Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/F4DY05_V7rXUz_i0vD0UJhb7mqA.roa
File: F4DY05_V7rXUz_i0vD0UJhb7mqA.roa (raw, json)
Hash identifier: FY5ixr7V6saXjHj8lrtXFIIS/4Tw0mr6KPtgX3CxeIM=
Subject key identifier: 17:80:D8:D3:9F:D5:EE:B5:D4:CF:F8:B4:BC:3D:14:26:16:FB:9A:A0
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 01A03EB72F2A581B9779E7E410A5C4EC121C
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/F4DY05_V7rXUz_i0vD0UJhb7mqA.roa
Signing time: Wed 26 Aug 2026 15:36:27 +0000
ROA not before: Wed 26 Aug 2026 15:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204490
IP address blocks: 153.79.180.0/22 maxlen: 22
159.200.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:b7:2f:2a:58:1b:97:79:e7:e4:10:a5:c4:ec:12:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Aug 26 15:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1780d8d39fd5eeb5d4cff8b4bc3d142616fb9aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:d5:9f:82:c4:51:7d:67:06:3f:09:93:29:
ff:0d:f7:bd:27:85:d5:7a:0b:1d:ce:4e:99:df:c6:
e7:a0:ac:b2:90:a5:4a:8d:ff:67:4f:11:c4:bf:32:
cd:9c:49:b4:a9:f3:32:a9:23:69:13:a8:73:b9:b2:
11:61:6a:32:fc:7d:8c:6b:d1:49:02:32:02:1f:60:
be:0f:1b:24:20:15:de:c8:67:ae:27:7e:80:54:cb:
09:fa:d8:66:c8:18:fc:0e:af:90:ac:d2:c2:1c:7d:
a1:b2:7c:79:40:94:45:35:a9:4a:3c:cc:23:0f:da:
a0:5a:e3:bb:4a:c3:75:6b:2b:e7:e7:50:c1:19:17:
e0:1c:b3:f1:5c:8b:a7:3c:71:99:1b:40:14:f0:bb:
4c:75:83:f4:99:8f:e9:61:a4:1c:51:5e:3e:f3:d9:
75:da:d3:6f:d4:8a:02:6f:37:bc:ad:ed:d0:4b:57:
85:d4:3c:25:7e:20:eb:c5:4c:44:63:d7:6c:d6:a7:
46:b5:60:20:0c:67:a3:6d:c8:55:95:97:29:27:b4:
9a:ff:0a:9e:a7:22:2b:c7:39:eb:30:61:2f:82:f7:
cf:74:89:22:21:b7:ae:6c:e1:6c:18:97:a6:8f:35:
68:f4:0a:51:47:90:bf:43:5c:70:e8:2d:db:2d:ca:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:D8:D3:9F:D5:EE:B5:D4:CF:F8:B4:BC:3D:14:26:16:FB:9A:A0
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/F4DY05_V7rXUz_i0vD0UJhb7mqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.79.180.0/22
159.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d3:8b:f8:a9:68:13:e5:25:03:f5:f8:5e:1a:e1:54:f3:b9:
fa:6f:af:4b:48:62:74:c0:b9:ae:38:5e:ca:80:5f:cc:bd:e4:
ec:d8:c6:9f:48:79:17:31:15:75:85:08:36:f7:a5:29:a7:68:
8b:fd:20:1f:8f:98:1c:cf:d7:33:d1:89:8f:a8:13:51:30:31:
ec:ee:41:ad:43:06:8a:d6:64:52:e6:97:68:eb:95:78:41:7a:
05:f9:16:57:bf:b6:a3:6b:22:d7:2a:a6:e6:04:b9:9c:a6:f0:
cd:11:15:fa:88:48:6c:23:f7:59:bd:a6:6c:62:13:90:e8:99:
80:a2:c4:66:ca:97:65:f8:2b:7f:00:ce:ff:7c:bb:37:47:e8:
21:b2:a0:81:74:1c:cb:d1:b2:ef:8a:56:b2:aa:b3:14:7a:0a:
f8:07:94:f2:18:ff:05:e0:e7:da:5f:86:ee:bc:3c:3f:65:38:
fc:cd:e9:27:51:d1:8f:dd:6a:61:06:75:43:81:2e:32:49:62:
78:03:0d:da:77:9e:98:79:84:6b:29:26:bf:f6:2e:8d:10:44:
4f:0b:43:ca:3a:0d:10:84:8b:d8:23:78:10:30:0d:e5:70:9d:
c5:b8:bc:c2:56:b2:97:f2:5b:50:76:06:45:fb:88:56:d3:97:
5d:a2:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:33:06 2026 by rpki-client