Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/PSp1cxfz6TziDoJrzI0ABy8wEl8.roa
File: PSp1cxfz6TziDoJrzI0ABy8wEl8.roa (raw, json)
Hash identifier: aYbPdrO0WMZOTkPdtDP60vftraMmAybeUwjVkg2VqsA=
Subject key identifier: 3D:2A:75:73:17:F3:E9:3C:E2:0E:82:6B:CC:8D:00:07:2F:30:12:5F
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D3F89F0FF47EF68AA4E394CFD89ACEFD4
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/PSp1cxfz6TziDoJrzI0ABy8wEl8.roa
Signing time: Mon 30 Mar 2026 16:18:17 +0000
ROA not before: Mon 30 Mar 2026 16:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 150.251.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:89:f0:ff:47:ef:68:aa:4e:39:4c:fd:89:ac:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 30 16:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d2a757317f3e93ce20e826bcc8d00072f30125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:4a:23:c8:a4:99:b7:d3:63:43:4b:66:16:
a5:d7:56:ed:c9:3c:81:d4:65:b7:0e:88:37:eb:aa:
7c:b0:56:e2:11:84:67:7f:e8:f5:c1:f2:0b:09:05:
4f:a0:28:e4:08:a3:fe:06:19:62:54:8c:2b:c5:da:
ce:4c:5f:cb:23:6d:ed:6c:7a:4f:a3:58:46:a7:20:
9c:7c:2a:9d:a1:8e:a3:82:35:34:14:6d:96:3e:6d:
a0:51:62:e0:0c:ab:ed:53:51:7d:ad:58:67:a3:93:
ef:b7:b9:b0:73:60:e9:10:ed:ba:75:1e:60:d9:9c:
c0:a7:6c:26:1c:9b:c9:a3:5c:c8:11:bf:e7:61:f3:
e1:12:d7:59:70:bf:8f:7e:5d:d5:0f:1f:3b:6b:2e:
ed:7a:bd:30:3d:af:83:92:2a:6b:48:6a:74:03:e0:
8a:3a:9e:e0:45:fd:ae:f7:0c:d9:93:37:32:09:2e:
13:bb:12:13:75:70:5e:fa:a8:da:ac:67:39:8f:5c:
a7:56:7a:37:02:7b:51:3e:45:59:16:55:e9:d1:65:
83:f8:db:73:db:99:9c:65:b1:57:cc:a6:6e:72:69:
6b:45:1f:c6:df:20:f7:ef:df:40:9f:c2:76:6e:53:
e5:96:0b:31:a3:6c:50:79:b8:e0:25:85:16:f1:bb:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:75:73:17:F3:E9:3C:E2:0E:82:6B:CC:8D:00:07:2F:30:12:5F
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/PSp1cxfz6TziDoJrzI0ABy8wEl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.140.0/24
Signature Algorithm: sha256WithRSAEncryption
35:88:90:99:50:bf:9d:07:9c:4b:1e:c6:87:24:ac:71:e9:ef:
eb:71:74:17:7b:af:6a:7b:b1:38:32:b8:93:54:86:fe:8e:01:
1c:79:81:92:45:2b:f6:f9:6e:db:f2:bf:7d:64:db:46:ef:80:
ef:38:78:1b:9e:e5:7c:8f:db:c6:99:5a:ef:a3:86:96:bb:48:
97:95:e9:fb:47:78:ce:03:9b:b6:56:2c:63:de:ff:80:82:4a:
33:ce:50:18:06:0c:c5:55:75:dd:77:ba:8f:4f:47:54:6b:08:
bc:d3:ef:f0:85:e0:75:32:b4:66:33:c3:6b:f5:8c:cd:ba:32:
68:ef:65:e3:9b:6d:ed:c8:9a:fb:1e:51:27:3e:10:60:fc:69:
f3:0d:24:12:19:49:31:63:0b:1f:87:b1:b6:08:5d:84:e4:80:
fd:10:af:ae:d8:99:b4:e5:7b:b1:09:58:7a:84:a7:fb:8c:b9:
d4:aa:4e:75:c1:1d:56:f0:ce:58:c6:62:01:1a:d5:7b:c2:c9:
58:fb:a6:1e:f0:01:98:30:74:44:15:9b:e2:ca:b9:4c:0a:12:
e1:8c:b3:2b:c1:2a:4d:7b:0e:1e:b7:13:0b:ca:91:43:42:ac:
d6:45:01:7d:09:2d:15:91:6d:c6:e6:80:87:93:c6:66:0d:42:
10:17:da:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0/ifD/R+9oqk45TP2JrO/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwMzMwMTYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDJhNzU3MzE3ZjNlOTNjZTIwZTgyNmJjYzhkMDAwNzJmMzAxMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/xKI8ikmbfTY0NLZhal11btyTyB
1GW3Dog366p8sFbiEYRnf+j1wfILCQVPoCjkCKP+BhliVIwrxdrOTF/LI23tbHpP
o1hGpyCcfCqdoY6jgjU0FG2WPm2gUWLgDKvtU1F9rVhno5Pvt7mwc2DpEO26dR5g
2ZzAp2wmHJvJo1zIEb/nYfPhEtdZcL+Pfl3VDx87ay7ter0wPa+DkiprSGp0A+CK
Op7gRf2u9wzZkzcyCS4TuxITdXBe+qjarGc5j1ynVno3AntRPkVZFlXp0WWD+Ntz
25mcZbFXzKZucmlrRR/G3yD3799An8J2blPllgsxo2xQebjgJYUW8bsvNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0qdXMX8+k84g6Ca8yNAAcvMBJfMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvUFNwMWN4Zno2VHppRG9KcnpJMEFCeTh3RWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvuMMA0G
CSqGSIb3DQEBCwUAA4IBAQA1iJCZUL+dB5xLHsaHJKxx6e/rcXQXe69qe7E4MriT
VIb+jgEceYGSRSv2+W7b8r99ZNtG74DvOHgbnuV8j9vGmVrvo4aWu0iXlen7R3jO
A5u2Vixj3v+AgkozzlAYBgzFVXXdd7qPT0dUawi80+/wheB1MrRmM8Nr9YzNujJo
72Xjm23tyJr7HlEnPhBg/GnzDSQSGUkxYwsfh7G2CF2E5ID9EK+u2Jm05XuxCVh6
hKf7jLnUqk51wR1W8M5YxmIBGtV7wslY+6Ye8AGYMHREFZviyrlMChLhjLMrwSpN
ew4etxMLypFDQqzWRQF9CS0VkW3G5oCHk8ZmDUIQF9rJ
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:24 2026 by rpki-client