Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/dhcdMuU6_ziUkBm1VrkqKoeCKP4.roa
File: dhcdMuU6_ziUkBm1VrkqKoeCKP4.roa (raw, json)
Hash identifier: 3+7TDT9lV6jJzUsIYBy3/Imy2ePgiq2pZmA7Gykp2uc=
Subject key identifier: 76:17:1D:32:E5:3A:FF:38:94:90:19:B5:56:B9:2A:2A:87:82:28:FE
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 01A11BBE1C6333516C9830F39D9E70B524AF
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/dhcdMuU6_ziUkBm1VrkqKoeCKP4.roa
Signing time: Thu 08 Oct 2026 13:40:06 +0000
ROA not before: Thu 08 Oct 2026 13:40:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49824
IP address blocks: 45.87.90.0/24 maxlen: 24
45.87.91.0/24 maxlen: 24
62.204.51.0/24 maxlen: 24
95.141.245.0/24 maxlen: 24
159.200.244.0/24 maxlen: 24
176.104.240.0/24 maxlen: 24
176.104.241.0/24 maxlen: 24
176.104.242.0/24 maxlen: 24
176.104.243.0/24 maxlen: 24
176.111.42.0/24 maxlen: 24
176.111.43.0/24 maxlen: 24
185.46.143.0/24 maxlen: 24
185.167.78.0/24 maxlen: 24
212.23.203.0/24 maxlen: 24
2a10:2f40::/48 maxlen: 48
2a10:2f40:1::/48 maxlen: 48
2a10:2f40:2::/48 maxlen: 48
2a10:2f40:3::/48 maxlen: 48
2a10:2f40:4::/48 maxlen: 48
2a10:2f40:5::/48 maxlen: 48
2a10:2f40:9::/48 maxlen: 48
2a10:2f40:a::/48 maxlen: 48
2a10:2f40:b::/48 maxlen: 48
2a10:2f40:c::/48 maxlen: 48
2a10:2f40:d::/48 maxlen: 48
2a10:2f40:1a::/48 maxlen: 48
2a10:2f40:d1::/48 maxlen: 48
2a10:2f40:d2::/48 maxlen: 48
2a10:2f40:d3::/48 maxlen: 48
2a10:2f40:d4::/48 maxlen: 48
2a14:7280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:be:1c:63:33:51:6c:98:30:f3:9d:9e:70:b5:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Oct 8 13:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76171d32e53aff38949019b556b92a2a878228fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:f1:3a:35:07:da:25:b5:28:c9:69:94:52:
ce:ae:5e:87:56:23:c4:66:85:43:e8:dd:9f:49:91:
52:7e:8c:a3:0c:ea:9d:ee:7d:1e:96:bb:bf:f4:22:
79:a8:0c:01:1e:88:0b:06:0d:ba:f7:94:d0:15:3c:
ec:bb:f4:cb:3c:2c:d8:0d:f0:a1:86:65:62:d9:20:
70:fe:ea:b3:a8:1c:a4:00:ed:17:7c:23:8a:07:43:
e8:96:5b:7b:59:a8:74:87:70:56:7e:81:9f:c9:df:
cf:0d:5c:c2:0b:0b:9e:d1:8d:e8:47:e3:a6:8e:a9:
a9:bf:56:9a:ec:2f:ff:f7:9d:50:ba:63:29:41:93:
48:54:dc:c7:7a:43:2e:9b:5c:30:53:e7:10:11:21:
4f:68:8b:a9:08:db:88:45:40:6d:75:71:cf:98:c3:
6a:be:83:82:44:77:c4:23:ec:0d:be:12:59:01:7a:
a6:8d:60:63:c6:f6:d2:cc:da:1e:a7:17:dd:e0:3f:
19:ea:67:ae:36:26:9e:cc:19:6a:68:42:aa:20:5c:
03:60:73:6f:4c:da:b5:9d:9d:23:92:90:57:96:df:
98:c4:a6:9c:7d:1a:8a:5b:8a:86:e2:ac:6b:ee:e8:
dc:76:78:e4:fa:7e:3f:10:90:e2:fe:2d:d1:3b:13:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:1D:32:E5:3A:FF:38:94:90:19:B5:56:B9:2A:2A:87:82:28:FE
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/dhcdMuU6_ziUkBm1VrkqKoeCKP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.90.0/23
62.204.51.0/24
95.141.245.0/24
159.200.244.0/24
176.104.240.0/22
176.111.42.0/23
185.46.143.0/24
185.167.78.0/24
212.23.203.0/24
IPv6:
2a10:2f40::-2a10:2f40:5:ffff:ffff:ffff:ffff:ffff
2a10:2f40:9::-2a10:2f40:d:ffff:ffff:ffff:ffff:ffff
2a10:2f40:1a::/48
2a10:2f40:d1::-2a10:2f40:d4:ffff:ffff:ffff:ffff:ffff
2a14:7280::/29
Signature Algorithm: sha256WithRSAEncryption
c0:45:55:4f:b4:0e:a7:66:e9:9a:b6:7e:f1:6e:ab:c2:af:8d:
32:29:2f:c5:e0:74:3e:0c:09:0b:ff:81:44:6b:07:cd:c4:c2:
04:1b:64:91:c1:e3:70:74:58:77:99:ed:2b:50:3b:f4:2e:fa:
2a:a2:9d:47:36:d4:cc:a3:fd:9a:50:59:8c:aa:54:a9:93:e9:
74:cc:bc:ac:d7:ae:60:ea:07:05:19:e0:67:3f:d2:ab:fd:1c:
ae:58:5f:49:66:c3:e1:11:22:01:d2:9e:a2:25:1b:f8:46:62:
e3:b7:5c:90:83:11:10:ae:72:41:d9:5a:d9:07:8a:5f:24:8b:
c6:84:e1:58:e0:ab:ef:9e:79:53:48:d2:34:c7:a6:e2:8c:63:
96:53:ec:73:16:7e:d7:de:4a:3a:3a:ef:65:39:4f:16:ab:a6:
f9:5e:83:a1:24:a0:13:38:51:4b:61:1e:c0:31:59:46:3d:1c:
79:6c:95:8b:67:a2:a2:f0:47:59:2f:77:3b:20:c1:0c:4d:77:
cb:29:8b:08:c1:68:d2:2d:91:fb:52:ed:61:d6:68:f2:30:73:
29:37:92:7d:36:13:8a:91:5d:f2:f3:90:1f:dc:85:5b:f1:28:
e9:fe:07:09:0d:00:38:8a:0e:96:41:25:54:08:ea:09:1a:4d:
9a:14:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:17 2026 by rpki-client