Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/1-AnQsPvquasIYQF_pbTcTs5sQ4k.roa
File: 1-AnQsPvquasIYQF_pbTcTs5sQ4k.roa (raw, json)
Hash identifier: mq1rSn55gnymBbNseBpxuFvSEdX74zl3MSqDR0xhbUI=
Subject key identifier: F8:09:D0:B0:FB:EA:B9:AB:08:61:01:7F:A5:B4:DC:4E:CE:6C:43:89
Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial: 01A07BEF5FA632BE89B7B2AD4F2381CDAD91
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/1-AnQsPvquasIYQF_pbTcTs5sQ4k.roa
Signing time: Mon 07 Sep 2026 12:54:40 +0000
ROA not before: Mon 07 Sep 2026 12:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210915
IP address blocks: 150.251.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:ef:5f:a6:32:be:89:b7:b2:ad:4f:23:81:cd:ad:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
Validity
Not Before: Sep 7 12:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f809d0b0fbeab9ab0861017fa5b4dc4ece6c4389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:40:4d:47:57:cb:c3:d2:c3:a6:23:2e:2d:
d2:3a:b9:b4:9d:c1:f4:d3:1c:8e:81:0e:13:ed:c5:
cd:cc:ca:51:31:93:dc:ee:b9:c8:0d:c9:ce:d1:a3:
d9:98:63:00:dc:91:53:47:70:6f:4d:c6:71:8b:f9:
35:95:a5:a0:6a:f6:66:01:85:12:6a:69:55:6c:c9:
56:4e:c4:f6:35:f1:74:ff:44:ce:44:15:1f:d1:0b:
b5:e4:eb:1d:c6:e2:df:ae:39:60:d4:ae:0c:3d:30:
5c:0a:b4:37:4f:f2:70:1c:ce:6e:f3:c7:db:a6:4a:
0e:b9:e7:6b:0c:22:0d:ed:63:5d:36:41:75:b2:f8:
e8:e8:45:02:0d:eb:43:c5:a3:e2:96:13:0d:6d:63:
54:32:ab:e5:b7:d3:88:f4:8e:d0:42:4f:8c:1e:bd:
2e:2f:76:db:fe:8c:36:a0:5c:d7:5a:d9:ba:16:7d:
56:ed:83:51:45:de:c8:eb:a2:85:b5:2c:28:3f:c6:
97:d2:80:76:8d:45:12:f9:f9:46:6b:08:b9:af:d7:
45:71:a7:28:a7:6c:51:2f:c5:14:89:bd:25:82:de:
c3:ca:80:10:19:7c:f9:87:b1:95:54:d4:bd:1e:52:
b0:35:7b:47:7e:88:65:c2:94:47:84:df:0a:32:9c:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:09:D0:B0:FB:EA:B9:AB:08:61:01:7F:A5:B4:DC:4E:CE:6C:43:89
X509v3 Authority Key Identifier:
keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/1-AnQsPvquasIYQF_pbTcTs5sQ4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.48.0/24
Signature Algorithm: sha256WithRSAEncryption
79:41:59:4a:38:14:16:b8:96:37:27:bd:b8:2e:c7:23:93:63:
ef:da:e0:0c:e9:49:3c:de:e2:f0:f7:71:c5:ac:7f:3f:c0:e1:
54:c1:32:be:a0:50:79:4a:30:04:3a:ac:c0:5e:e7:c2:d0:4f:
5c:05:36:b6:19:30:ab:82:97:99:8e:04:98:5d:86:96:09:20:
a6:aa:2e:e8:8e:67:b4:4d:5b:b2:c6:0b:b9:b2:cb:28:e7:76:
bf:21:52:b3:35:a3:95:5f:93:1f:cc:d4:f1:b7:8e:cc:37:e3:
a6:3c:23:c2:9d:f6:22:e6:6a:c9:eb:31:15:67:ff:74:d2:17:
4c:15:b7:ce:a6:05:d0:ff:84:68:76:7b:9e:cd:8e:87:37:a2:
37:88:e7:6c:9d:53:e0:12:d2:60:66:25:51:40:47:23:53:3f:
d9:69:b9:b4:92:42:37:4f:26:ab:e5:63:42:4b:78:d8:49:38:
40:e5:05:0e:cf:b1:a4:b7:a0:d8:50:c7:fe:f6:3c:1c:21:78:
50:e0:4c:e5:bd:ef:4a:cd:69:4d:40:3a:41:f9:21:7f:b8:5d:
1a:1e:71:81:3a:0f:73:75:f2:ce:e9:99:56:f4:27:95:0a:f7:
02:dd:3a:db:00:af:7e:27:65:d9:9c:82:42:8a:f5:6d:09:cf:
0a:39:72:7e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaB771+mMr6Jt7KtTyOBza2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYmQ0NmU4NjJkZTAzMTkxZmYzMTMxYWNjNzhlMTk3MDk1
OTZhMWMwHhcNMjYwOTA3MTI1NDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODA5ZDBiMGZiZWFiOWFiMDg2MTAxN2ZhNWI0ZGM0ZWNlNmM0Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UBATUdXy8PSw6YjLi3SOrm0ncH0
0xyOgQ4T7cXNzMpRMZPc7rnIDcnO0aPZmGMA3JFTR3BvTcZxi/k1laWgavZmAYUS
amlVbMlWTsT2NfF0/0TORBUf0Qu15OsdxuLfrjlg1K4MPTBcCrQ3T/JwHM5u88fb
pkoOuedrDCIN7WNdNkF1svjo6EUCDetDxaPilhMNbWNUMqvlt9OI9I7QQk+MHr0u
L3bb/ow2oFzXWtm6Fn1W7YNRRd7I66KFtSwoP8aX0oB2jUUS+flGawi5r9dFcaco
p2xRL8UUib0lgt7DyoAQGXz5h7GVVNS9HlKwNXtHfohlwpRHhN8KMpz02QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgJ0LD76rmrCGEBf6W03E7ObEOJMB8GA1UdIwQY
MBaAFLq9Ruhi3gMZH/MTGsx44ZcJWWocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXIxRzZHTGVBeGtmOHhNYXpIamhsd2xaYWh3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZjVlNjYtZWNjYy00MzdjLTg5ZjUt
MjZmYTZhZWU4ZmU1LzEvMS1BblFzUHZxdWFzSVlRRl9wYlRjVHM1c1E0ay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2UvM2Y1ZTY2LWVjY2MtNDM3Yy04OWY1LTI2ZmE2YWVlOGZl
NS8xL3VyMUc2R0xlQXhrZjh4TWF6SGpobHdsWmFody5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJb7MDAN
BgkqhkiG9w0BAQsFAAOCAQEAeUFZSjgUFriWNye9uC7HI5Nj79rgDOlJPN7i8Pdx
xax/P8DhVMEyvqBQeUowBDqswF7nwtBPXAU2thkwq4KXmY4EmF2Glgkgpqou6I5n
tE1bssYLubLLKOd2vyFSszWjlV+TH8zU8beOzDfjpjwjwp32IuZqyesxFWf/dNIX
TBW3zqYF0P+EaHZ7ns2OhzeiN4jnbJ1T4BLSYGYlUUBHI1M/2Wm5tJJCN08mq+Vj
Qkt42Ek4QOUFDs+xpLeg2FDH/vY8HCF4UOBM5b3vSs1pTUA6Qfkhf7hdGh5xgToP
c3XyzumZVvQnlQr3At062wCvfidl2ZyCQor1bQnPCjlyfg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:05:07 2026 by rpki-client