Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/dic-beMQVUVF0zagysWITlXCfjU.roa
File: dic-beMQVUVF0zagysWITlXCfjU.roa (raw, json)
Hash identifier: D7rvEWiRJKlSjA45JriEa76ARTGZmdX9q7QqLCkAqf4=
Subject key identifier: 76:27:3E:6D:E3:10:55:45:45:D3:36:A0:CA:C5:88:4E:55:C2:7E:35
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01A01A8178EC2B3AEE1EDAE6F3B477F15C72
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/dic-beMQVUVF0zagysWITlXCfjU.roa
Signing time: Wed 19 Aug 2026 14:51:27 +0000
ROA not before: Wed 19 Aug 2026 14:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
195.203.152.0/23 maxlen: 23
195.203.156.0/22 maxlen: 22
217.27.0.0/23 maxlen: 23
217.27.2.0/23 maxlen: 23
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:7::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:127::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:197::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:227::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:247::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
2a03:5000:311::/48 maxlen: 48
2a03:5000:312::/48 maxlen: 48
2a03:5000:857::/48 maxlen: 48
2a03:5000:858::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:81:78:ec:2b:3a:ee:1e:da:e6:f3:b4:77:f1:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 19 14:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76273e6de310554545d336a0cac5884e55c27e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:02:b5:81:e7:72:5f:27:57:24:26:e6:d1:
0e:36:94:87:35:90:95:9e:40:f3:fd:d5:f1:a3:36:
8c:6b:7d:c6:9d:1f:a2:bd:78:d0:a2:70:a3:eb:d7:
ae:26:6d:40:6d:9c:23:12:8f:9b:64:b9:2a:97:98:
11:3f:e5:72:75:f6:31:d5:af:71:da:f8:9e:76:34:
9b:33:bc:f9:38:da:dc:6a:83:40:d6:31:99:18:1b:
c6:92:76:16:44:41:3f:f6:a9:78:b2:16:e6:f1:3c:
5f:5f:d9:ea:d9:cc:af:f8:7b:22:b8:e5:40:c7:cc:
80:ac:4f:57:a2:28:8a:87:e7:46:30:1b:2f:88:2f:
e5:ea:ad:60:1b:84:91:87:bf:d2:a6:6c:b5:2e:93:
16:49:34:a1:c4:41:4c:e8:25:19:d2:a3:98:24:79:
ce:42:83:43:d0:c2:f0:76:47:b7:3f:41:3f:d6:95:
a9:62:74:68:2a:c2:5f:51:57:38:ae:70:27:f5:bf:
31:f3:6c:e5:47:73:ac:8d:7a:29:c4:49:2a:f8:ff:
2e:86:42:81:37:f6:33:5f:0a:ac:54:a0:43:d9:72:
27:7e:fa:59:0c:aa:38:9f:ec:59:b4:cb:7a:81:9e:
4b:dd:e4:34:b7:6c:06:7c:37:bd:b5:1c:af:f5:22:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:27:3E:6D:E3:10:55:45:45:D3:36:A0:CA:C5:88:4E:55:C2:7E:35
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/dic-beMQVUVF0zagysWITlXCfjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0-217.27.4.255
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:7::/48
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:127::/48
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:197::/48
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:227::/48
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:247::/48
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
2a03:5000:857::-2a03:5000:858:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:1e:34:f5:b9:a3:4e:2f:02:f1:8e:27:ce:38:b0:78:2b:cb:
13:0b:29:f1:4c:f0:6f:8f:e0:f3:8d:43:10:44:06:8b:38:61:
