Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cpFn784DaG7ywTfqHJ_53BCndKA.roa
File: cpFn784DaG7ywTfqHJ_53BCndKA.roa (raw, json)
Hash identifier: LxHDySSVfF1Q5FFXsgZmRDNDdSZYtzx4NeI273O9Bus=
Subject key identifier: 72:91:67:EF:CE:03:68:6E:F2:C1:37:EA:1C:9F:F9:DC:10:A7:74:A0
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FA882D5B28E84658058DECFF08DC07BE7
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cpFn784DaG7ywTfqHJ_53BCndKA.roa
Signing time: Tue 28 Jul 2026 11:36:14 +0000
ROA not before: Tue 28 Jul 2026 11:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211868
IP address blocks: 150.251.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:82:d5:b2:8e:84:65:80:58:de:cf:f0:8d:c0:7b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jul 28 11:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=729167efce03686ef2c137ea1c9ff9dc10a774a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:2a:8d:aa:77:56:c6:45:20:f7:13:b4:ab:
d2:68:b8:9b:fa:92:80:3b:b2:ed:c6:fa:42:42:14:
ba:79:56:6a:a9:ea:cb:70:e0:1a:4b:3d:8e:1e:c6:
25:84:34:d2:d7:af:33:11:f9:78:f6:af:ba:c7:f4:
e8:c7:88:49:f5:3b:e8:a3:7a:ed:60:a9:98:b0:c6:
c2:32:2a:3a:16:44:80:aa:52:2a:b3:05:38:f9:31:
5d:c7:b1:f8:a9:a3:be:02:84:44:2a:a0:ed:54:a4:
14:9c:5a:a6:88:c7:d1:0f:d7:88:63:65:97:eb:37:
e4:5c:72:fd:52:bf:be:22:6c:a2:3e:5e:98:f4:19:
ac:e9:b7:a5:ba:4d:4d:d4:81:44:da:28:63:39:c1:
a4:92:c4:08:a2:b9:ac:62:a7:95:4b:5e:6d:fe:7e:
b9:63:3e:ed:01:65:38:29:28:ad:4a:e1:67:d4:53:
5c:57:60:0e:be:31:c9:0a:82:4f:51:4d:18:87:ea:
02:0a:12:43:0f:e1:ec:6e:de:ce:3b:7d:ee:cb:f0:
40:51:e8:79:06:cb:34:ba:c7:84:a2:12:b4:b5:81:
75:ac:ea:a7:70:e6:21:36:4a:f3:1a:e6:e6:bf:99:
e0:8b:54:19:27:b4:89:4b:0b:5b:75:85:23:1d:b5:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:67:EF:CE:03:68:6E:F2:C1:37:EA:1C:9F:F9:DC:10:A7:74:A0
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/cpFn784DaG7ywTfqHJ_53BCndKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.129.0/24
Signature Algorithm: sha256WithRSAEncryption
25:00:0e:1a:6b:3d:de:d5:c8:24:5b:8d:08:a3:6f:fe:7c:cf:
cd:4a:27:0e:4e:7e:ea:14:7f:60:74:f6:c9:0c:e7:5c:83:f1:
5b:fd:a1:66:df:f1:6c:11:c6:83:56:02:45:14:5b:10:fe:d7:
87:3c:5a:94:af:da:a5:ac:cc:0c:71:6a:7c:13:ea:95:e2:22:
d2:06:bb:7c:c7:35:9d:70:6b:87:b4:c9:bc:c9:1a:e3:f4:42:
40:83:e5:01:1d:33:6e:14:2a:8b:a0:05:eb:48:56:d5:05:8b:
1a:7c:b3:d6:80:7c:75:93:4d:be:c6:d8:aa:b5:e5:28:42:3f:
f2:da:30:b2:9d:9c:f7:4e:bc:1a:bf:96:f2:6a:b4:c4:f1:d3:
8a:1a:79:79:c9:67:cf:00:4f:23:85:a8:61:a1:c6:db:ce:76:
bb:3c:7b:15:dc:1e:c8:42:1f:02:d5:a6:72:ea:37:c5:3c:40:
32:52:db:a3:96:74:80:ea:89:e8:92:27:ea:f4:09:0d:68:6c:
0c:a8:ff:a0:07:5d:13:9e:24:65:e4:69:8f:dc:80:af:a8:54:
f3:ab:a1:97:1a:c2:46:91:ae:58:10:15:17:f7:17:72:b4:4c:
41:a9:99:f5:c7:df:73:ab:6d:e7:6a:9b:b1:f5:68:ee:b9:b8:
68:52:14:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:46 2026 by rpki-client