Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NJZJa2ckGbdMNTiN8vfb78OgdNU.roa
File: NJZJa2ckGbdMNTiN8vfb78OgdNU.roa (raw, json)
Hash identifier: P245pCKIkcUC+8uIrj7xAlZzjDdyiKZoGSIAfd0qEdM=
Subject key identifier: 34:96:49:6B:67:24:19:B7:4C:35:38:8D:F2:F7:DB:EF:C3:A0:74:D5
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D3573FC1DE5C471D99598D7D2106AC6EC
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NJZJa2ckGbdMNTiN8vfb78OgdNU.roa
Signing time: Sat 28 Mar 2026 17:18:06 +0000
ROA not before: Sat 28 Mar 2026 17:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 150.251.132.0/23 maxlen: 24
150.251.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:73:fc:1d:e5:c4:71:d9:95:98:d7:d2:10:6a:c6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 28 17:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3496496b672419b74c35388df2f7dbefc3a074d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:bf:f0:34:65:e5:f2:5a:0b:b6:b7:65:9c:
8a:ed:5e:fb:61:a7:17:e5:42:f2:c0:d1:3e:27:63:
e5:63:02:3d:1b:ea:e0:62:41:22:d3:4c:80:e7:44:
32:07:0a:92:99:35:d1:6b:f0:2c:50:ba:aa:9a:d1:
18:41:a6:63:d7:74:8b:09:60:95:16:bd:ee:ea:ba:
7f:a2:cd:2f:e4:9f:9c:ff:a2:2c:2b:bf:7f:1c:22:
22:49:32:26:3f:96:8f:ec:52:8d:c6:2d:c5:1c:97:
37:d6:e9:98:bb:ac:3c:ad:60:45:58:9a:fc:aa:07:
8f:3b:14:43:43:5c:6d:70:ee:28:e0:b7:f3:35:27:
11:fc:65:5c:8c:bd:d4:73:39:05:4b:b9:96:62:1d:
25:ed:69:80:39:19:8d:19:63:c5:11:cc:d9:17:2d:
36:fd:2f:7d:ef:76:17:7e:00:65:cb:15:c7:69:72:
c6:cc:9d:f3:f2:23:4c:d8:ae:44:bf:e1:4e:9f:17:
12:a9:22:11:65:77:c8:f1:eb:7b:56:76:35:07:c2:
82:6b:45:fa:c4:51:84:dd:9b:cd:a7:29:d1:94:6c:
a7:7d:07:f8:6d:14:c6:d3:a7:e2:ae:cb:f6:6b:c6:
f0:79:ce:7c:6b:b0:c8:cc:c4:5e:25:4f:bf:3f:7c:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:49:6B:67:24:19:B7:4C:35:38:8D:F2:F7:DB:EF:C3:A0:74:D5
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NJZJa2ckGbdMNTiN8vfb78OgdNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.132.0/22
Signature Algorithm: sha256WithRSAEncryption
68:58:62:96:40:5a:ba:51:47:dc:22:97:29:30:2a:bf:1e:5e:
1c:60:f9:31:1f:af:76:58:3c:c4:8a:8e:88:9b:df:25:60:b9:
39:20:8f:81:fc:23:c7:8d:3c:2e:b8:25:76:de:cd:40:bc:20:
6e:c0:a1:a3:2e:4c:9d:c1:dd:7e:7a:b6:8c:1f:85:85:4c:75:
67:d2:76:19:d6:af:14:ae:ff:cb:e5:ca:2d:0f:ef:4f:77:aa:
b2:6e:44:15:3f:4c:11:6c:12:dc:54:fa:d5:70:03:d5:54:cc:
1e:16:40:dc:d7:98:b3:ae:4f:1c:0a:aa:94:aa:43:28:2e:1f:
da:68:53:a7:80:d3:8c:73:92:71:0a:e6:64:1e:c0:a5:46:3a:
fc:d8:03:a3:b2:b2:af:95:05:20:03:ed:ac:0a:76:cd:c1:30:
0c:49:19:35:24:ab:ff:09:4b:45:7a:ee:fb:17:10:29:6b:bc:
a4:b4:b5:b5:b6:30:64:cc:81:f5:24:6a:8a:1f:a9:15:28:06:
f2:a0:39:4d:38:c4:48:a3:2d:a2:da:b3:fd:86:73:5d:aa:8f:
15:ae:b5:d7:e3:a2:23:91:77:5f:1c:39:a2:76:c9:a9:29:5b:
da:7e:f3:5e:0a:b7:d6:bd:df:02:24:19:1a:41:41:fe:86:75:
6e:5b:4d:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ01c/wd5cRx2ZWY19IQasbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwMzI4MTcxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDk2NDk2YjY3MjQxOWI3NGMzNTM4OGRmMmY3ZGJlZmMzYTA3NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+y/8DRl5fJaC7a3ZZyK7V77YacX
5ULywNE+J2PlYwI9G+rgYkEi00yA50QyBwqSmTXRa/AsULqqmtEYQaZj13SLCWCV
Fr3u6rp/os0v5J+c/6IsK79/HCIiSTImP5aP7FKNxi3FHJc31umYu6w8rWBFWJr8
qgePOxRDQ1xtcO4o4LfzNScR/GVcjL3UczkFS7mWYh0l7WmAORmNGWPFEczZFy02
/S9973YXfgBlyxXHaXLGzJ3z8iNM2K5Ev+FOnxcSqSIRZXfI8et7VnY1B8KCa0X6
xFGE3ZvNpynRlGynfQf4bRTG06firsv2a8bwec58a7DIzMReJU+/P3w0BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDSWSWtnJBm3TDU4jfL32+/DoHTVMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvTkpaSmEyY2tHYmRNTlRpTjh2ZmI3OE9nZE5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClvuEMA0G
CSqGSIb3DQEBCwUAA4IBAQBoWGKWQFq6UUfcIpcpMCq/Hl4cYPkxH692WDzEio6I
m98lYLk5II+B/CPHjTwuuCV23s1AvCBuwKGjLkydwd1+eraMH4WFTHVn0nYZ1q8U
rv/L5cotD+9Pd6qybkQVP0wRbBLcVPrVcAPVVMweFkDc15izrk8cCqqUqkMoLh/a
aFOngNOMc5JxCuZkHsClRjr82AOjsrKvlQUgA+2sCnbNwTAMSRk1JKv/CUtFeu77
FxApa7yktLW1tjBkzIH1JGqKH6kVKAbyoDlNOMRIoy2i2rP9hnNdqo8VrrXX46Ij
kXdfHDmidsmpKVvafvNeCrfWvd8CJBkaQUH+hnVuW03P
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:18 2026 by rpki-client