Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/K5FlPwd7bxat5h_TNP1jBg37PoQ.roa
File: K5FlPwd7bxat5h_TNP1jBg37PoQ.roa (raw, json)
Hash identifier: bQ/EHOxIGYyc8TLzJrfUgqfhVQ6C9lgOrZjlX1ZtAOM=
Subject key identifier: 2B:91:65:3F:07:7B:6F:16:AD:E6:1F:D3:34:FD:63:06:0D:FB:3E:84
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A05D064B8105273D9C3C3A312F922316C4
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/K5FlPwd7bxat5h_TNP1jBg37PoQ.roa
Signing time: Tue 01 Sep 2026 12:51:28 +0000
ROA not before: Tue 01 Sep 2026 12:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 43.240.150.0/24 maxlen: 24
43.240.151.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:06:4b:81:05:27:3d:9c:3c:3a:31:2f:92:23:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 1 12:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b91653f077b6f16ade61fd334fd63060dfb3e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:50:52:52:39:8c:7f:a1:34:78:94:48:54:
ab:70:36:37:af:fe:22:ce:90:16:27:97:02:85:4b:
d8:7a:86:3a:b6:8c:11:be:4c:5d:2c:9e:11:24:41:
5a:1b:e9:de:f7:cd:b8:65:10:4c:c7:99:cc:77:36:
9e:6a:d7:da:0d:5e:70:be:ed:97:1d:44:23:65:7f:
f6:79:56:63:f4:1d:0f:8b:7d:7d:8e:81:b9:26:39:
8a:9d:01:45:17:3c:08:0e:66:1e:a3:ac:36:24:32:
20:31:8d:5d:41:a3:31:ba:f0:7c:a6:6a:a0:34:03:
26:66:7e:49:7d:df:07:10:5e:8f:3f:3a:f9:94:1d:
46:19:cf:e2:9b:78:4c:ce:e5:70:8d:99:01:b2:78:
86:d7:99:7d:b4:73:98:20:1b:56:02:36:41:c1:9d:
f7:db:d7:6e:d8:3b:31:6e:53:02:9e:d4:c4:29:80:
51:98:0a:77:a1:69:b3:2a:17:d5:2b:9f:a6:96:7e:
d7:e8:fc:e5:8d:0f:23:ee:c3:3b:5e:2d:5c:fe:62:
95:46:42:b5:7c:fc:fe:d8:95:b5:b5:ce:7a:78:af:
cb:34:f4:01:8e:a5:f1:a4:88:b4:51:71:42:42:a3:
56:b2:79:f1:7f:8d:29:01:f6:bd:06:11:30:a1:4c:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:65:3F:07:7B:6F:16:AD:E6:1F:D3:34:FD:63:06:0D:FB:3E:84
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/K5FlPwd7bxat5h_TNP1jBg37PoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/23
91.109.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:57:25:c7:7d:86:9f:fe:c9:2c:b9:e4:40:ce:ac:56:b6:49:
dc:b0:06:02:68:c8:0b:56:97:42:d8:ea:30:83:cc:09:8c:d7:
bc:d5:b6:c9:bd:00:42:c5:14:b4:e5:8a:84:67:07:8d:fc:25:
e2:22:5b:b9:07:c6:bd:1d:db:ba:97:54:50:1c:c8:79:d2:1d:
49:1f:4a:19:ed:f0:47:65:7c:49:f0:9e:03:6e:ac:f7:9d:3f:
af:0f:43:31:df:1a:c8:44:b5:b1:0f:9c:d2:8e:1c:36:79:3e:
93:85:f9:cf:27:b7:6a:1d:a4:4c:75:5c:3f:66:18:44:c3:a4:
9c:4f:4b:b4:97:40:32:70:b7:b6:cd:38:b1:dc:21:34:9b:be:
29:8a:6f:e5:24:8a:4c:ca:68:a7:60:6a:21:77:78:a9:82:0c:
54:8c:af:6f:1a:3b:bc:c1:0b:a8:d5:66:bf:f2:f9:73:91:e6:
74:9b:1a:fe:06:7a:48:cd:b0:9d:89:39:26:1d:6e:f7:e6:55:
5b:f7:6a:90:bf:05:8a:65:17:4f:a4:26:a5:44:fe:4c:a9:e4:
e8:15:31:22:0e:4d:f8:eb:6c:83:30:cb:7a:ab:fb:5f:58:cf:
14:ee:45:54:b5:ea:d4:18:80:ef:3f:0a:10:a2:31:32:49:68:
97:e7:3b:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBdBkuBBSc9nDw6MS+SIxbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwOTAxMTI1MTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjkxNjUzZjA3N2I2ZjE2YWRlNjFmZDMzNGZkNjMwNjBkZmIzZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKpQUlI5jH+hNHiUSFSrcDY3r/4i
zpAWJ5cChUvYeoY6towRvkxdLJ4RJEFaG+ne9824ZRBMx5nMdzaeatfaDV5wvu2X
HUQjZX/2eVZj9B0Pi319joG5JjmKnQFFFzwIDmYeo6w2JDIgMY1dQaMxuvB8pmqg
NAMmZn5Jfd8HEF6PPzr5lB1GGc/im3hMzuVwjZkBsniG15l9tHOYIBtWAjZBwZ33
29du2DsxblMCntTEKYBRmAp3oWmzKhfVK5+mln7X6PzljQ8j7sM7Xi1c/mKVRkK1
fPz+2JW1tc56eK/LNPQBjqXxpIi0UXFCQqNWsnnxf40pAfa9BhEwoUxnDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCuRZT8He28WreYf0zT9YwYN+z6EMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvSzVGbFB3ZDdieGF0NWhfVE5QMWpCZzM3UG9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBK/CWAwQA
W20pMA0GCSqGSIb3DQEBCwUAA4IBAQCoVyXHfYaf/sksueRAzqxWtkncsAYCaMgL
VpdC2Oowg8wJjNe81bbJvQBCxRS05YqEZweN/CXiIlu5B8a9Hdu6l1RQHMh50h1J
H0oZ7fBHZXxJ8J4Dbqz3nT+vD0Mx3xrIRLWxD5zSjhw2eT6ThfnPJ7dqHaRMdVw/
ZhhEw6ScT0u0l0AycLe2zTix3CE0m74pim/lJIpMyminYGohd3ipggxUjK9vGju8
wQuo1Wa/8vlzkeZ0mxr+BnpIzbCdiTkmHW735lVb92qQvwWKZRdPpCalRP5MqeTo
FTEiDk3462yDMMt6q/tfWM8U7kVUterUGIDvPwoQojEySWiX5zvk
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:49 2026 by rpki-client