Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/DCN7qq4wPLzRUWn0H0_q8xdc-DY.roa
File: DCN7qq4wPLzRUWn0H0_q8xdc-DY.roa (raw, json)
Hash identifier: Fha9F1jlvF4i34DBSAcNOAKm7lGCGHp/5Ske1Q3szcg=
Subject key identifier: 0C:23:7B:AA:AE:30:3C:BC:D1:51:69:F4:1F:4F:EA:F3:17:5C:F8:36
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A110BF77F479304C59E606D22B14CCF747
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/DCN7qq4wPLzRUWn0H0_q8xdc-DY.roa
Signing time: Tue 06 Oct 2026 10:25:45 +0000
ROA not before: Tue 06 Oct 2026 10:25:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147034
IP address blocks: 93.117.134.0/24 maxlen: 24
93.119.143.0/24 maxlen: 24
93.119.196.0/24 maxlen: 24
93.119.199.0/24 maxlen: 24
93.119.230.0/24 maxlen: 24
93.119.231.0/24 maxlen: 24
188.208.114.0/24 maxlen: 24
188.208.115.0/24 maxlen: 24
188.208.193.0/24 maxlen: 24
188.208.194.0/24 maxlen: 24
188.208.204.0/22 maxlen: 24
188.213.222.0/24 maxlen: 24
188.213.223.0/24 maxlen: 24
188.213.236.0/24 maxlen: 24
188.213.238.0/24 maxlen: 24
188.213.244.0/24 maxlen: 24
188.213.245.0/24 maxlen: 24
188.214.62.0/24 maxlen: 24
188.214.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:bf:77:f4:79:30:4c:59:e6:06:d2:2b:14:cc:f7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 6 10:25:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c237baaae303cbcd15169f41f4feaf3175cf836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:df:d4:96:23:56:8b:17:cb:b3:a0:9e:dd:
47:63:85:b7:39:55:2a:85:7e:91:41:66:c6:d3:0b:
fc:42:b1:36:b5:8c:d6:a5:af:87:be:ff:55:0d:01:
c9:48:4b:66:a4:a1:46:25:34:d4:06:da:72:d6:3e:
99:dd:b9:e4:bc:67:b0:89:20:32:82:d7:05:c2:81:
b3:8b:37:13:1c:ba:ca:dc:5d:45:e3:9d:7e:4e:5a:
23:f6:cc:85:a9:c4:cf:91:ba:49:7f:78:be:80:5b:
47:88:a1:50:09:73:1e:7e:c8:90:3c:96:9f:8c:80:
81:4a:70:ba:67:0f:3f:98:a7:38:00:0b:42:3e:a1:
95:ca:3c:36:57:68:12:5f:7c:e3:19:27:a8:21:90:
eb:41:ca:10:95:8c:a0:b9:3d:d7:46:36:43:e2:49:
7f:75:49:dd:73:9a:f6:a2:6a:7e:88:51:8c:f0:66:
67:32:d3:9b:0f:78:fd:c8:1f:f7:3f:2f:40:bc:c9:
6a:07:fb:2f:96:40:2f:12:81:45:f1:bf:28:11:c4:
db:6d:81:87:38:e9:bc:af:78:b0:e3:9f:bc:75:b2:
12:34:58:17:94:f6:1a:82:aa:76:3e:f0:5f:55:a6:
f0:87:c7:5a:49:c6:a7:12:e3:7f:3a:a0:15:14:18:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:23:7B:AA:AE:30:3C:BC:D1:51:69:F4:1F:4F:EA:F3:17:5C:F8:36
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/DCN7qq4wPLzRUWn0H0_q8xdc-DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.117.134.0/24
