Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/pdMhOaLeRonp7wCiwxqXQZvCAZI.roa
File: pdMhOaLeRonp7wCiwxqXQZvCAZI.roa (raw, json)
Hash identifier: RRrhsf4B191wjXJbfTsj+p0cJwZkT97ZpqaBwHuPBfg=
Subject key identifier: A5:D3:21:39:A2:DE:46:89:E9:EF:00:A2:C3:1A:97:41:9B:C2:01:92
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 01A14320DD1A49ACCA4271D14A10877949C8
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/pdMhOaLeRonp7wCiwxqXQZvCAZI.roa
Signing time: Fri 16 Oct 2026 05:13:09 +0000
ROA not before: Fri 16 Oct 2026 05:13:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8126
IP address blocks: 152.175.0.0/16 maxlen: 24
152.175.0.0/17 maxlen: 24
152.175.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:20:dd:1a:49:ac:ca:42:71:d1:4a:10:87:79:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Oct 16 05:13:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5d32139a2de4689e9ef00a2c31a97419bc20192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:ab:5a:2d:55:c1:37:a2:e1:05:ae:bc:e4:
5d:8e:17:b9:91:6b:21:00:12:8b:9e:06:03:a4:b7:
2a:99:5f:f9:5c:7e:a7:fd:d0:44:85:31:d8:12:c9:
69:2c:d8:01:8b:a9:5c:a9:9b:d5:d3:04:0d:88:8c:
5b:f7:52:fd:9b:e7:2d:3f:04:1f:d8:31:47:63:ce:
b5:9c:1a:c7:a5:a8:c0:7f:77:be:49:bb:3b:16:e4:
bc:76:ea:a7:9b:53:47:bc:a2:cb:80:4d:ca:4d:55:
f8:6d:da:0f:d2:d3:d5:7a:2f:1c:d8:02:90:8a:c9:
a7:81:97:53:22:48:4d:d6:bf:be:81:d5:e7:b1:a3:
b2:68:52:8c:93:27:98:e0:2a:59:0c:ef:94:c2:81:
51:81:8a:ec:7d:79:ef:41:1e:f2:03:86:38:ad:25:
73:fb:d4:34:a7:39:04:5f:4a:95:37:ec:c4:44:36:
cf:d8:6c:86:4f:7c:f9:3d:d3:94:e9:54:9e:db:79:
06:29:8a:3b:75:ed:6a:c0:2f:e5:09:75:d5:37:91:
68:ce:2d:66:b4:04:0a:5d:24:8b:ba:e9:3f:53:f2:
95:11:a9:99:c3:15:55:f8:79:1c:18:10:eb:d7:7f:
54:00:65:dc:28:52:49:fe:83:11:e4:04:25:f1:a6:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:21:39:A2:DE:46:89:E9:EF:00:A2:C3:1A:97:41:9B:C2:01:92
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/pdMhOaLeRonp7wCiwxqXQZvCAZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:2a:64:d6:e5:f2:27:91:30:71:e7:e5:63:84:7b:f7:36:2c:
72:42:37:af:00:a4:6e:fe:43:61:77:da:22:c1:3a:78:53:81:
bd:b3:d1:45:97:68:07:25:9f:45:c9:7f:d5:a7:96:3f:05:0b:
61:f8:d9:68:76:3e:ee:d7:df:7a:c5:bc:c9:ec:b4:58:df:16:
5b:80:a1:67:0c:1f:60:0d:c9:da:cd:61:1f:d0:dc:db:e4:60:
33:98:6b:3d:37:0b:65:2a:46:d8:86:32:ab:ca:e0:9f:ca:cf:
4a:77:ae:6a:ac:c3:4a:56:82:2f:7b:15:71:0c:ba:0d:32:ed:
75:51:00:67:7f:2b:54:99:df:5b:66:40:07:72:d4:f8:33:6d:
8f:32:22:fa:61:4d:3d:a2:0e:77:a3:1b:20:dc:c0:0f:f7:71:
97:96:1d:cc:ab:9d:24:fc:c3:f0:71:0c:69:3d:ba:e9:95:c4:
ed:3f:8d:b7:f0:d1:c0:da:31:9c:3a:75:30:cc:57:ec:ac:0c:
de:22:7c:24:06:e8:9d:6c:75:5f:0c:c8:65:d7:17:02:eb:6b:
d8:e5:e1:4b:71:47:f2:b9:50:90:3f:52:9b:89:87:d2:70:33:
1f:5e:e9:86:30:42:c0:3a:e6:65:98:38:13:63:b3:1a:05:ff:
98:09:c1:be
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAaFDIN0aSazKQnHRShCHeUnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi
NGI1ODYwHhcNMjYxMDE2MDUxMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWQzMjEzOWEyZGU0Njg5ZTllZjAwYTJjMzFhOTc0MTliYzIwMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gSrWi1VwTei4QWuvORdjhe5kWsh
ABKLngYDpLcqmV/5XH6n/dBEhTHYEslpLNgBi6lcqZvV0wQNiIxb91L9m+ctPwQf
2DFHY861nBrHpajAf3e+Sbs7FuS8duqnm1NHvKLLgE3KTVX4bdoP0tPVei8c2AKQ
ismngZdTIkhN1r++gdXnsaOyaFKMkyeY4CpZDO+UwoFRgYrsfXnvQR7yA4Y4rSVz
+9Q0pzkEX0qVN+zERDbP2GyGT3z5PdOU6VSe23kGKYo7de1qwC/lCXXVN5Fozi1m
tAQKXSSLuuk/U/KVEamZwxVV+HkcGBDr139UAGXcKFJJ/oMR5AQl8abtrwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFKXTITmi3kaJ6e8AosMal0GbwgGSMB8GA1UdIwQY
MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt
MWFhNmZlNDA2YTU4LzEvcGRNaE9hTGVSb25wN3dDaXd4cVhRWnZDQVpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4
LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmK8wDQYJ
KoZIhvcNAQELBQADggEBADAqZNbl8ieRMHHn5WOEe/c2LHJCN68ApG7+Q2F32iLB
OnhTgb2z0UWXaAcln0XJf9Wnlj8FC2H42Wh2Pu7X33rFvMnstFjfFluAoWcMH2AN
ydrNYR/Q3NvkYDOYaz03C2UqRtiGMqvK4J/Kz0p3rmqsw0pWgi97FXEMug0y7XVR
AGd/K1SZ31tmQAdy1PgzbY8yIvphTT2iDnejGyDcwA/3cZeWHcyrnST8w/BxDGk9
uumVxO0/jbfw0cDaMZw6dTDMV+ysDN4ifCQG6J1sdV8MyGXXFwLra9jl4UtxR/K5
UJA/UpuJh9JwMx9e6YYwQsA65mWYOBNjsxoF/5gJwb4=
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:42:05 2026 by rpki-client