Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa
File: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (raw, json)
Hash identifier: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=
Subject key identifier: D3:0F:F7:A6:3F:98:8D:77:65:18:23:90:AC:EE:4C:98:78:B7:41:15
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019B7E37752CB14EE60E26C29AE086C479BC
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa
Signing time: Fri 02 Jan 2026 10:18:42 +0000
ROA not before: Fri 02 Jan 2026 10:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47524
IP address blocks: 146.19.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:75:2c:b1:4e:e6:0e:26:c2:9a:e0:86:c4:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Jan 2 10:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d30ff7a63f988d7765182390acee4c9878b74115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:19:32:ce:8d:ba:7c:5d:d5:48:37:42:fb:
da:b1:37:3a:68:a4:d3:5c:51:23:ee:51:28:fb:44:
74:30:0b:f4:f6:2f:e5:df:b3:1d:eb:c6:a5:51:ed:
ec:fb:58:95:f6:4f:df:bf:fa:c0:af:0c:60:92:6b:
8c:e0:9b:e6:3b:f7:95:4a:96:8d:b6:0e:dc:af:58:
d0:c2:87:68:60:f9:cb:8e:bd:74:25:f2:d9:f9:ee:
16:71:89:a9:be:96:42:fc:c1:c5:74:9d:de:3a:ff:
84:4e:6c:01:17:5c:85:2b:f2:0f:26:bc:27:99:00:
07:d1:19:68:d3:ab:3f:70:40:6a:e3:b8:f4:76:8f:
e6:35:53:4b:19:b3:68:a8:48:6e:07:17:48:cc:07:
dc:ef:cd:8e:50:fe:de:23:47:8d:e3:3a:57:6d:2c:
cb:75:22:f8:43:b0:05:fe:78:0a:d4:e4:34:ea:ee:
4a:e2:b1:45:0e:f4:4d:6d:c8:b8:1d:ab:61:73:34:
eb:3d:eb:0c:2b:42:b0:46:6f:63:dd:ad:a4:13:9e:
4f:ad:56:fd:92:21:43:0f:85:44:47:d1:5a:9b:ea:
04:ec:4b:66:c9:11:9a:da:e4:6e:9b:b1:22:e0:ab:
3f:a1:6f:66:c8:77:49:1e:df:a4:15:1a:6c:2e:e3:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:F7:A6:3F:98:8D:77:65:18:23:90:AC:EE:4C:98:78:B7:41:15
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.251.0/24
Signature Algorithm: sha256WithRSAEncryption
06:24:3a:07:cf:b6:af:c3:eb:3f:aa:7d:16:91:a6:22:3f:51:
7c:91:f2:af:3b:c9:8e:8d:3a:04:97:02:bc:04:fc:3d:e4:2f:
f7:cf:1d:c7:55:e5:f9:b1:09:86:65:4d:3e:86:e9:bd:1a:90:
92:e5:a2:6b:f9:d8:14:a5:47:57:6b:57:fb:e6:c6:71:a2:79:
bc:c1:36:36:46:19:b3:df:e6:6d:43:76:71:73:e1:cb:27:99:
69:50:28:fa:b6:0c:d2:f6:23:29:ff:01:f1:e7:ba:9c:ad:c1:
22:c1:12:d1:d8:c8:63:19:a0:28:bd:7d:13:f2:8e:9a:0a:93:
5c:db:cd:ea:1b:9c:6f:f1:7d:9c:73:fd:1d:f0:5c:ee:e8:59:
a5:0d:66:7c:5f:0d:7a:34:6f:62:b5:9f:da:b1:ac:d0:cb:89:
51:0e:22:3c:c1:28:9e:c0:af:69:f7:02:8e:91:4d:a2:49:62:
3a:c0:58:94:c3:cf:26:79:6d:a5:c2:89:a3:97:4a:4d:4f:3e:
f2:90:be:7e:1f:88:35:0f:50:c0:8c:f6:13:bd:d8:28:08:e1:
b9:2b:23:99:f8:68:68:96:72:2b:28:18:b4:f2:94:b0:1b:f0:
9f:2e:8a:8b:4e:ec:4a:2a:82:3b:85:2b:af:c3:fe:fd:fe:26:
57:bc:93:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N3UssU7mDibCmuCGxHm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDVlYWUxMzFjM2IxMDg4ZmZiMDIzNzk4MGQ2ZWUxODg5
NjY4YzYwHhcNMjYwMTAyMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzBmZjdhNjNmOTg4ZDc3NjUxODIzOTBhY2VlNGM5ODc4Yjc0MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gEZMs6Nunxd1Ug3QvvasTc6aKTT
XFEj7lEo+0R0MAv09i/l37Md68alUe3s+1iV9k/fv/rArwxgkmuM4JvmO/eVSpaN
tg7cr1jQwodoYPnLjr10JfLZ+e4WcYmpvpZC/MHFdJ3eOv+ETmwBF1yFK/IPJrwn
mQAH0Rlo06s/cEBq47j0do/mNVNLGbNoqEhuBxdIzAfc782OUP7eI0eN4zpXbSzL
dSL4Q7AF/ngK1OQ06u5K4rFFDvRNbci4HathczTrPesMK0KwRm9j3a2kE55PrVb9
kiFDD4VER9Fam+oE7EtmyRGa2uRum7Ei4Ks/oW9myHdJHt+kFRpsLuMXjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNMP96Y/mI13ZRgjkKzuTJh4t0EVMB8GA1UdIwQY
MBaAFNHV6uExw7EIj/sCN5gNbuGIlmjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQt
OWRhMmNmNGU2MDY1LzEvMHdfM3BqLVlqWGRsR0NPUXJPNU1tSGkzUVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMmVhZGYtNTNiNy00MjhhLTgxZWQtOWRhMmNmNGU2MDY1
LzEvMGRYcTRUSERzUWlQLXdJM21BMXU0WWlXYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhP7MA0G
CSqGSIb3DQEBCwUAA4IBAQAGJDoHz7avw+s/qn0WkaYiP1F8kfKvO8mOjToElwK8
BPw95C/3zx3HVeX5sQmGZU0+hum9GpCS5aJr+dgUpUdXa1f75sZxonm8wTY2Rhmz
3+ZtQ3Zxc+HLJ5lpUCj6tgzS9iMp/wHx57qcrcEiwRLR2MhjGaAovX0T8o6aCpNc
283qG5xv8X2cc/0d8Fzu6FmlDWZ8Xw16NG9itZ/asazQy4lRDiI8wSiewK9p9wKO
kU2iSWI6wFiUw88meW2lwomjl0pNTz7ykL5+H4g1D1DAjPYTvdgoCOG5KyOZ+Gho
lnIrKBi08pSwG/CfLoqLTuxKKoI7hSuvw/79/iZXvJNQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:39 2026 by rpki-client