7e:43:9a:c7:5d:9b:dd:6b:dd:f3:9b:50:ae:
8c:d8:70:9c:96:a8:4f:b8:ce:03:f3:35:b1:52:5e:c7:fb:aa:
52:0b:d2:45:ac:c9:a9:bf:c9:b7:a3:91:47:e4:8f:56:b3:83:
26:99:57:56:5a:e1:48:36:e6:9a:6b:24:7a:90:af:ca:58:5c:
55:46:1d:ac:73:76:fc:69:5c:a1:27:7a:e2:11:1a:29:14:98:
1d:f3:16:2e:d6:7c:3b:7d:ee:74:27:da:48:dc:a8:a0:c1:78:
4e:be:0e:a5:6c:6f:51:5a:d2:8d:23:f3:3d:66:66:6e:9b:72:
24:06:3e:a6:dc:2d:03:79:03:ea:75:2e:7c:50:3b:c6:ba:6b:
7a:4a:20:38:6c:28:4d:35:d1:2e:a5:7f:ae:3c:fc:7a:08:f1:
76:a2:d3:46:48:28:be:a4:12:b5:1e:76:73:a7:cd:93:07:ed:
88:8e:bd:31:5b:b2:e8:dc:2d:73:62:24:a8:83:81:be:b2:0b:
23:5f:09:9a:29:56:6d:ef:e3:75:23:74:42:18:19:3f:0d:30:
65:76:dc:8e:fc:d7:11:a5:32:17:1d:5b:da:61:58:8b:8a:6f:
8a:b9:a3:96:76:cd:fd:ca:ef:b2:44:fa:31:47:8a:59:53:1c:
52:9c:20:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGcu5+xMThbkh9JqttGbCXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1
YTRkYTMwHhcNMjYxMTAyMTQ0ODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzIyZDlmZTQ5ZDkxNGVhYmQ5YWMzMTdhNmQ5NmE4ZDVkMzQzYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl+3b51C1c2cvJsWellVzfUDETqY
/g50wx+H/iYF+PjwmSIionghvAbPjTlq3P07hdFVJel1vvUvOq1hl6atClcgNgzG
8LjJGsVlWVzJiB+a9tm49jfrXtFWwc064MoI6ALSBUwnCiI6QCpGK+SdkoneSyAf
IpW3cCerxZNGsRgDRZBcYS0/wpbv4FNZVu29x8jkKzM1lkOsjlDLkRCbu8PeNJC3
wxnhAuk5uVQFkdU/WkGIf/XbAEMSQ6WeiHvsgSs+YSU5QeI9bw5NA4aQIHANZzWn
eXZtAuW2TPMtZTx5u9CzTyydxsFXWoru+ZdpllxPnNfshOB0Y/I1vxo9UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAwi2f5J2RTqvZrDF6bZao1dNDw2MB8GA1UdIwQY
MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt
OWQ1ODc1ZDg2MzczLzEvRENMWl9rblpGT3E5bXNNWHB0bHFqVjAwUERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz
LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJd1AAwQA
Jd1CMA0GCSqGSIb3DQEBCwUAA4IBAQBIrh5RYH5Dmsddm91r3fObUK6M2HCclqhP
uM4D8zWxUl7H+6pSC9JFrMmpv8m3o5FH5I9Ws4MmmVdWWuFINuaaayR6kK/KWFxV
Rh2sc3b8aVyhJ3riERopFJgd8xYu1nw7fe50J9pI3KigwXhOvg6lbG9RWtKNI/M9
ZmZum3IkBj6m3C0DeQPqdS58UDvGumt6SiA4bChNNdEupX+uPPx6CPF2otNGSCi+
pBK1HnZzp82TB+2Ijr0xW7Lo3C1zYiSog4G+sgsjXwmaKVZt7+N1I3RCGBk/DTBl
dtyO/NcRpTIXHVvaYViLim+KuaOWds39yu+yRPoxR4pZUxxSnCDq
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:03 2026 by rpki-client