Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/DcSC8qcdtifimnPgGObDYpL1fRc.roa
File: DcSC8qcdtifimnPgGObDYpL1fRc.roa (raw, json)
Hash identifier: RAkkfZgCQ+RoWi1CPmARv5I4qSPg1VuIG96TA+NBhIA=
Subject key identifier: 0D:C4:82:F2:A7:1D:B6:27:E2:9A:73:E0:18:E6:C3:62:92:F5:7D:17
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0679FF618DB895CDC74F16562DB3A033A
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/DcSC8qcdtifimnPgGObDYpL1fRc.roa
Signing time: Thu 03 Sep 2026 14:15:31 +0000
ROA not before: Thu 03 Sep 2026 14:15:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.83.244.0/24 maxlen: 24
95.81.72.0/24 maxlen: 24
95.81.74.0/24 maxlen: 24
95.81.75.0/24 maxlen: 24
160.20.158.0/24 maxlen: 24
160.20.159.0/24 maxlen: 24
193.221.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:9f:f6:18:db:89:5c:dc:74:f1:65:62:db:3a:03:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 3 14:15:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dc482f2a71db627e29a73e018e6c36292f57d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:86:03:db:c1:e0:95:d9:10:34:d0:f4:28:
32:00:72:08:89:70:6f:82:24:6e:f8:ed:fe:a6:e4:
5e:aa:2b:e4:74:15:99:72:53:a8:58:1d:74:8f:5a:
b2:2b:17:f0:6a:a5:8c:b7:38:69:3a:45:27:b6:39:
72:18:9d:db:8d:6a:bf:8a:09:f1:29:4f:32:cb:a1:
1f:5e:95:57:b8:7b:9c:9f:1f:f1:d6:4d:c2:40:7a:
07:16:4d:0a:48:6f:fd:fb:89:e7:73:ec:d3:a4:5f:
fa:1b:38:13:16:2d:7e:68:a2:2b:77:02:8c:3e:87:
9a:9e:a5:df:66:9b:c4:76:b1:1a:d0:76:13:72:ed:
79:ff:99:55:3a:c6:6e:8d:88:a5:a4:0d:46:ce:ad:
1e:91:c3:2e:76:5d:90:19:2f:33:84:82:37:1b:cc:
83:79:b7:b0:34:6a:fe:49:60:fa:28:c6:18:b5:ac:
ce:b1:53:6b:21:aa:45:6c:5a:9c:e9:04:0f:28:a2:
48:d6:21:62:f5:fa:31:3b:05:87:7b:53:9a:f4:b7:
71:4b:18:c0:c6:55:6d:fa:4f:5d:24:7a:35:ca:2b:
3d:7e:07:8c:ee:8f:04:53:94:bd:18:63:e9:de:57:
2b:5e:2f:41:6c:5e:5c:34:06:4d:ff:49:99:1c:98:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:82:F2:A7:1D:B6:27:E2:9A:73:E0:18:E6:C3:62:92:F5:7D:17
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/DcSC8qcdtifimnPgGObDYpL1fRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.244.0/24
95.81.72.0/24
95.81.74.0/23
160.20.158.0/23
193.221.202.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d5:04:e2:c5:7d:16:34:87:e3:22:3d:08:17:46:c6:05:28:
3d:ee:e8:4e:bf:62:3d:93:a7:72:48:76:bb:7e:bd:06:51:24:
e8:5d:3a:c6:05:8f:77:ba:43:f8:8b:8c:60:99:60:d1:fc:94:
1f:38:e0:26:e5:7c:c0:79:ea:54:56:bb:d9:6b:85:e6:85:fb:
d6:c7:2e:be:44:9e:ba:21:60:49:f0:7a:70:89:01:0d:c5:2e:
a7:29:c2:c1:3b:37:71:10:21:f6:1e:de:48:20:bd:42:b0:36:
24:04:86:cf:04:a9:a3:f8:f3:88:a3:c8:a5:8e:df:cb:5c:62:
6e:32:aa:bb:67:a7:06:9e:38:0f:a7:52:29:ff:62:17:22:8c:
b5:68:f3:f0:6b:94:17:3f:1c:3d:83:f2:6b:78:ca:66:7d:e9:
3c:0e:0a:48:76:50:01:7d:5b:fe:dc:3d:5e:fd:57:92:5f:ed:
a1:56:54:ee:94:2f:41:db:30:72:10:93:1b:fd:7d:37:7e:ee:
16:39:60:67:b4:d0:da:67:1c:b4:b9:c5:b2:ce:83:be:46:4e:
83:4a:0e:bb:97:7f:94:57:78:3a:45:06:e7:6f:10:ea:20:29:
ff:4a:31:2e:0b:19:f5:79:01:c3:6a:50:64:86:1d:95:c8:11:
a4:3c:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:19 2026 by rpki-client