Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Da-MdPH-kmWZJwKsGePce_eLWdk.roa
File: Da-MdPH-kmWZJwKsGePce_eLWdk.roa (raw, json)
Hash identifier: LHvGcmgsYDYM/e2D00ya7FGblZmqoWVL5D3XBH26Pko=
Subject key identifier: 0D:AF:8C:74:F1:FE:92:65:99:27:02:AC:19:E3:DC:7B:F7:8B:59:D9
Certificate issuer: /CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Certificate serial: 01A1B8172BFF0EA613ACD1D2D5C7AC7B7BD5
Authority key identifier: 43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Da-MdPH-kmWZJwKsGePce_eLWdk.roa
Signing time: Sat 07 Nov 2026 22:18:08 +0000
ROA not before: Sat 07 Nov 2026 22:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 185.32.44.0/22 maxlen: 22
185.32.44.0/24 maxlen: 24
185.32.45.0/24 maxlen: 24
185.32.46.0/24 maxlen: 24
185.32.47.0/24 maxlen: 24
185.40.32.0/24 maxlen: 24
185.40.33.0/24 maxlen: 24
2a00:c0a0::/32 maxlen: 32
2a00:c0a0::/34 maxlen: 34
2a00:c0a0:4000::/34 maxlen: 34
2a00:c0a0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b8:17:2b:ff:0e:a6:13:ac:d1:d2:d5:c7:ac:7b:7b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Validity
Not Before: Nov 7 22:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0daf8c74f1fe9265992702ac19e3dc7bf78b59d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:b9:c9:cc:06:e1:f3:0b:12:3e:d5:62:83:
d6:51:a0:e7:b4:c6:4d:fe:08:0d:12:53:75:18:a0:
40:8f:b4:be:ae:8c:2a:c5:42:21:79:4d:16:f7:e8:
58:b7:9e:16:98:a7:49:72:f4:1d:8a:37:8c:c0:01:
fe:db:71:e8:9a:80:84:c4:d5:57:4b:14:53:e4:ab:
0a:78:36:48:99:05:3e:40:ee:d7:a9:dc:c3:d8:65:
7b:9a:2e:4c:03:fc:10:bd:11:e5:19:33:f6:39:81:
78:f4:a0:57:59:8e:fc:87:0a:e2:cc:5d:7f:f3:91:
12:f5:ed:82:aa:4d:79:24:6e:ba:c7:9f:ae:79:11:
87:83:68:48:dd:bc:3f:9b:75:2f:71:1c:a8:4a:19:
a4:a8:d9:0a:53:ad:8b:22:83:e7:00:58:a2:f6:c4:
0e:8f:d3:15:52:15:26:df:74:41:55:c8:23:c5:fb:
c4:78:60:e5:b6:d6:dd:42:ba:4d:4b:df:4e:3a:90:
60:d4:7d:0e:75:e6:f4:43:a3:28:ce:73:a4:34:a7:
c8:e2:93:c4:cc:69:15:9e:f3:0d:b5:f7:2f:40:a8:
72:6e:3e:e4:e4:b6:53:69:84:e3:5a:76:74:6c:b1:
9a:24:45:2d:f5:d7:ac:27:6c:fe:27:60:b5:5c:d5:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:8C:74:F1:FE:92:65:99:27:02:AC:19:E3:DC:7B:F7:8B:59:D9
X509v3 Authority Key Identifier:
keyid:43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Da-MdPH-kmWZJwKsGePce_eLWdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.44.0/22
185.40.32.0/23
IPv6:
2a00:c0a0::/32
Signature Algorithm: sha256WithRSAEncryption
26:64:3b:97:f9:6d:92:96:0c:1c:bc:5f:f2:24:a9:58:57:44:
02:57:b6:ef:b5:5d:df:64:58:00:d0:03:0d:a8:a2:ec:0b:b0:
95:cd:1f:8e:bf:33:e5:8e:2d:00:46:e5:0b:2e:52:90:58:57:
bc:24:cd:83:e7:05:cf:41:e2:43:a0:e3:9e:bd:76:ea:93:d6:
21:fc:a3:5f:b5:06:af:6b:68:90:dc:a2:9e:da:37:d8:76:64:
af:4b:c5:69:61:e5:14:ed:c9:98:a1:6b:02:af:e5:8f:1f:01:
03:57:2c:c8:99:c7:29:e6:f6:0f:a9:cd:01:a7:3d:16:1f:f7:
c1:8e:9f:87:54:d4:9c:61:80:e3:1d:5c:29:af:8e:4a:e6:c7:
7a:f2:ce:07:e4:49:b7:ee:75:19:67:10:d2:ac:66:a2:68:b9:
71:f4:43:62:11:d6:75:4d:fb:96:bc:ff:22:7c:0b:f4:e5:f6:
94:1b:08:8b:b8:39:c2:20:16:14:32:3e:2a:4f:ff:a5:58:cb:
f7:91:77:db:eb:dd:45:94:b5:e4:bc:8f:7b:c8:df:e6:6b:26:
8f:79:8f:62:d2:6a:c4:28:37:38:4f:51:94:60:c7:35:c3:55:
04:2a:c8:3f:28:49:0f:05:1e:80:87:7d:95:d8:7c:10:97:c7:
ad:32:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:00:36 2026 by rpki-client