Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/Tg0VG8fSdqbJCxlAFzsdyvDNjao.roa
File: Tg0VG8fSdqbJCxlAFzsdyvDNjao.roa (raw, json)
Hash identifier: T71Pw7S2XlsVqjXwGeVC43gUiJoQvzn+edRwWm+/+O4=
Subject key identifier: 4E:0D:15:1B:C7:D2:76:A6:C9:0B:19:40:17:3B:1D:CA:F0:CD:8D:AA
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019E68EE976E06E3356103C3084A32635DAA
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/Tg0VG8fSdqbJCxlAFzsdyvDNjao.roa
Signing time: Wed 27 May 2026 10:15:27 +0000
ROA not before: Wed 27 May 2026 10:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401881
IP address blocks: 194.33.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:ee:97:6e:06:e3:35:61:03:c3:08:4a:32:63:5d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: May 27 10:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e0d151bc7d276a6c90b1940173b1dcaf0cd8daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:6c:c9:5e:42:68:4f:cf:5b:10:f5:39:7e:
49:09:c0:f9:49:82:f2:35:e4:34:86:fd:d3:18:e6:
b6:e2:f6:e0:1b:e5:79:9a:f6:87:f4:35:b8:a4:7f:
b7:bf:07:47:4d:d2:1e:41:fd:5c:0d:19:8c:40:a3:
0f:2d:b6:46:28:20:5d:62:67:3b:e9:d9:95:11:ed:
11:8a:cf:94:8d:25:be:f9:26:d6:ee:b7:eb:1a:9f:
6f:3a:a9:bd:ba:2f:79:a0:07:15:32:d5:27:52:c8:
6f:b3:60:b5:48:71:19:6e:52:30:cd:b5:a5:38:1f:
a8:f3:00:e1:75:f4:e2:67:a9:46:e6:ef:f0:e7:f5:
79:bb:0f:59:b7:2b:b8:b4:73:12:dd:de:4c:e9:da:
55:f4:2f:0d:d0:09:cc:e3:77:e3:8b:39:d3:d8:04:
aa:1b:8d:e5:68:6f:75:ad:47:fe:cc:e0:43:dd:49:
74:68:62:49:95:be:71:3e:5e:ce:f3:98:59:93:5c:
8d:9c:af:ad:cd:0a:4d:88:6f:d2:e3:16:ed:15:20:
cd:0d:b4:8e:91:2f:33:8c:41:ee:f0:f4:f1:2e:80:
d5:39:3d:b2:84:71:32:85:da:b4:5c:c4:48:1f:24:
04:46:1b:bc:f5:f9:85:41:d3:77:cb:82:17:15:00:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:15:1B:C7:D2:76:A6:C9:0B:19:40:17:3B:1D:CA:F0:CD:8D:AA
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/Tg0VG8fSdqbJCxlAFzsdyvDNjao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.150.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c4:2b:5b:30:81:82:ed:8d:79:4b:a3:51:28:9f:db:ab:92:
55:4c:2d:2f:a1:83:3a:fa:4f:8b:a4:14:f4:a8:97:4b:58:f5:
18:e0:9c:85:90:f1:46:9e:7b:a9:b4:7a:1d:af:ff:37:b2:d5:
41:f7:6d:06:ec:e3:2b:d7:80:2d:5f:e6:80:cb:2b:1f:20:bb:
1c:ed:c0:63:f6:65:b1:d6:26:50:77:d1:ea:2f:c5:8d:cc:82:
4b:e7:d5:96:a1:6d:0a:d2:84:a8:29:41:98:94:49:43:6e:ac:
28:85:b8:63:4d:a4:2f:df:c5:76:c8:ea:c1:dd:13:be:e9:65:
6e:7d:d3:05:4b:53:e5:b8:e4:b5:61:e0:9a:de:cc:22:ef:40:
92:db:07:04:e1:67:7c:9b:51:5c:f7:32:d0:63:e2:99:ae:60:
15:33:82:3b:40:fa:c1:22:c7:aa:44:f4:d7:23:b6:d2:95:3e:
b3:01:97:48:d5:ff:c5:9d:9e:5d:a4:46:34:e9:67:e8:c2:53:
23:25:42:2f:b2:43:60:0e:00:5c:97:d8:8d:ce:94:c0:68:99:
bb:95:20:99:b5:c4:4d:52:71:d7:a2:28:72:a2:11:d1:87:9f:
ac:ae:7d:2c:37:52:d6:4a:89:61:bf:d6:00:04:2b:14:82:87:
ad:bc:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:22 2026 by rpki-client