Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/Du0TfAsYdMk0CJ2zqvUFpo0-qyQ.roa
File: Du0TfAsYdMk0CJ2zqvUFpo0-qyQ.roa (raw, json)
Hash identifier: 9sKSx901oDe++es16PvLgOI1pRTpkLDtrTtxAUjUzXA=
Subject key identifier: 0E:ED:13:7C:0B:18:74:C9:34:08:9D:B3:AA:F5:05:A6:8D:3E:AB:24
Certificate issuer: /CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Certificate serial: 01A08ACDF095FAF2DAA4D9D9C7DB9FD9B61A
Authority key identifier: B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/Du0TfAsYdMk0CJ2zqvUFpo0-qyQ.roa
Signing time: Thu 10 Sep 2026 10:12:27 +0000
ROA not before: Thu 10 Sep 2026 10:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50293
IP address blocks: 150.237.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:cd:f0:95:fa:f2:da:a4:d9:d9:c7:db:9f:d9:b6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Validity
Not Before: Sep 10 10:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eed137c0b1874c934089db3aaf505a68d3eab24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:78:94:51:81:61:4d:57:e8:4c:58:4e:5b:
cb:ac:73:ff:a4:48:32:85:93:fd:76:72:47:1a:77:
6d:77:33:28:55:2a:57:2f:7d:d7:83:22:3e:98:35:
39:55:b6:d1:4e:1f:ac:71:d8:99:32:dc:3b:f8:eb:
40:fc:59:ba:3d:d6:23:5f:3a:6b:17:74:a5:17:f4:
bd:93:8c:68:9d:6b:ed:15:ee:aa:3e:a1:17:9a:35:
78:ac:48:5a:2c:ac:83:22:d6:c7:cc:44:cd:b7:01:
bc:e1:47:d4:6f:4d:e3:a4:d6:7b:e8:42:78:f8:ec:
fb:46:25:90:fa:fc:5b:6b:dc:23:73:e1:a8:fd:ba:
4d:3d:80:bd:3c:c7:9a:b4:8d:d2:88:14:be:09:4d:
e0:0e:68:c7:37:b3:d5:97:76:8e:bd:cc:68:d1:b8:
d0:b2:b1:8d:71:3a:f5:35:07:09:69:0e:c5:9b:6d:
10:fe:d9:c6:a9:20:62:b8:6a:2a:34:c5:88:97:0b:
8f:64:09:75:9b:e3:dc:f4:7b:70:8b:20:94:aa:4c:
3f:16:e9:d9:51:12:98:1c:cb:f4:bf:28:47:dc:af:
17:6d:c9:5f:8a:07:3a:56:54:2b:17:ec:b5:b0:30:
16:49:5c:26:da:87:13:f8:fd:8b:5d:dc:9f:42:a6:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:13:7C:0B:18:74:C9:34:08:9D:B3:AA:F5:05:A6:8D:3E:AB:24
X509v3 Authority Key Identifier:
keyid:B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/Du0TfAsYdMk0CJ2zqvUFpo0-qyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.126.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cd:c7:72:39:71:5a:b5:b4:c0:c3:06:4e:55:d5:88:e0:19:
0b:d0:53:3d:9a:0e:07:a2:ec:a8:ad:96:e3:33:c0:85:ab:d7:
db:eb:e1:b7:7a:67:1b:61:a5:d7:53:16:31:0f:8f:77:a2:06:
f0:5a:83:7d:0f:a7:79:e9:29:c1:58:cf:cc:c8:84:30:88:ce:
57:54:26:3b:57:35:ff:52:7f:95:99:46:7a:f3:a7:92:7a:ec:
03:bb:3e:76:77:19:74:2c:a0:4b:00:24:7e:5f:a6:cf:90:f0:
1d:1c:8d:95:c3:8c:9e:2a:d9:cc:2e:b0:79:5e:d7:60:69:4a:
e7:c4:2e:3f:ba:1d:3c:8f:a3:b4:59:4a:e4:d8:89:b0:ab:2d:
f2:2d:2a:70:76:ea:e9:02:f2:76:cc:12:79:72:d5:52:82:9d:
24:96:97:ea:df:bd:b5:dd:b0:a8:9e:36:82:81:8a:1c:2f:b9:
cd:48:4a:17:d7:50:2d:ad:33:73:9e:45:13:9b:44:86:5a:b8:
de:88:ba:8f:b9:04:13:b2:d1:f1:8a:16:1c:8e:4c:99:d9:4f:
30:cd:bb:fd:70:5d:21:d2:3a:3f:92:2e:e1:b7:58:ff:b4:00:
6c:92:b7:bf:54:80:ac:d7:6c:fd:0f:e5:b5:e4:73:73:1a:2d:
d0:6a:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:17:33 2026 by rpki-client