Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DcaA_p4LkBuZzjSaa7HQkExMTUE.roa
File: DcaA_p4LkBuZzjSaa7HQkExMTUE.roa (raw, json)
Hash identifier: oHJIKYO0jxrdVR5vqSp+1SdP92phselzX24Wtq/HUaY=
Subject key identifier: 0D:C6:80:FE:9E:0B:90:1B:99:CE:34:9A:6B:B1:D0:90:4C:4C:4D:41
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A05D9135DB974F423A4FA2F86C97739B5E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DcaA_p4LkBuZzjSaa7HQkExMTUE.roa
Signing time: Tue 01 Sep 2026 15:23:12 +0000
ROA not before: Tue 01 Sep 2026 15:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.70.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.101.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.159.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:91:35:db:97:4f:42:3a:4f:a2:f8:6c:97:73:9b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 1 15:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dc680fe9e0b901b99ce349a6bb1d0904c4c4d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:ec:23:65:1b:07:a2:65:4b:c4:6e:aa:39:
40:cd:e8:22:54:ee:bc:5c:a6:92:59:99:f5:e0:98:
18:c1:98:a9:f7:0d:d8:4d:bd:5c:66:6d:5e:63:4b:
13:3b:c4:34:63:1b:37:3e:27:d6:87:43:c1:8a:43:
2f:ef:7a:01:b0:06:9f:23:8a:c1:1f:c8:ea:6a:98:
35:c2:34:b9:68:65:13:16:18:04:69:f6:1f:d4:2e:
72:2a:5b:d0:a2:a7:96:7a:0a:4c:4b:cb:d8:af:eb:
e3:a2:d1:c6:2b:73:3d:b3:12:ae:ea:a6:6a:f4:00:
e7:9d:49:17:cd:41:06:ff:3a:92:46:0c:c1:59:e3:
84:79:26:e2:46:e0:bd:d1:93:fe:55:02:2d:34:7d:
ce:5a:ed:f1:aa:3b:75:85:05:4c:94:ae:72:e0:ed:
46:03:bd:9a:e8:ca:49:5d:5c:c7:ed:9a:61:75:e5:
3e:bd:ae:5a:d0:93:b2:ed:e2:e9:2f:6a:1c:97:42:
3d:d4:05:74:41:f0:74:15:6e:37:c6:ae:e7:e1:22:
59:10:7d:a8:b9:f2:2c:2d:6c:60:7c:7b:96:ad:3e:
c8:8c:59:fc:f8:7d:a8:84:4b:63:66:21:79:7d:ad:
a2:90:0e:0b:34:0e:7f:7d:9e:98:a1:b8:62:1b:8d:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:80:FE:9E:0B:90:1B:99:CE:34:9A:6B:B1:D0:90:4C:4C:4D:41
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DcaA_p4LkBuZzjSaa7HQkExMTUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.131.0/24
77.92.142.0/24
77.92.152.0/23
78.135.67.0/24
78.135.70.0/24
78.135.74.0/24
78.135.86.0/24
78.135.89.0/24
78.135.97.0-78.135.98.255
78.135.101.0/24
185.17.136.0/24
188.132.159.0/24
188.132.193.0/24
188.132.214.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
44:f2:12:c0:99:68:e3:ad:5b:5b:59:f8:36:17:cd:50:fd:1b:
30:07:7a:3f:d5:a5:2a:da:84:1b:aa:aa:76:fe:7f:f6:59:71:
ca:c0:f6:9a:fb:91:c1:d3:b0:25:63:bb:df:49:44:61:47:8f:
dd:82:a2:8f:83:5b:bc:64:aa:f4:10:53:dd:b9:2d:da:05:13:
62:f4:d4:8f:fe:8a:c2:2c:32:48:85:52:ac:2d:a1:65:07:d5:
82:9c:78:cc:14:16:5d:25:f8:08:77:41:80:f3:ce:d7:f1:75:
96:41:72:3c:8e:6c:a1:2e:dd:fc:79:fe:5d:b6:c7:3f:1e:6c:
98:4b:48:52:ec:18:fd:ee:c5:ca:a0:af:43:05:a2:b1:a3:dd:
3b:63:a5:d2:d1:95:2f:f7:9e:d1:e5:0a:28:63:01:3b:36:a1:
9b:10:da:a4:0d:8a:83:fe:d2:90:7c:68:f9:9d:4d:8a:3c:d0:
50:55:2c:aa:6e:2e:3e:32:4b:74:3a:20:00:76:a8:76:8d:c6:
3d:bf:63:35:96:d8:d3:f5:42:17:84:6c:42:ea:25:39:33:ef:
87:5c:6d:33:7b:2b:98:c9:f7:2d:01:3d:9e:6f:a4:24:e9:b7:
bb:e0:2b:2d:de:57:22:be:71:bb:54:e2:a3:87:6c:42:e4:8b:
81:3a:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:08 2026 by rpki-client