Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/nO4e1iPz6nw4wI9dYoGmrGxsfiM.roa
File: nO4e1iPz6nw4wI9dYoGmrGxsfiM.roa (raw, json)
Hash identifier: 6u5RikPhPL53C35fkq4blEIzIN95LHfOEQtej2WfjkE=
Subject key identifier: 9C:EE:1E:D6:23:F3:EA:7C:38:C0:8F:5D:62:81:A6:AC:6C:6C:7E:23
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D295041C6903DA3A6C8E8B103EEFA8741
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/nO4e1iPz6nw4wI9dYoGmrGxsfiM.roa
Signing time: Thu 26 Mar 2026 08:43:38 +0000
ROA not before: Thu 26 Mar 2026 08:43:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 150.251.141.0/24 maxlen: 24
150.251.142.0/24 maxlen: 24
150.251.143.0/24 maxlen: 24
150.251.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:50:41:c6:90:3d:a3:a6:c8:e8:b1:03:ee:fa:87:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 26 08:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cee1ed623f3ea7c38c08f5d6281a6ac6c6c7e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:8d:b3:c5:5d:27:b7:7b:a2:81:0f:00:04:
f8:8a:21:a8:dd:39:43:99:ee:93:25:44:52:18:45:
59:2d:c6:13:e0:08:fe:fd:09:73:41:c6:11:5d:8e:
55:45:72:0f:f8:e8:8d:e6:af:67:4d:d8:0b:c2:e8:
bf:cb:0a:a5:5c:75:d0:71:a0:62:2c:18:6d:ec:69:
e0:e0:2e:f1:3d:c9:20:8b:4b:f8:ab:d2:5e:f8:ea:
0a:57:da:02:50:95:d2:28:43:de:21:0e:6e:bc:1c:
42:81:ac:02:ca:7f:89:3a:54:ca:39:55:34:3e:01:
54:a4:99:5e:19:47:05:50:59:20:9f:81:f8:6c:85:
bd:8a:fe:65:fc:56:c0:38:89:dd:1b:f2:53:81:33:
16:fb:7b:56:e2:19:32:27:2b:6e:c2:db:16:2b:17:
1f:7f:b2:14:46:23:7c:fb:99:b0:c6:cf:84:a5:77:
cb:23:a5:13:8d:88:3a:fa:e5:36:97:12:c2:7b:88:
35:cf:1e:10:26:07:fa:e4:93:c9:46:08:95:0b:4f:
07:a4:65:70:08:4c:63:3a:91:0d:ce:65:8e:74:ec:
c8:4b:c0:0b:b6:5e:ef:14:3a:5b:2a:5b:7e:f3:2f:
89:74:48:f4:01:9c:85:f5:fc:59:55:76:f7:c0:10:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:1E:D6:23:F3:EA:7C:38:C0:8F:5D:62:81:A6:AC:6C:6C:7E:23
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/nO4e1iPz6nw4wI9dYoGmrGxsfiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.141.0-150.251.144.255
Signature Algorithm: sha256WithRSAEncryption
25:cd:25:2d:3b:d0:8a:9b:76:58:32:f4:7f:cf:45:33:46:99:
8e:30:20:47:9f:9b:f1:7e:8c:12:91:7e:b9:4f:8a:8d:b4:72:
d3:a4:dd:f0:2e:5c:06:93:a3:84:7c:89:68:18:c7:21:99:0e:
e4:a9:58:39:9d:bc:f5:94:ef:29:34:06:69:6d:d5:a7:25:d9:
c4:25:ea:d5:15:8b:26:e5:80:bf:41:46:65:cf:47:cd:cd:cf:
ec:2b:94:7e:cb:5a:0c:24:df:48:17:c4:3e:51:e3:96:4b:2a:
fa:dd:01:7e:b1:91:e2:ed:84:05:fc:32:33:62:48:12:e0:f6:
68:1b:cd:22:58:69:03:f6:24:7f:48:5b:c7:49:92:27:45:8d:
aa:4d:57:64:9d:84:71:8e:2c:69:e6:80:70:66:d1:0d:00:0e:
14:cd:f3:c0:11:00:68:7b:91:6b:5e:d7:00:7e:c5:d5:ee:8e:
53:23:4f:16:23:1f:06:86:f5:f9:b2:ff:6d:80:b1:0f:a8:1b:
2c:67:22:76:73:e5:8c:69:72:91:1e:09:83:c6:6a:a7:64:e4:
9b:67:ba:a9:25:14:98:67:4c:c3:35:64:f6:86:c0:29:00:68:
55:5c:8f:12:b0:81:9a:24:aa:ce:7a:72:f2:30:4c:6b:b8:91:
5c:e1:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:37 2026 by rpki-client