Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/DMAIA2ZjK6_jz1OVNrHpSpUwDmA.roa
File: DMAIA2ZjK6_jz1OVNrHpSpUwDmA.roa (raw, json)
Hash identifier: rdcv8IPJcM/w55TaKJd0j49JEZyPetHIgsAhZd5PgZA=
Subject key identifier: 0C:C0:08:03:66:63:2B:AF:E3:CF:53:95:36:B1:E9:4A:95:30:0E:60
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 019ECFA00F5A2E9F2F09A49F6517ED819255
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/DMAIA2ZjK6_jz1OVNrHpSpUwDmA.roa
Signing time: Tue 16 Jun 2026 08:50:33 +0000
ROA not before: Tue 16 Jun 2026 08:50:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42848
IP address blocks: 147.67.0.0/17 maxlen: 17
147.67.128.0/17 maxlen: 17
158.166.0.0/16 maxlen: 16
158.166.245.0/24 maxlen: 24
158.167.0.0/16 maxlen: 16
158.167.35.0/24 maxlen: 24
158.167.245.0/24 maxlen: 24
158.168.0.0/16 maxlen: 16
158.168.35.0/24 maxlen: 24
158.169.0.0/17 maxlen: 17
158.169.128.0/17 maxlen: 17
2a01:7080::/32 maxlen: 32
2a01:7080:14::/48 maxlen: 48
2a01:7080:16::/48 maxlen: 48
2a01:7080:24::/48 maxlen: 48
2a01:7080:26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:a0:0f:5a:2e:9f:2f:09:a4:9f:65:17:ed:81:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Jun 16 08:50:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cc0080366632bafe3cf539536b1e94a95300e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:6f:af:3c:0f:a1:f7:ad:03:0d:e4:11:bf:
96:96:f9:fd:49:32:c9:fc:42:95:00:47:7e:ee:dc:
0b:54:74:82:3b:0b:66:be:fe:d6:50:9f:c0:59:95:
0d:9b:a6:b5:5a:c7:36:b2:99:03:cd:80:f6:ff:37:
01:20:76:49:9a:90:74:59:74:2f:34:15:f8:3f:64:
2f:ea:8f:87:d2:0b:f0:1d:21:15:70:9a:58:fb:e6:
2b:d6:5d:03:de:b9:c6:45:f8:05:87:97:3c:b3:6f:
5c:d6:e0:b6:cf:e5:8e:f5:bd:77:26:a3:ce:39:99:
fc:73:ed:6d:3a:52:49:b9:bd:2c:75:17:4a:14:00:
b7:0e:be:8d:f8:5c:e0:0b:73:96:0d:92:42:34:aa:
e7:69:43:ea:05:c3:dd:31:a9:fa:30:c8:10:38:40:
f7:c4:ee:77:84:e5:68:90:87:73:f4:f6:aa:8f:9f:
94:ab:1e:35:94:2f:26:b3:9e:d2:d6:15:a5:87:f4:
1b:0d:72:dd:c3:64:60:ae:f6:d3:44:11:b0:3f:27:
c2:68:8e:a7:75:d5:2a:59:ef:4f:a9:81:67:ae:cc:
86:9f:76:39:a6:4e:46:10:bc:97:55:1b:a5:9c:1e:
c4:af:18:35:f1:88:d2:68:09:e5:db:d1:f5:a6:b2:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C0:08:03:66:63:2B:AF:E3:CF:53:95:36:B1:E9:4A:95:30:0E:60
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/DMAIA2ZjK6_jz1OVNrHpSpUwDmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.67.0.0/16
158.166.0.0-158.169.255.255
IPv6:
2a01:7080::/32
Signature Algorithm: sha256WithRSAEncryption