e7:53:c3:f1:01:90:4b:9c:ea:5c:8a:9f:0f:f3:77:50:6b:23:
f6:4c:51:96:b8:60:3c:72:fc:03:5f:9c:ff:27:1d:a1:58:ef:
78:59:1c:c7:c1:a1:eb:5e:c4:9e:4f:15:13:33:d4:83:ef:24:
d9:4d:5a:0d:73:97:ff:2c:e5:92:b2:3c:b3:d4:e7:1a:c0:d7:
8b:60:e3:76:42:be:a3:78:bb:20:14:c7:90:e0:3a:c7:b7:5d:
96:f1:54:60:ec:03:74:f7:e2:60:0a:ba:9c:c2:72:59:15:b6:
e7:5d:4f:f3:79:ab:fb:a0:7f:ab:79:3e:23:f9:be:be:6f:2b:
fc:74:5b:35:82:1e:f4:5e:77:51:ce:2a:36:bc:d6:80:05:6a:
7d:f1:33:5b:0c:19:be:63:ca:04:4d:94:19:b8:4e:83:61:df:
f2:81:f6:25:6a:24:76:00:17:c6:2a:de:f8:cc:e7:fe:01:87:
8d:29:c3:b8:73:e2:39:ee:be:24:a4:37:55:44:b2:3c:11:38:
83:2b:a1:e9:37:c2:7b:7a:c4:ee:6b:be:3b:32:af:6b:64:0c:
1b:22:42:bb
-----BEGIN CERTIFICATE-----
MIIHsTCCBpmgAwIBAgISAaAagXjsKzruHtrm87R38VxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm
MmNmNGUwHhcNMjYwODE5MTQ1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjI3M2U2ZGUzMTA1NTQ1NDVkMzM2YTBjYWM1ODg0ZTU1YzI3ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFICtYHncl8nVyQm5tEONpSHNZCV
nkDz/dXxozaMa33GnR+ivXjQonCj69euJm1AbZwjEo+bZLkql5gRP+VydfYx1a9x
2viedjSbM7z5ONrcaoNA1jGZGBvGknYWREE/9ql4shbm8TxfX9nq2cyv+HsiuOVA
x8yArE9XoiiKh+dGMBsviC/l6q1gG4SRh7/Spmy1LpMWSTShxEFM6CUZ0qOYJHnO
QoND0MLwdke3P0E/1pWpYnRoKsJfUVc4rnAn9b8x82zlR3OsjXopxEkq+P8uhkKB
N/YzXwqsVKBD2XInfvpZDKo4n+xZtMt6gZ5L3eQ0t2wGfDe9tRyv9SLyaQIDAQAB
o4IEvTCCBLkwHQYDVR0OBBYEFHYnPm3jEFVFRdM2oMrFiE5Vwn41MB8GA1UdIwQY
MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt
ODY0MjM4YmMwNDliLzEvZGljLWJlTVFWVVZGMHphZ3lzV0lUbFhDZmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli
LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIC0QYIKwYBBQUHAQcBAf8EggLAMIICvDApBAIAATAjAwMA
lfoDBADAbewDAwDDyzALAwMA2RsDBADZGwQDBAHZGwYwggKNBAIAAjCCAoUwEgMH
ACoDUAAAAQMHACoDUAAAAgMHACoDUAAABzASAwcAKgNQAAARAwcAKgNQAAASMBID
BwUqA1AAACADBwAqA1AAACIwEgMHBCoDUAAAMAMHACoDUAAAMjASAwcAKgNQAABB
AwcAKgNQAABCMBIDBwAqA1AAAFEDBwAqA1AAAFIwEgMHACoDUAAAYQMHACoDUAAA
YjASAwcAKgNQAABxAwcAKgNQAAByMBIDBwAqA1AAAIEDBwAqA1AAAIIwEgMHACoD
UAAAkQMHACoDUAAAkjASAwcAKgNQAAEBAwcAKgNQAAECMBIDBwAqA1AAAREDBwAq
A1AAARIwEgMHACoDUAABIQMHACoDUAABIgMHACoDUAABJzASAwcAKgNQAAExAwcA
KgNQAAEyMBIDBwAqA1AAAUEDBwAqA1AAAUIwEgMHACoDUAABUQMHACoDUAABUjAS
AwcAKgNQAAFhAwcAKgNQAAFiMBIDBwAqA1AAAXEDBwAqA1AAAXIwEgMHACoDUAAB
gQMHACoDUAABgjASAwcAKgNQAAGRAwcAKgNQAAGSAwcAKgNQAAGXMBIDBwAqA1AA
AgEDBwAqA1AAAgIwEgMHACoDUAACEQMHACoDUAACEjASAwcAKgNQAAIhAwcAKgNQ
AAIiAwcAKgNQAAInMBIDBwAqA1AAAjEDBwAqA1AAAjIwEgMHACoDUAACQQMHACoD
UAACQgMHACoDUAACRzASAwcAKgNQAAJRAwcAKgNQAAJSMBIDBwAqA1AAAnEDBwAq
A1AAAnIwEgMHACoDUAACkQMHACoDUAACkjASAwcAKgNQAAMRAwcAKgNQAAMSMBID
BwAqA1AACFcDBwAqA1AACFgwDQYJKoZIhvcNAQELBQADggEBACIeNPW5o04vAvGO
J844sHgryxMLKfFM8G+P4PONQxBEBos4YedTw/EBkEuc6lyKnw/zd1BrI/ZMUZa4
YDxy/ANfnP8nHaFY73hZHMfBoetexJ5PFRMz1IPvJNlNWg1zl/8s5ZKyPLPU5xrA
14tg43ZCvqN4uyAUx5DgOse3XZbxVGDsA3T34mAKupzCclkVtuddT/N5q/ugf6t5
PiP5vr5vK/x0WzWCHvRed1HOKja81oAFan3xM1sMGb5jygRNlBm4ToNh3/KB9iVq
JHYAF8Yq3vjM5/4Bh40pw7hz4jnuviSkN1VEsjwROIMroek3wnt6xO5rvjsyr2tk
DBsiQrs=
-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:20 2026 by rpki-client