Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/_mXNiEyzoLTdlZS540O0pnwDOW8.roa
File: _mXNiEyzoLTdlZS540O0pnwDOW8.roa (raw, json)
Hash identifier: j1fVCxk0bP7hRI+j87ih0al1KJnzWkx9KyZJo2+Hlm4=
Subject key identifier: FE:65:CD:88:4C:B3:A0:B4:DD:95:94:B9:E3:43:B4:A6:7C:03:39:6F
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A0030B9C4AF4EEF9F97FFC1116393CF792
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/_mXNiEyzoLTdlZS540O0pnwDOW8.roa
Signing time: Sat 15 Aug 2026 01:31:27 +0000
ROA not before: Sat 15 Aug 2026 01:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215659
IP address blocks: 150.40.117.0/24 maxlen: 24
2a0e:bfc7:1400::/48 maxlen: 48
2a0e:bfc7:1401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:0b:9c:4a:f4:ee:f9:f9:7f:fc:11:16:39:3c:f7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Aug 15 01:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe65cd884cb3a0b4dd9594b9e343b4a67c03396f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:b9:ef:09:71:10:6e:09:4e:37:00:e3:53:
a0:45:e2:07:06:3c:23:46:ec:40:3e:93:ce:db:f5:
4c:ce:c0:50:c1:00:cc:43:06:e7:b5:24:18:01:ab:
39:9b:44:c5:15:80:9c:35:83:2e:60:e4:e7:c9:74:
d2:63:e8:ab:e8:a1:df:1f:4c:87:b1:8c:12:9b:72:
75:93:f3:63:4c:52:c0:f3:b8:4a:ba:e1:40:d3:02:
f2:a0:8e:06:2a:16:61:7a:df:47:f5:69:98:9f:1f:
31:0e:2b:55:af:8b:29:a3:89:ea:b9:78:d6:a6:6b:
9c:12:dc:98:66:7c:b5:bc:a5:f3:0e:7b:08:ae:54:
91:d3:bf:de:aa:78:d3:88:59:82:04:a4:7a:2f:10:
c0:06:47:13:aa:26:70:4f:06:e9:6d:37:f6:44:65:
a9:58:8d:03:ae:e1:34:9c:2a:d2:7c:f8:32:dc:3f:
4e:27:87:48:0f:be:0b:ae:12:9e:2f:d3:82:5b:38:
ff:7e:88:fa:68:61:78:d4:30:7b:0a:5a:07:d6:05:
88:32:57:4b:b8:cc:d2:a9:42:ab:4a:18:d8:d5:5f:
18:d8:02:ff:54:c4:e6:3b:b6:e0:62:f8:76:45:1f:
2e:80:29:f4:9c:7e:37:c2:38:f0:b8:9d:d6:20:96:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:65:CD:88:4C:B3:A0:B4:DD:95:94:B9:E3:43:B4:A6:7C:03:39:6F
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/_mXNiEyzoLTdlZS540O0pnwDOW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.117.0/24
IPv6:
2a0e:bfc7:1400::/47
Signature Algorithm: sha256WithRSAEncryption
0a:5a:a6:3a:9b:5b:90:8f:ae:67:e8:50:1f:53:37:21:c6:f4:
e6:a6:6e:a1:be:29:c8:02:78:2f:e3:d8:e4:12:ce:84:d5:05:
5d:74:c0:d3:b6:e5:37:cf:e2:27:db:11:e1:02:fa:15:64:09:
66:e0:3e:51:d8:b3:a8:72:9d:f4:13:3e:87:ed:a7:e6:85:76:
a5:35:08:07:4c:96:8b:29:91:91:7a:16:14:5b:23:0f:eb:65:
2b:85:cf:34:08:3e:b6:15:73:f2:bf:48:b6:8b:9b:cb:fd:33:
53:e1:a5:86:25:39:7d:1e:6c:6d:45:99:e8:21:4a:ac:f1:89:
9f:57:14:a3:f4:b7:bc:f4:0a:0c:1c:a5:17:5e:15:70:0c:8f:
ac:d8:6e:ad:71:ee:82:94:15:fa:43:d9:85:6e:57:4c:60:d9:
74:85:fd:5a:20:b2:46:f7:e7:bb:da:92:0d:1a:cd:73:34:6c:
34:9f:f4:85:18:b1:e8:49:28:ee:a8:76:53:8f:15:6e:a5:a6:
82:d9:bc:31:20:2f:a3:eb:4e:65:97:7f:15:3e:f0:23:ee:b5:
99:31:3b:88:bf:ee:1a:ca:7f:b3:04:7f:2b:49:b9:46:32:06:
17:78:1b:93:b0:ee:96:90:ae:76:dd:00:9a:33:65:29:ae:47:
56:69:bf:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaADC5xK9O75+X/8ERY5PPeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjYwODE1MDEzMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTY1Y2Q4ODRjYjNhMGI0ZGQ5NTk0YjllMzQzYjRhNjdjMDMzOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jm57wlxEG4JTjcA41OgReIHBjwj
RuxAPpPO2/VMzsBQwQDMQwbntSQYAas5m0TFFYCcNYMuYOTnyXTSY+ir6KHfH0yH
sYwSm3J1k/NjTFLA87hKuuFA0wLyoI4GKhZhet9H9WmYnx8xDitVr4spo4nquXjW
pmucEtyYZny1vKXzDnsIrlSR07/eqnjTiFmCBKR6LxDABkcTqiZwTwbpbTf2RGWp
WI0DruE0nCrSfPgy3D9OJ4dID74LrhKeL9OCWzj/foj6aGF41DB7CloH1gWIMldL
uMzSqUKrShjY1V8Y2AL/VMTmO7bgYvh2RR8ugCn0nH43wjjwuJ3WIJZDIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP5lzYhMs6C03ZWUueNDtKZ8AzlvMB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvX21YTmlFeXpvTFRkbFpTNTQwTzBwbndET1c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlih1MA8E
AgACMAkDBwEqDr/HFAAwDQYJKoZIhvcNAQELBQADggEBAApapjqbW5CPrmfoUB9T
NyHG9OambqG+KcgCeC/j2OQSzoTVBV10wNO25TfP4ifbEeEC+hVkCWbgPlHYs6hy
nfQTPoftp+aFdqU1CAdMlospkZF6FhRbIw/rZSuFzzQIPrYVc/K/SLaLm8v9M1Ph
pYYlOX0ebG1FmeghSqzxiZ9XFKP0t7z0CgwcpRdeFXAMj6zYbq1x7oKUFfpD2YVu
V0xg2XSF/Vogskb357vakg0azXM0bDSf9IUYsehJKO6odlOPFW6lpoLZvDEgL6Pr
TmWXfxU+8CPutZkxO4i/7hrKf7MEfytJuUYyBhd4G5Ow7paQrnbdAJozZSmuR1Zp
v00=
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:09:05 2026 by rpki-client