68:86:17:25:b8:49:3b:bc:2b:0f:15:31:7b:49:e9:22:7a:c8:
b4:61:8e:bc:85:8c:fd:32:88:06:80:88:e1:62:52:8b:dc:e2:
33:d7:0a:b7:85:66:47:6d:7c:cd:b0:c2:61:07:c6:73:28:0d:
a3:42:95:25:47:bb:82:6b:4b:e0:b9:ca:bc:5e:ce:03:9d:38:
33:47:11:f6:0e:e3:17:f2:4c:34:2a:78:79:72:90:2e:6e:bd:
4e:4c:a9:d6:86:3a:33:4a:d9:ee:4b:16:27:13:b2:c7:66:5f:
ea:89:9d:62:5e:08:05:4a:27:b6:a6:3d:eb:4d:a9:83:13:dc:
3e:f7:d7:1b:e8:44:b1:65:18:62:e6:63:7d:06:65:9d:55:a9:
0e:f1:b2:7d:08:15:df:59:8c:73:d1:9e:93:67:20:04:9b:0a:
30:b5:10:65:7f:b5:c5:1e:06:30:2d:99:70:f1:b2:55:3d:26:
68:71:dc:5e:0d:89:05:d6:be:2b:78:1f:5b:14:87:f7:b6:66:
c6:b2:1c:dd:99:ce:4b:a6:0b:e5:7e:d3:64:56:f2:ae:82:62:
fd:99:99:d1:3b:d4:a0:3a:e5:5d:5d:bd:52:c0:e0:a2:32:62:
7e:05:eb:d5:8c:36:36:fc:12:af:3f:ed:b4:54:98:8a:d8:ec:
b5:82:d7:c6
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ7PoA9aLp8vCaSfZRftgZJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzkwYzFjMzYxZGYwNTIyNDM3NjEwOGVmZjliMjBkYzJl
ZTAyNjUwHhcNMjYwNjE2MDg1MDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2MwMDgwMzY2NjMyYmFmZTNjZjUzOTUzNmIxZTk0YTk1MzAwZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUpvrzwPofetAw3kEb+Wlvn9STLJ
/EKVAEd+7twLVHSCOwtmvv7WUJ/AWZUNm6a1Wsc2spkDzYD2/zcBIHZJmpB0WXQv
NBX4P2Qv6o+H0gvwHSEVcJpY++Yr1l0D3rnGRfgFh5c8s29c1uC2z+WO9b13JqPO
OZn8c+1tOlJJub0sdRdKFAC3Dr6N+FzgC3OWDZJCNKrnaUPqBcPdMan6MMgQOED3
xO53hOVokIdz9Paqj5+Uqx41lC8ms57S1hWlh/QbDXLdw2RgrvbTRBGwPyfCaI6n
ddUqWe9PqYFnrsyGn3Y5pk5GELyXVRulnB7Erxg18YjSaAnl29H1prKaWwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAzACANmYyuv489TlTax6UqVMA5gMB8GA1UdIwQY
MBaAFOA5DBw2HfBSJDdhCO/5sg3C7gJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERrTUhEWWQ4RklrTjJFSTdfbXlEY0x1QW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYzBmMDQtOGNhZi00OWQ0LWFhYjct
NTllNjExZDc2NTc0LzEvRE1BSUEyWmpLNl9qejFPVk5ySHBTcFV3RG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYzBmMDQtOGNhZi00OWQ0LWFhYjctNTllNjExZDc2NTc0
LzEvNERrTUhEWWQ4RklrTjJFSTdfbXlEY0x1QW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAk0MwCgMD
AZ6mAwMBnqgwDQQCAAIwBwMFACoBcIAwDQYJKoZIhvcNAQELBQADggEBAGiGFyW4
STu8Kw8VMXtJ6SJ6yLRhjryFjP0yiAaAiOFiUovc4jPXCreFZkdtfM2wwmEHxnMo
DaNClSVHu4JrS+C5yrxezgOdODNHEfYO4xfyTDQqeHlykC5uvU5MqdaGOjNK2e5L
FicTssdmX+qJnWJeCAVKJ7amPetNqYMT3D731xvoRLFlGGLmY30GZZ1VqQ7xsn0I
Fd9ZjHPRnpNnIASbCjC1EGV/tcUeBjAtmXDxslU9Jmhx3F4NiQXWvit4H1sUh/e2
ZsayHN2ZzkumC+V+02RW8q6CYv2ZmdE71KA65V1dvVLA4KIyYn4F69WMNjb8Eq8/
7bRUmIrY7LWC18Y=
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:55 2026 by rpki-client