Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/dekeUIUO9T5iudR5OgsQwRl5gKI.roa
File: dekeUIUO9T5iudR5OgsQwRl5gKI.roa (raw, json)
Hash identifier: Thq7Xkhfa6hYvCBOhOwK4u/BZsc5f9iIPauMbjqNGN8=
Subject key identifier: 75:E9:1E:50:85:0E:F5:3E:62:B9:D4:79:3A:0B:10:C1:19:79:80:A2
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 01A0A53372484EC4DB893F3727D774EA0FEE
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/dekeUIUO9T5iudR5OgsQwRl5gKI.roa
Signing time: Tue 15 Sep 2026 13:13:27 +0000
ROA not before: Tue 15 Sep 2026 13:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204490
IP address blocks: 159.200.200.0/24 maxlen: 24
185.36.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:33:72:48:4e:c4:db:89:3f:37:27:d7:74:ea:0f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Sep 15 13:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75e91e50850ef53e62b9d4793a0b10c1197980a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:d4:4c:a6:f9:7c:bc:5c:e0:25:d0:77:88:
61:ab:e4:72:fd:e1:75:98:d4:3b:67:45:80:70:db:
6a:80:d8:b3:ec:56:e9:0f:3a:d4:75:e4:42:e8:14:
b7:6e:2a:15:2f:a9:e8:21:b9:f5:2c:f8:5a:1c:c2:
dc:64:b3:70:b5:68:43:a5:5a:25:e9:1c:23:dc:a0:
cd:ae:b2:a9:95:f2:29:7c:69:65:3e:39:de:cb:fa:
70:9c:ef:2c:ba:7a:14:32:80:b5:92:9b:cf:21:a0:
f7:09:c9:6f:67:7d:33:0c:46:83:14:ff:23:a6:79:
82:2c:77:cf:a7:0c:6a:9b:1d:8a:25:39:d2:37:5c:
0e:45:8b:fe:5c:3a:11:ca:c5:80:9e:a8:3f:00:10:
2e:21:15:ac:65:f3:12:29:99:c5:75:0a:fd:2b:81:
2d:a4:5f:f7:37:35:da:25:2e:2e:21:dc:f7:06:62:
de:7b:3e:92:b5:3b:0e:b9:8e:75:ec:38:d6:aa:db:
0b:9e:44:96:2b:09:df:d7:36:d1:4e:7e:17:a7:fb:
b0:04:26:24:ec:b0:fc:d4:e2:1a:aa:6a:06:e8:6d:
33:f1:90:9b:a2:3d:6d:ee:88:48:c1:72:0d:b5:63:
ef:9a:99:30:57:e9:7e:e8:ea:b8:1c:71:28:6b:a7:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:1E:50:85:0E:F5:3E:62:B9:D4:79:3A:0B:10:C1:19:79:80:A2
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/dekeUIUO9T5iudR5OgsQwRl5gKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.200.0/24
185.36.23.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5c:a3:7f:5b:65:44:6b:64:28:55:11:df:f5:27:cd:cb:f3:
a0:56:2b:2f:21:4f:96:47:4a:ed:23:d0:e4:64:c1:68:2c:fb:
f2:06:98:2a:80:6c:94:fa:28:78:9f:3f:cf:82:d1:ed:eb:a7:
ff:4c:5a:b6:72:a0:0c:35:7e:97:9c:82:84:51:ed:36:f8:5f:
c6:ad:5b:9d:9b:6a:8d:a6:ce:22:b9:69:21:bf:48:31:9d:85:
f2:1d:e0:1a:cb:f5:0a:c6:63:b9:f0:93:fd:81:49:33:c8:24:
7b:69:a3:9c:54:cd:88:9f:70:3f:03:81:db:26:09:23:e8:a3:
5f:d2:b4:c8:fe:7f:15:e3:0e:37:03:ea:54:1c:46:32:a6:bd:
57:67:79:c8:f8:19:dd:15:9a:f0:f4:92:1e:46:1c:3d:3d:21:
74:1a:5e:0a:d1:ed:56:09:b9:9e:11:c2:d5:e5:94:34:94:f4:
e9:5d:0f:4c:b4:fc:58:f5:95:fd:be:eb:b9:9a:43:6f:e7:01:
2a:d1:d7:8c:2d:7c:8e:d8:68:f8:ed:1a:3c:a7:8d:c9:05:d0:
55:4a:31:b9:ac:9b:18:15:80:86:27:93:a3:8f:9e:dc:0d:71:
4b:7e:85:c2:ea:a0:c7:9c:42:1a:b6:cb:77:09:13:15:7d:64:
4a:b7:a7:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaClM3JITsTbiT83J9d06g/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MGEzNzM0OTNhMTBhY2JhZjMxZmRmNDQ1NjE3YTYyYzRk
NDZmY2YwHhcNMjYwOTE1MTMxMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWU5MWU1MDg1MGVmNTNlNjJiOWQ0NzkzYTBiMTBjMTE5Nzk4MGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OPUTKb5fLxc4CXQd4hhq+Ry/eF1
mNQ7Z0WAcNtqgNiz7FbpDzrUdeRC6BS3bioVL6noIbn1LPhaHMLcZLNwtWhDpVol
6Rwj3KDNrrKplfIpfGllPjney/pwnO8sunoUMoC1kpvPIaD3CclvZ30zDEaDFP8j
pnmCLHfPpwxqmx2KJTnSN1wORYv+XDoRysWAnqg/ABAuIRWsZfMSKZnFdQr9K4Et
pF/3NzXaJS4uIdz3BmLeez6StTsOuY517DjWqtsLnkSWKwnf1zbRTn4Xp/uwBCYk
7LD81OIaqmoG6G0z8ZCboj1t7ohIwXINtWPvmpkwV+l+6Oq4HHEoa6eNkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHXpHlCFDvU+YrnUeToLEMEZeYCiMB8GA1UdIwQY
MBaAFBUKNzSToQrLrzH99EVhemLE1G/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFvM05KT2hDc3V2TWYzMFJXRjZZc1RVYjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNDllZDEtNDJkMi00MzA2LTk5YWEt
MDViODllZjk5MmRmLzEvZGVrZVVJVU85VDVpdWRSNU9nc1F3Umw1Z0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hNDllZDEtNDJkMi00MzA2LTk5YWEtMDViODllZjk5MmRm
LzEvRlFvM05KT2hDc3V2TWYzMFJXRjZZc1RVYjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAn8jIAwQA
uSQXMA0GCSqGSIb3DQEBCwUAA4IBAQCGXKN/W2VEa2QoVRHf9SfNy/OgVisvIU+W
R0rtI9DkZMFoLPvyBpgqgGyU+ih4nz/PgtHt66f/TFq2cqAMNX6XnIKEUe02+F/G
rVudm2qNps4iuWkhv0gxnYXyHeAay/UKxmO58JP9gUkzyCR7aaOcVM2In3A/A4Hb
Jgkj6KNf0rTI/n8V4w43A+pUHEYypr1XZ3nI+BndFZrw9JIeRhw9PSF0Gl4K0e1W
CbmeEcLV5ZQ0lPTpXQ9MtPxY9ZX9vuu5mkNv5wEq0deMLXyO2Gj47Ro8p43JBdBV
SjG5rJsYFYCGJ5Ojj57cDXFLfoXC6qDHnEIatst3CRMVfWRKt6eF
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:40 2026 by rpki-client