93.119.143.0/24
93.119.196.0/24
93.119.199.0/24
93.119.230.0/23
188.208.114.0/23
188.208.193.0-188.208.194.255
188.208.204.0/22
188.213.222.0/23
188.213.236.0/24
188.213.238.0/24
188.213.244.0/23
188.214.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d8:db:f8:3d:58:1c:dd:c7:5f:f8:53:2d:8f:f0:ed:a9:57:
dd:b9:b1:00:c8:bb:68:1b:70:bb:93:25:75:4e:54:2c:fa:c7:
ae:1a:00:51:1b:ce:5c:cd:df:c9:f8:6e:01:0b:34:59:c1:90:
e4:fd:32:9a:1f:aa:e9:80:27:89:36:9a:a0:56:ae:01:42:10:
1f:a2:83:57:a2:07:b8:4a:14:f0:ff:33:44:62:13:c9:92:fe:
0b:9e:a8:53:40:2c:4d:b5:7a:16:4a:c3:eb:51:58:dd:3d:59:
cb:30:76:d4:f5:24:54:a5:84:c0:bf:cd:2c:c9:4b:18:35:c2:
af:64:1c:05:42:16:81:f0:2d:d0:4f:b2:9f:f3:84:94:55:99:
c3:b7:43:c0:fc:3e:bc:43:8f:00:8f:df:28:0e:fa:dd:47:18:
53:60:16:84:85:66:04:d5:f0:3b:8c:fa:71:51:60:08:e2:56:
54:1b:91:08:38:1f:cc:0c:8c:ca:5a:5a:7b:9d:00:62:5c:9f:
0d:ce:49:82:d5:7a:f1:fe:dd:50:16:75:bc:0e:8f:4d:64:ef:
86:2f:e3:db:12:63:b9:6a:49:36:3c:e9:17:6d:e1:72:ed:8a:
29:31:b0:00:c2:00:95:27:87:c6:3b:45:13:d9:60:a3:cf:2d:
d6:73:53:f6
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAaEQv3f0eTBMWeYG0isUzPdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDA2MTAyNTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzIzN2JhYWFlMzAzY2JjZDE1MTY5ZjQxZjRmZWFmMzE3NWNmODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv07f1JYjVosXy7Ognt1HY4W3OVUq
hX6RQWbG0wv8QrE2tYzWpa+Hvv9VDQHJSEtmpKFGJTTUBtpy1j6Z3bnkvGewiSAy
gtcFwoGzizcTHLrK3F1F451+Tloj9syFqcTPkbpJf3i+gFtHiKFQCXMefsiQPJaf
jICBSnC6Zw8/mKc4AAtCPqGVyjw2V2gSX3zjGSeoIZDrQcoQlYyguT3XRjZD4kl/
dUndc5r2omp+iFGM8GZnMtObD3j9yB/3Py9AvMlqB/svlkAvEoFF8b8oEcTbbYGH
OOm8r3iw45+8dbISNFgXlPYagqp2PvBfVabwh8daScanEuN/OqAVFBi3LQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFAwje6quMDy80VFp9B9P6vMXXPg2MB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvRENON3FxNHdQTHpSVVduMEgwX3E4eGRjLURZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAXXWGAwQA
XXePAwQAXXfEAwQAXXfHAwQBXXfmAwQBvNByMAwDBAC80MEDBAC80MIDBAK80MwD
BAG81d4DBAC81ewDBAC81e4DBAG81fQDBAG81j4wDQYJKoZIhvcNAQELBQADggEB
ABvY2/g9WBzdx1/4Uy2P8O2pV925sQDIu2gbcLuTJXVOVCz6x64aAFEbzlzN38n4
bgELNFnBkOT9MpofqumAJ4k2mqBWrgFCEB+ig1eiB7hKFPD/M0RiE8mS/gueqFNA
LE21ehZKw+tRWN09WcswdtT1JFSlhMC/zSzJSxg1wq9kHAVCFoHwLdBPsp/zhJRV
mcO3Q8D8PrxDjwCP3ygO+t1HGFNgFoSFZgTV8DuM+nFRYAjiVlQbkQg4H8wMjMpa
WnudAGJcnw3OSYLVevH+3VAWdbwOj01k74Yv49sSY7lqSTY86Rdt4XLtiikxsADC
AJUnh8Y7RRPZYKPPLdZzU/Y=
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:48 2026 by rpki-client